Veille CVE

Lundi 10 avril 2023

2 CVE

  1. CVE-2023-28206 – Non évaluée Exploitée

    Apple iOS, iPadOS, and macOS

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.

  2. CVE-2023-28205 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products WebKit Use-After-Free Vulnerability — Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.