Apple Products Multiple Vulnerabilities

Last Update Date: 23 Feb 2023 Release Date: 26 Jan 2023 7476 Views

RISK: Extremely High Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

Note:
CVE-2022-42856 is being exploited in the wild.

[Updated on 2023-02-23]

Updated Vulnerability Identifier. Apple revised the security content of iOS 16.3 and iPadOS 16.3 to include three new vulnerabilities (CVE-2023-23520, CVE-2023-23530, and CVE-2023-23531)

Impact

Denial of Service
Elevation of Privilege
Remote Code Execution
Information Disclosure
Security Restriction Bypass

System / Technologies affected

Version prior to iOS 12.5.7
Version prior to iOS 15.7.3
Version prior to iOS 16.3
Version prior to iPadOS 15.7.3
Version prior to iPadOS 16.3
Version prior to macOS Big Sur 11.7.3
Version prior to macOS Monterey 12.6.3
Version prior to macOS Ventura 13.2
Version prior to Safari 16.3
Version prior to tvOS 16.3
Version prior to watchOS 9.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

iOS 12.5.7
iOS 15.7.3
iOS 16.3
iPadOS 15.7.3
iPadOS 16.3
macOS Big Sur 11.7.3
macOS Monterey 12.6.3
macOS Ventura 13.2
Safari 16.3
tvOS 16.3
watchOS 9.3

Vulnerability Identifier

CVE-2022-3705
CVE-2022-32221
CVE-2022-32915
CVE-2022-35252
CVE-2022-35260
CVE-2022-42856
CVE-2022-42915
CVE-2022-42916
CVE-2023-23493
CVE-2023-23496
CVE-2023-23497
CVE-2023-23498
CVE-2023-23499
CVE-2023-23500
CVE-2023-23501
CVE-2023-23502
CVE-2023-23503
CVE-2023-23504
CVE-2023-23505
CVE-2023-23506
CVE-2023-23507
CVE-2023-23508
CVE-2023-23510
CVE-2023-23511
CVE-2023-23512
CVE-2023-23513
CVE-2023-23517
CVE-2023-23518
CVE-2023-23519
CVE-2023-23520
CVE-2023-23530
CVE-2023-23531

Source

Apple