VYPR

Iphone OS

by Apple Inc.

CVEs (4,154)

  • CVE-2023-5217HigKEVSep 28, 2023
    Google
    Chrome
    risk 0.66cvss 8.8epss 0.49

    Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2022-32845CriSep 23, 2022
    Apple Inc.
    macOS
    risk 0.65cvss 10.0epss 0.05

    This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.

  • CVE-2022-37434CriAug 5, 2022
    Zlib
    Zlib
    risk 0.65cvss 9.8epss 0.18

    zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable…

  • CVE-2021-30807HigKEVOct 19, 2021
    Apple Inc.
    macOS
    risk 0.65cvss 7.8epss 0.29

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this…

  • CVE-2019-8779CriDec 18, 2019
    Apple Inc.
    Ipados
    risk 0.65cvss 10.0epss 0.01

    A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.

  • CVE-2019-8600CriDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.65cvss 9.8epss 0.20

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

  • CVE-2018-4310CriApr 3, 2019
    Apple Inc.
    macOS
    risk 0.65cvss 10.0epss 0.02

    An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.

  • CVE-2019-6235CriMar 4, 2019
    Apple Inc.
    iTunes
    risk 0.65cvss 10.0epss 0.02

    A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

  • CVE-2018-4233HigJun 8, 2018
    Apple Inc.
    Safari
    risk 0.65cvss 8.8epss 0.53

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue…

  • CVE-2015-8659CriJan 12, 2016
    Nghttp2
    Nghttp2
    risk 0.65cvss 10.0epss 0.04

    The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

  • CVE-2026-64774CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause…

  • CVE-2026-64772CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected…

  • CVE-2026-64771CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application…

  • CVE-2026-64770CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to…

  • CVE-2026-64769CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to…

  • CVE-2026-64746CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.

  • CVE-2026-64726CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.

  • CVE-2026-64700CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause…

  • CVE-2026-43822CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause…

  • CVE-2026-43812CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.64cvss 9.8epss 0.00

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.

Page 4 of 208