iOS

CVEs (3,566)

CVE	Vendor / Product	Sev	Risk	CVSS	Published	Description
CVE-2019-8732	Apple Inc. iOS	Low	0.16	2.4	Oct 27, 2020	The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.
CVE-2020-9959	Apple Inc. Ipados	Low	0.16	2.4	Oct 16, 2020	A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the…
CVE-2020-9848	Apple Inc. Ipados	Low	0.16	2.4	Jun 9, 2020	An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
CVE-2020-3891	Apple Inc. Ipados	Low	0.16	2.4	Apr 1, 2020	A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
CVE-2020-3859	Apple Inc. Ipados	Low	0.16	2.4	Feb 27, 2020	An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2020-3828	Apple Inc. Ipados	Low	0.16	2.4	Feb 27, 2020	A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8775	Apple Inc. Ipados	Low	0.16	2.4	Dec 18, 2019	The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8742	Apple Inc. iOS	Low	0.16	2.4	Dec 18, 2019	The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8682	Apple Inc. watchOS	Low	0.16	2.4	Dec 18, 2019	The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen.
CVE-2019-8599	Apple Inc. iOS	Low	0.16	2.4	Dec 18, 2019	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVE-2018-4430	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4387	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4325	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2019	A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
CVE-2018-4238	Apple Inc. iOS	Low	0.16	2.4	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
CVE-2018-4123	Apple Inc. iOS	Low	0.16	2.4	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.
CVE-2017-2397	Apple Inc. iOS	Low	0.16	2.4	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen.
CVE-2017-2351	Apple Inc. iOS	Low	0.16	2.4	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors.
CVE-2016-7765	Apple Inc. iOS	Low	0.16	2.4	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate attackers to obtain sensitive information in the lockscreen state by viewing clipboard contents.
CVE-2016-7664	Apple Inc. iOS	Low	0.16	2.4	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options…
CVE-2016-7653	Apple Inc. iOS	Low	0.16	2.4	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" component, which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging lockscreen access.

CVE-2019-8732LowOct 27, 2020
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.
CVE-2020-9959LowOct 16, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the…
CVE-2020-9848LowJun 9, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen.
CVE-2020-3891LowApr 1, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS device may be able to respond to messages even when replies are disabled.
CVE-2020-3859LowFeb 27, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2020-3828LowFeb 27, 2020
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8775LowDec 18, 2019
Apple Inc.
Ipados
risk 0.16cvss 2.4epss 0.00
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8742LowDec 18, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2019-8682LowDec 18, 2019
Apple Inc.
watchOS
risk 0.16cvss 2.4epss 0.00
The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen.
CVE-2019-8599LowDec 18, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 12.3. A person with physical access to an iOS device may be able to see the email address used for iTunes.
CVE-2018-4430LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.
CVE-2018-4387LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A lock screen issue allowed access to photos via Reply With Message on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
CVE-2018-4325LowApr 3, 2019
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.
CVE-2018-4238LowJun 8, 2018
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to bypass the lock-screen protection mechanism and enable Siri.
CVE-2018-4123LowApr 3, 2018
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate attackers to discover the iTunes e-mail address.
CVE-2017-2397LowApr 2, 2017
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock screen.
CVE-2017-2351LowFeb 20, 2017
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors.
CVE-2016-7765LowFeb 20, 2017
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Clipboard" component, which allows physically proximate attackers to obtain sensitive information in the lockscreen state by viewing clipboard contents.
CVE-2016-7664LowFeb 20, 2017
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options…
CVE-2016-7653LowFeb 20, 2017
Apple Inc.
iOS
risk 0.16cvss 2.4epss 0.00
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Media Player" component, which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging lockscreen access.

Page 145 of 179