CVE-2023-27964

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

• CWE-290

• https://support.apple.com/en-us/HT213752Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213752Release Notes, Vendor Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27959The issue was addressed with improved memory handling. This …7.8
• CVE-2023-2796The EventON WordPress plugin before 2.1.2 lacks authenticati…5.3
• CVE-2023-27960This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2023-27961Multiple validation issues were addressed with improved inpu…5.5
• CVE-2023-27962A logic issue was addressed with improved checks. This issue…5.5
• CVE-2023-27963The issue was addressed with additional permissions checks. …7.5
• CVE-2023-27965A memory corruption issue was addressed with improved state …7.8
• CVE-2023-27966The issue was addressed with improved checks. This issue is …6.3
• CVE-2023-27967The issue was addressed with improved memory handling. This …8.6
• CVE-2023-27968A buffer overflow issue was addressed with improved memory h…7.1
• CVE-2023-27969A use after free issue was addressed with improved memory ma…7.8
• CVE-2023-2797Mattermost fails to sanitize code permalinks, allowing an at…6.5