iOS

CVEs (3,566)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2023-23530	Apple Inc. macOS	Hig	0.56	8.6	0.00		Feb 27, 2023	The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2022-42844	Apple Inc. Ipados	Hig	0.56	8.6	0.00		Dec 15, 2022	The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to break out of its sandbox.
CVE-2022-32892	Apple Inc. macOS	Hig	0.56	8.6	0.01		Nov 1, 2022	An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2021-30854	Apple Inc. tvOS	Hig	0.56	8.6	0.01		Aug 24, 2021	A logic issue was addressed with improved state management. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-9865	Apple Inc. tvOS	Hig	0.56	8.6	0.01		Oct 16, 2020	A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break out of its sandbox.
CVE-2018-4354	Apple Inc. tvOS	Hig	0.56	8.6	0.01		Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4341	Apple Inc. tvOS	Hig	0.56	8.6	0.01		Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4275	Apple Inc. iOS	Hig	0.56	8.6	0.01		Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
CVE-2018-4269	Apple Inc. iTunes	Hig	0.56	8.6	0.01		Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2019-6230	Apple Inc. tvOS	Hig	0.56	8.6	0.02		Mar 5, 2019	A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
CVE-2019-6225	Apple Inc. tvOS	Hig	0.56	7.8	0.20		Mar 5, 2019	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.
CVE-2017-2447	Apple Inc. Safari	Hig	0.56	8.1	0.05		Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service…
CVE-2024-44309	Apple Inc. macOS	Med	0.55	6.3	0.23	KEV	Nov 20, 2024	A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site…
CVE-2023-28204	Apple Inc. macOS	Med	0.55	6.5	0.14	KEV	Jun 23, 2023	An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware…
CVE-2019-8803	Apple Inc. tvOS	Hig	0.55	8.4	0.00		Dec 18, 2019	An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials..
CVE-2018-4243	Apple Inc. watchOS	Hig	0.55	7.8	0.26		Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to…
CVE-2018-4237	Apple Inc. tvOS	Hig	0.55	7.8	0.34		Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app…
CVE-2017-13861	Apple Inc. tvOS	Hig	0.55	7.8	0.35		Dec 25, 2017	An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of…
CVE-2017-2370	Apple Inc. tvOS	Hig	0.55	7.8	0.19		Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2019-8514	Apple Inc. tvOS	Hig	0.54	7.8	0.03		Dec 18, 2019	A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.

CVE-2023-23530HigFeb 27, 2023
Apple Inc.
macOS
risk 0.56cvss 8.6epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVE-2022-42844HigDec 15, 2022
Apple Inc.
Ipados
risk 0.56cvss 8.6epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to break out of its sandbox.
CVE-2022-32892HigNov 1, 2022
Apple Inc.
macOS
risk 0.56cvss 8.6epss 0.01
An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2021-30854HigAug 24, 2021
Apple Inc.
tvOS
risk 0.56cvss 8.6epss 0.01
A logic issue was addressed with improved state management. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2020-9865HigOct 16, 2020
Apple Inc.
tvOS
risk 0.56cvss 8.6epss 0.01
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break out of its sandbox.
CVE-2018-4354HigApr 3, 2019
Apple Inc.
tvOS
risk 0.56cvss 8.6epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4341HigApr 3, 2019
Apple Inc.
tvOS
risk 0.56cvss 8.6epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4275HigApr 3, 2019
Apple Inc.
iOS
risk 0.56cvss 8.6epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
CVE-2018-4269HigApr 3, 2019
Apple Inc.
iTunes
risk 0.56cvss 8.6epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVE-2019-6230HigMar 5, 2019
Apple Inc.
tvOS
risk 0.56cvss 8.6epss 0.02
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
CVE-2019-6225HigMar 5, 2019
Apple Inc.
tvOS
risk 0.56cvss 7.8epss 0.20
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.
CVE-2017-2447HigApr 2, 2017
Apple Inc.
Safari
risk 0.56cvss 8.1epss 0.05
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service…
CVE-2024-44309MedKEVNov 20, 2024
Apple Inc.
macOS
risk 0.55cvss 6.3epss 0.23
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site…
CVE-2023-28204MedKEVJun 23, 2023
Apple Inc.
macOS
risk 0.55cvss 6.5epss 0.14
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware…
CVE-2019-8803HigDec 18, 2019
Apple Inc.
tvOS
risk 0.55cvss 8.4epss 0.00
An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials..
CVE-2018-4243HigJun 8, 2018
Apple Inc.
watchOS
risk 0.55cvss 7.8epss 0.26
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in getvolattrlist allows attackers to…
CVE-2018-4237HigJun 8, 2018
Apple Inc.
tvOS
risk 0.55cvss 7.8epss 0.34
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app…
CVE-2017-13861HigDec 25, 2017
Apple Inc.
tvOS
risk 0.55cvss 7.8epss 0.35
An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of…
CVE-2017-2370HigFeb 20, 2017
Apple Inc.
tvOS
risk 0.55cvss 7.8epss 0.19
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2019-8514HigDec 18, 2019
Apple Inc.
tvOS
risk 0.54cvss 7.8epss 0.03
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.

Page 34 of 179