Apple watchOS 11.6 Security Update Vulnerability Advisory (CVE-2023-45896 etc.)

Critical Vulnerability Information Affected Scope watchOS 11.6 and earlier versions Vulnerability Details 1. afcidp - Impact: May allow unauthorized Bluetooth pairing. - CVE: CVE-2023-45896 2. CFNetwork - Impact: Unauthorized users may modify network settings. - CVE: CVE-2023-45828 3. CoreAudio - Impact: Processing malicious audio files may lead to memory corruption. - CVE: CVE-2023-43277 4. CoreMedia - Impact: Processing malicious video streams may cause unexpected termination or memory corruption. - CVE: CVE-2023-43270 5. CoreMedia Playback - Impact: May allow access to sensitive data. - CVE: CVE-2023-43290 6. ICU - Impact: Processing specific content may lead to unexpected Safari crashes. - CVE: CVE-2023-45826 7. ImageIO - Impact: Processing malicious images may lead to memory corruption. - CVE: CVE-2023-43278 8. libxml2 - Impact: Processing malicious XML content may lead to memory corruption. - CVE: CVE-2023-47275 9. libxslt - Impact: Processing malicious XSLT content may lead to unexpected termination. - CVE: CVE-2023-45829 10. Metal - Impact: Multi-process race condition may lead to unexpected termination. - CVE: CVE-2023-43294 11. WebKit - Impact: Processing malicious web content may lead to disclosure of sensitive user information. - CVE: CVE-2023-43270 12. WebKit - Impact: Processing malicious content may lead to memory corruption. - CVE: CVE-2023-45848 13. WebKit - Impact: Processing malicious content may lead to unexpected termination. - CVE: CVE-2023-43271 14. WebKit - Impact: Processing malicious content may lead to out-of-bounds read. - CVE: CVE-2023-45805 15. WebKit - Impact: Processing malicious content may lead to unexpected termination. - CVE: CVE-2023-43290 16. WebKit - Impact: Processing malicious content may lead to unexpected termination. - CVE: CVE-2023-45825 17. WebKit - Impact: Processing malicious content may lead to unexpected termination. - CVE: CVE-2023-45830 18. WebKit - Impact: Processing malicious content may lead to unexpected termination. - CVE: CVE-2023-45831 Additional Information Release Date: July 24, 2023 Reference Link: Apple Product Security

Goal Reached Thanks to every supporter — we hit 100%!

Apple watchOS 11.6 Security Update Vulnerability Advisory (CVE-2023-45896 etc.)