# Vulnerabilities published in 2023 - [CVE-2023-40452](https://insights.sbomify.com/CVE-2023-40452/): Memory corruption in iOS and iPadOS (high 7.1) - [CVE-2023-40451](https://insights.sbomify.com/CVE-2023-40451/): Security feature bypass in Safari (high 8.8) - [CVE-2023-40450](https://insights.sbomify.com/CVE-2023-40450/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-4045](https://insights.sbomify.com/CVE-2023-4045/): Security feature bypass in Firefox (medium 5.3) - [CVE-2023-40449](https://insights.sbomify.com/CVE-2023-40449/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-40448](https://insights.sbomify.com/CVE-2023-40448/): Security feature bypass in iOS and iPadOS (high 8.6) - [CVE-2023-40447](https://insights.sbomify.com/CVE-2023-40447/): Memory corruption in Safari (high 8.8) - [CVE-2023-40446](https://insights.sbomify.com/CVE-2023-40446/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40445](https://insights.sbomify.com/CVE-2023-40445/): Security feature bypass in iOS and iPadOS (high 7.5) - [CVE-2023-40444](https://insights.sbomify.com/CVE-2023-40444/): Missing authorization in macOS (medium 5.5) - [CVE-2023-40443](https://insights.sbomify.com/CVE-2023-40443/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2023-40442](https://insights.sbomify.com/CVE-2023-40442/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40441](https://insights.sbomify.com/CVE-2023-40441/): Denial of service in iOS and iPadOS (medium 6.5) - [CVE-2023-40440](https://insights.sbomify.com/CVE-2023-40440/): Information disclosure in macOS (high 7.5) - [CVE-2023-40439](https://insights.sbomify.com/CVE-2023-40439/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40438](https://insights.sbomify.com/CVE-2023-40438/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40437](https://insights.sbomify.com/CVE-2023-40437/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40436](https://insights.sbomify.com/CVE-2023-40436/): Memory corruption in macOS (critical 9.1) - [CVE-2023-40435](https://insights.sbomify.com/CVE-2023-40435/): Security feature bypass in Xcode (medium 5.5) - [CVE-2023-40434](https://insights.sbomify.com/CVE-2023-40434/): Misconfiguration in iOS and iPadOS (low 3.3) - [CVE-2023-40433](https://insights.sbomify.com/CVE-2023-40433/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-40432](https://insights.sbomify.com/CVE-2023-40432/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40431](https://insights.sbomify.com/CVE-2023-40431/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40430](https://insights.sbomify.com/CVE-2023-40430/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-4043](https://insights.sbomify.com/CVE-2023-4043/): Parsson DoS when parsing numbers from untrusted sources (medium 5.9) - [CVE-2023-40429](https://insights.sbomify.com/CVE-2023-40429/): Missing authorization in iOS and iPadOS (medium 5.5) - [CVE-2023-40428](https://insights.sbomify.com/CVE-2023-40428/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40427](https://insights.sbomify.com/CVE-2023-40427/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40426](https://insights.sbomify.com/CVE-2023-40426/): Security feature bypass in macOS (medium 5.5) - [CVE-2023-40425](https://insights.sbomify.com/CVE-2023-40425/): Information disclosure in macOS (medium 4.4) - [CVE-2023-40424](https://insights.sbomify.com/CVE-2023-40424/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40423](https://insights.sbomify.com/CVE-2023-40423/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40422](https://insights.sbomify.com/CVE-2023-40422/): Denial of service in macOS (medium 5.5) - [CVE-2023-40421](https://insights.sbomify.com/CVE-2023-40421/): Missing authorization in macOS (medium 5.5) - [CVE-2023-40420](https://insights.sbomify.com/CVE-2023-40420/): Memory corruption in iOS and iPadOS (medium 6.5) - [CVE-2023-4042](https://insights.sbomify.com/CVE-2023-4042/): Ghostscript: incomplete fix for cve-2020-16305 (medium 5.5) - [CVE-2023-40419](https://insights.sbomify.com/CVE-2023-40419/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2023-40418](https://insights.sbomify.com/CVE-2023-40418/): Auth bypass in watchOS (medium 5.5) - [CVE-2023-40417](https://insights.sbomify.com/CVE-2023-40417/): Other in Safari (medium 5.4) - [CVE-2023-40416](https://insights.sbomify.com/CVE-2023-40416/): Memory corruption in iOS and iPadOS (medium 6.5) - [CVE-2023-40414](https://insights.sbomify.com/CVE-2023-40414/): Use after free in Safari (critical 9.8) - [CVE-2023-40413](https://insights.sbomify.com/CVE-2023-40413/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40412](https://insights.sbomify.com/CVE-2023-40412/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40411](https://insights.sbomify.com/CVE-2023-40411/): Information disclosure in macOS (medium 5.5) - [CVE-2023-40410](https://insights.sbomify.com/CVE-2023-40410/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2023-4041](https://insights.sbomify.com/CVE-2023-4041/): Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability (critical 9.8) - [CVE-2023-40409](https://insights.sbomify.com/CVE-2023-40409/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40408](https://insights.sbomify.com/CVE-2023-40408/): Other in iOS and iPadOS (medium 5.3) - [CVE-2023-40407](https://insights.sbomify.com/CVE-2023-40407/): Denial of service in macOS (high 7.5) - [CVE-2023-40406](https://insights.sbomify.com/CVE-2023-40406/): Information disclosure in macOS (medium 5.5) - [CVE-2023-40405](https://insights.sbomify.com/CVE-2023-40405/): Information disclosure in macOS (low 3.3) - [CVE-2023-40404](https://insights.sbomify.com/CVE-2023-40404/): Use after free in macOS (high 7.8) - [CVE-2023-40403](https://insights.sbomify.com/CVE-2023-40403/): Information disclosure in iOS and iPadOS (medium 6.5) - [CVE-2023-40402](https://insights.sbomify.com/CVE-2023-40402/): Missing authorization in macOS (medium 5.5) - [CVE-2023-40401](https://insights.sbomify.com/CVE-2023-40401/): Auth bypass in macOS (high 7.5) - [CVE-2023-40400](https://insights.sbomify.com/CVE-2023-40400/): Other in iOS and iPadOS (critical 9.8) - [CVE-2023-4040](https://insights.sbomify.com/CVE-2023-4040/): Missing authorization in Stripe Payment Plugin for WooCommerce (medium 5.3) - [CVE-2023-40399](https://insights.sbomify.com/CVE-2023-40399/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2023-40398](https://insights.sbomify.com/CVE-2023-40398/): Security feature bypass in iOS and iPadOS (high 8.8) - [CVE-2023-40397](https://insights.sbomify.com/CVE-2023-40397/): Code injection in macOS (critical 9.8) - [CVE-2023-40396](https://insights.sbomify.com/CVE-2023-40396/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2023-40395](https://insights.sbomify.com/CVE-2023-40395/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40394](https://insights.sbomify.com/CVE-2023-40394/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40393](https://insights.sbomify.com/CVE-2023-40393/): Auth bypass in iOS and iPadOS (high 7.5) - [CVE-2023-40392](https://insights.sbomify.com/CVE-2023-40392/): Information disclosure in macOS (low 3.3) - [CVE-2023-40391](https://insights.sbomify.com/CVE-2023-40391/): Information disclosure in Xcode (medium 5.5) - [CVE-2023-40390](https://insights.sbomify.com/CVE-2023-40390/): Information disclosure in macOS (medium 5.5) - [CVE-2023-4039](https://insights.sbomify.com/CVE-2023-4039/): GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 (medium 4.8) - [CVE-2023-40389](https://insights.sbomify.com/CVE-2023-40389/): Information disclosure in macOS (medium 5.5) - [CVE-2023-40388](https://insights.sbomify.com/CVE-2023-40388/): Information disclosure in macOS (medium 4.3) - [CVE-2023-40386](https://insights.sbomify.com/CVE-2023-40386/): Information disclosure in macOS (low 3.3) - [CVE-2023-40385](https://insights.sbomify.com/CVE-2023-40385/): Information disclosure in Safari (medium 6.5) - [CVE-2023-40384](https://insights.sbomify.com/CVE-2023-40384/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2023-40383](https://insights.sbomify.com/CVE-2023-40383/): Path traversal in macOS (low 3.3) - [CVE-2023-40378](https://insights.sbomify.com/CVE-2023-40378/): IBM i privilege escalation (medium 4.9) - [CVE-2023-40377](https://insights.sbomify.com/CVE-2023-40377/): IBM i privilege escalation (medium 4.9) - [CVE-2023-40376](https://insights.sbomify.com/CVE-2023-40376/): IBM UrbanCode Deploy (UCD) improper authentication controls (medium 5.3) - [CVE-2023-40375](https://insights.sbomify.com/CVE-2023-40375/): IBM i privilege escalation (high 7.4) - [CVE-2023-40374](https://insights.sbomify.com/CVE-2023-40374/): IBM Db2 denial of service (medium 5.3) - [CVE-2023-40373](https://insights.sbomify.com/CVE-2023-40373/): IBM Db2 denial of service (medium 5.3) - [CVE-2023-40372](https://insights.sbomify.com/CVE-2023-40372/): IBM Db2 denial of service (medium 5.3) - [CVE-2023-40371](https://insights.sbomify.com/CVE-2023-40371/): IBM AIX information disclosure (medium 6.2) - [CVE-2023-40370](https://insights.sbomify.com/CVE-2023-40370/): IBM Robotic Process Automation information disclosure (low 3.7) - [CVE-2023-4037](https://insights.sbomify.com/CVE-2023-4037/): SQL injection in Setelsa Security ConacWin (critical 9.9) - [CVE-2023-40368](https://insights.sbomify.com/CVE-2023-40368/): IBM Storage Protect information disclosure (medium 4.4) - [CVE-2023-40367](https://insights.sbomify.com/CVE-2023-40367/): IBM QRadar SIEM cross-site scripting (medium 5.4) - [CVE-2023-40363](https://insights.sbomify.com/CVE-2023-40363/): IBM InfoSphere Information Server privilege escalation (high 8.1) - [CVE-2023-40362](https://insights.sbomify.com/CVE-2023-40362/): Missing authorization in centralsquare:click2gov building permit (medium 4.3) - [CVE-2023-40361](https://insights.sbomify.com/CVE-2023-40361/): Misconfiguration in secudos:qiata (high 7.8) - [CVE-2023-40360](https://insights.sbomify.com/CVE-2023-40360/): Null dereference in qemu:qemu (medium 5.5) - [CVE-2023-4036](https://insights.sbomify.com/CVE-2023-4036/): Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access (medium 4.3) - [CVE-2023-40359](https://insights.sbomify.com/CVE-2023-40359/): Memory corruption in invisible-island:xterm (critical 9.8) - [CVE-2023-40357](https://insights.sbomify.com/CVE-2023-40357/): Command injection in Archer A10 (high 8.0) - [CVE-2023-40356](https://insights.sbomify.com/CVE-2023-40356/): PingOne MFA Integration Kit MFA bypass (high 8.7) - [CVE-2023-40355](https://insights.sbomify.com/CVE-2023-40355/): Cross-site scripting in axigen:axigen mobile webmail (medium 5.4) - [CVE-2023-40354](https://insights.sbomify.com/CVE-2023-40354/): Information disclosure in mariadb:maxscale (medium 6.5) - [CVE-2023-40353](https://insights.sbomify.com/CVE-2023-40353/): Integer overflow in samsung:exynos 2100 firmware (low 2.0) - [CVE-2023-40352](https://insights.sbomify.com/CVE-2023-40352/): Privilege escalation in mcafee:safe connect (high 7.2) - [CVE-2023-40351](https://insights.sbomify.com/CVE-2023-40351/): Jenkins Favorite View Plugin cross-site request forgery vulnerability (medium 4.3) - [CVE-2023-40350](https://insights.sbomify.com/CVE-2023-40350/): Jenkins Docker Swarm Plugin stored cross-site scripting vulnerability (medium 5.4) --- From sbomify Insights: https://insights.sbomify.com/years/2023/page/247/