Recently modified zeroday vulnerabilities for "apple ios and ipados"

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3

First published (updated )

CVE-2023-41064

ubuntu/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95

Severity

8.8

Exploited

Zeroday

Buffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.

1 / 76

Source: Ubuntu

First published (updated )

CVE-2023-32435

Apple iOS, iPadOS, and macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 74

Severity

7.8

Exploited

Zeroday

EPSS

0.01%

Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.

1 / 50

Source: MITRE

First published (updated )

CVE-2025-30456

iPadOSBuffer Overflow, Race Condition

Risk 55

Severity

3.3

Zeroday

Buffer Overflow, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.

1 / 24

Source: MITRE

First published (updated )

CVE-2024-23256

iPadOSAccessibility. A privacy issue was addressed with improved private data redaction for log entries.

Risk 55

Severity

4.3

Zeroday

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4. An app may be able to read sensitive location information.

1 / 2

Source: MITRE

First published (updated )

CVE-2024-23243