VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

8,441 total · sorted by risk
  • CVE-2021-30870MedAug 24, 2021
    Apple Inc.
    Ipados
    risk 0.42cvss 6.5epss 0.01

    A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. Previewing an html file attached to a note may unexpectedly contact remote servers.

  • CVE-2021-30866MedAug 24, 2021
    Apple Inc.
    tvOS
    risk 0.42cvss 6.5epss 0.01

    A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address.

  • CVE-2021-1801MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe…

  • CVE-2021-1799MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able…

  • CVE-2021-1765MedApr 2, 2021
    Apple Inc.
    macOS Big Sur
    risk 0.42cvss 6.5epss 0.01

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.

  • CVE-2020-27893MedApr 2, 2021
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sharing access may be able to view another user's screen.

  • CVE-2020-9922MedDec 8, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.5epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted email may lead to writing arbitrary files.

  • CVE-2020-9849MedDec 8, 2020
    Apple Inc.
    tvOS
    risk 0.42cvss 6.5epss 0.02

    An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory.

  • CVE-2019-8901MedOct 27, 2020
    Apple Inc.
    Ipados
    risk 0.42cvss 6.5epss 0.00

    This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action.

  • CVE-2019-8664MedOct 27, 2020
    Apple Inc.
    watchOS
    risk 0.42cvss 6.5epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.

  • CVE-2019-8754MedOct 27, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.5epss 0.00

    A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A malicious HTML document may be able to render iframes with…

  • CVE-2019-8737MedOct 27, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.5epss 0.01

    A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged position may be able to perform a denial of service attack.

  • CVE-2019-8736MedOct 27, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.5epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user…

  • CVE-2019-8645MedOct 27, 2020
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    An issue existed in the handling of encrypted Mail. This issue was addressed with improved isolation of MIME in Mail. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. An attacker in a privileged network position…

  • CVE-2019-8612MedOct 27, 2020
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, tvOS 12.3, watchOS 5.2.1, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update…

  • CVE-2019-8570MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.03

    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, iCloud for Windows 7.10, iTunes 12.9.3 for Windows, Safari 12.0.3, tvOS 12.1.2. Processing maliciously crafted web content may disclose sensitive user information.

  • CVE-2019-7291MedOct 27, 2020
    Apple Inc.
    Airport Base Station Firmware
    risk 0.42cvss 6.5epss 0.01

    A denial of service issue was addressed with improved memory handling. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. An attacker in a privileged position may be able to perform a denial of service attack.

  • CVE-2018-4444MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

  • CVE-2020-9939MedOct 22, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.4epss 0.00

    This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to load unsigned kernel extensions.

  • CVE-2020-9915MedOct 16, 2020
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows…

  • CVE-2020-9829MedJun 9, 2020
    Apple Inc.
    tvOS
    risk 0.42cvss 6.5epss 0.01

    A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5. Processing a maliciously crafted text message may lead to application denial of service.

  • CVE-2020-3882MedJun 9, 2020
    Apple Inc.
    macOS Catalina
    risk 0.42cvss 6.5epss 0.01

    This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.

  • CVE-2020-9770MedApr 1, 2020
    Apple Inc.
    Ipados
    risk 0.42cvss 6.5epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic.

  • CVE-2020-3862MedFeb 27, 2020
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.02

    A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial…

  • CVE-2020-3841MedFeb 27, 2020
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network.

  • CVE-2019-8654MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.

  • CVE-2019-8632MedDec 18, 2019
    Texture
    Texture
    risk 0.42cvss 6.5epss 0.01

    Some analytics data was sent using HTTP rather than HTTPS. This was addressed by no longer sending this analytics data. This issue is fixed in Texture 5.11.10 for iOS, Texture 4.22.0.4 for Android. An attacker in a privileged network position may be able to intercept analytics…

  • CVE-2019-8626MedDec 18, 2019
    Apple Inc.
    watchOS
    risk 0.42cvss 6.5epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.

  • CVE-2019-8615MedDec 18, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…

  • CVE-2019-8607MedDec 18, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the…

  • CVE-2019-8597MedDec 18, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…

  • CVE-2019-8554MedDec 18, 2019
    Apple Inc.
    iOS
    risk 0.42cvss 6.5epss 0.01

    A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions. This issue is fixed in iOS 12.2. A website may be able to access sensor information without user consent.

  • CVE-2019-8517MedDec 18, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted font may result in the disclosure of process memory.

  • CVE-2019-8515MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user…

  • CVE-2019-7292MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory.

  • CVE-2018-4460MedApr 3, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    A denial of service issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  • CVE-2018-4439MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.02

    A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

  • CVE-2018-4429MedApr 3, 2019
    Apple Inc.
    watchOS
    risk 0.42cvss 6.5epss 0.01

    A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.

  • CVE-2018-4409MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.02

    A resource exhaustion issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, tvOS 12.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  • CVE-2018-4406MedApr 3, 2019
    Apple Inc.
    macOS Mojave
    risk 0.42cvss 6.5epss 0.01

    A denial of service issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.

  • CVE-2018-4389MedApr 3, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.01

    An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1.

  • CVE-2018-4385MedApr 3, 2019
    Apple Inc.
    iOS
    risk 0.42cvss 6.5epss 0.01

    A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.

  • CVE-2018-4368MedApr 3, 2019
    Apple Inc.
    macOS
    risk 0.42cvss 6.5epss 0.02

    A denial of service issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.

  • CVE-2018-4362MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2, iOS 12.

  • CVE-2018-4305MedApr 3, 2019
    Apple Inc.
    tvOS
    risk 0.42cvss 6.5epss 0.01

    An input validation issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

  • CVE-2018-4273MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.02

    Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

  • CVE-2018-4271MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.02

    Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

  • CVE-2018-4270MedApr 3, 2019
    Apple Inc.
    tvOS
    risk 0.42cvss 6.5epss 0.02

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

  • CVE-2018-4260MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.

  • CVE-2018-4195MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.42cvss 6.5epss 0.01

    An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12.

Page 58 of 169