iOS

CVEs (3,569)

• CVE-2019-8515MedDec 18, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.01

  A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user…

• CVE-2019-7292MedDec 18, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.01

  A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory.

• CVE-2018-4460MedApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.42cvss 6.5epss 0.02

  A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

• CVE-2018-4439MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.02

  A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

• CVE-2018-4429MedApr 3, 2019
  Apple Inc.

  watchOS
  risk 0.42cvss 6.5epss 0.01

  A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.

• CVE-2018-4409MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.02

  A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

• CVE-2018-4385MedApr 3, 2019
  Apple Inc.

  iOS
  risk 0.42cvss 6.5epss 0.01

  A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.

• CVE-2018-4368MedApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.42cvss 6.5epss 0.02

  A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

• CVE-2018-4362MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.01

  An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12.

• CVE-2018-4305MedApr 3, 2019
  Apple Inc.

  tvOS
  risk 0.42cvss 6.5epss 0.01

  An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

• CVE-2018-4273MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.02

  Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

• CVE-2018-4271MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.02

  Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

• CVE-2018-4270MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.02

  A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

• CVE-2018-4260MedApr 3, 2019
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.01

  An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

• CVE-2017-13891MedJan 11, 2019
  Apple Inc.

  iOS
  risk 0.42cvss 6.5epss 0.01

  In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.

• CVE-2016-4644MedJan 11, 2019
  Apple Inc.

  TV
  risk 0.42cvss 6.5epss 0.01

  In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue was addressed by storing the authentication types with the credentials.

• CVE-2016-4643MedJan 11, 2019
  Apple Inc.

  TV
  risk 0.42cvss 6.5epss 0.01

  In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through improved response validation.

• CVE-2018-4250MedJun 8, 2018
  Apple Inc.

  iOS
  risk 0.42cvss 6.5epss 0.01

  An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service via a crafted message.

• CVE-2018-4247MedJun 8, 2018
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.01

  An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service (persistent Safari outage) via a crafted web site.

• CVE-2018-4188MedJun 8, 2018
  Apple Inc.

  Safari
  risk 0.42cvss 6.5epss 0.03

  An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It…