Iphone OS

CVEs (4,184)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2019-8799	Apple Inc. tvOS	Low	0.16	2.4	Oct 27, 2020	This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.
CVE-2019-8732	Apple Inc. iOS	Low	0.16	2.4	Oct 27, 2020	The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.
CVE-2020-9959	Apple Inc. Ipados	Low	0.16	2.4	Oct 16, 2020	A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the…
CVE-2020-9848	Apple Inc. Ipados	Low	0.16	2.4	Jun 9, 2020	An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
CVE-2020-3891	Apple Inc. Ipados	Low	0.16	2.4	Apr 1, 2020	A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
CVE-2020-3859	Apple Inc. Ipados	Low	0.16	2.4	Feb 27, 2020	An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2020-3828	Apple Inc. Ipados	Low	0.16	2.4	Feb 27, 2020	A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8775	Apple Inc. Ipados	Low	0.16	2.4	Dec 18, 2019	The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8742	Apple Inc. iOS	Low	0.16	2.4	Dec 18, 2019	The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8682	Apple Inc. watchOS	Low	0.16	2.4	Dec 18, 2019	The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen.
CVE-2019-8599	Apple Inc. iOS	Low	0.16	2.4	Dec 18, 2019	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVE-2018-4430	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4387	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4325	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
CVE-2018-4238	Apple Inc. iOS	Low	0.16	2.4	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
CVE-2018-4123	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.
CVE-2017-13844	Apple Inc. Messages	Low	0.16	2.4	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state.
CVE-2017-13805	Apple Inc. Siri	Low	0.16	2.4	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been…
CVE-2017-7139	Apple Inc. Iphone OS	Low	0.16	2.4	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during a locking action.
CVE-2017-7058	Apple Inc. Iphone OS	Low	0.16	2.4	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen.

CVE-2019-8799LowOct 27, 2020
Apple Inc.
tvOS
risk 0.16cvss 2.4epss 0.00
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications.
CVE-2019-8732LowOct 27, 2020
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.
CVE-2020-9959LowOct 16, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the…
CVE-2020-9848LowJun 9, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
CVE-2020-3891LowApr 1, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
CVE-2020-3859LowFeb 27, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2020-3828LowFeb 27, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8775LowDec 18, 2019
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8742LowDec 18, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8682LowDec 18, 2019
Apple Inc.
watchOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen.
CVE-2019-8599LowDec 18, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVE-2018-4430LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4387LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4325LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
CVE-2018-4238LowJun 8, 2018
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
CVE-2018-4123LowApr 3, 2018
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.
CVE-2017-13844LowNov 13, 2017
Apple Inc.
Messages
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state.
CVE-2017-13805LowNov 13, 2017
Apple Inc.
Siri
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been…
CVE-2017-7139LowOct 23, 2017
Apple Inc.
Iphone OS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during a locking action.
CVE-2017-7058LowJul 20, 2017
Apple Inc.
Iphone OS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen.

Page 160 of 210