Dec 4, 2023

Started

• Closed✓Patched

  Apple Multiple Products: 2 exploited vulnerabilities (CVE-2023-42916, CVE-2023-42917)

  Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2023-12-04.

  Apple Multiple Products·Closed Dec 4, 2023·updated Dec 4, 2023

Updated

• ClosedHigh–No fix needed

  23andMe: credential stuffing exposes 6.9M users' ancestry data

  Attackers used reused passwords to log into about 14,000 23andMe accounts, then scraped the DNA Relatives profiles those accounts could see. Data on about 6.9 million people was exposed and sold on hacking forums.

  23andMe·Closed Dec 4, 2023·updated Dec 4, 2023