Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger  remote code execution and information disclosure on the targeted system.

Note:

For CVE-2023-42916 and CVE-2023-42917, processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.1.

Impact

• Remote Code Execution
• Information Disclosure

System / Technologies affected

• Versions prior to Safari Safari 17.1.2
• Versions prior to iOS 17.1.2
• Versions prior to iPadOS 17.1.2
• Versions prior to macOS Sonoma 14.1.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• Safari 17.1.2
• iOS 17.1.2
• iPadOS 17.1.2
• macOS Sonoma 14.1.2

Vulnerability Identifier

• CVE-2023-42916
• CVE-2023-42917

Source

• Apple

Related Link

• https://support.apple.com/en-us/HT214031
• https://support.apple.com/en-us/HT214032
• https://support.apple.com/en-us/HT214033