Veille CVE

Lundi 10 avril 2023

2 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2023-28205 8.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple Safari · Apple macOS · Apple ipados

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

  2. CVE-2023-28206 – Non évaluée Exploitée

    Apple iOS, iPadOS, and macOS

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.