VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

9,002 total · sorted by risk
  • CVE-2025-31275MedJul 30, 2025
    Apple Inc.
    macOS
    risk 0.40cvss 6.2epss 0.00

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app.

  • CVE-2025-31218MedMay 12, 2025
    Apple Inc.
    macOS
    risk 0.40cvss 6.2epss 0.00

    This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections.

  • CVE-2025-24208MedMar 31, 2025
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.

  • CVE-2024-54565MedMar 17, 2025
    Apple Inc.
    macOS
    risk 0.40cvss 6.2epss 0.00

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data.

  • CVE-2024-44145MedOct 28, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.00

    This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen.

  • CVE-2024-40857MedSep 17, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed through improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2024-40826MedSep 17, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.00

    A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An unencrypted document may be written to a temporary file when using print preview.

  • CVE-2024-40797MedSep 17, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.00

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Visiting a malicious website may lead to user interface spoofing.

  • CVE-2024-40817MedJul 29, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in Safari 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Visiting a website that frames malicious content may lead to UI spoofing.

  • CVE-2024-40785MedJul 29, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to a cross site scripting…

  • CVE-2024-27877MedJul 29, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.00

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

  • CVE-2024-23223MedJan 23, 2024
    Apple Inc.
    macOS
    risk 0.40cvss 6.2epss 0.00

    A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. An app may be able to access sensitive user data.

  • CVE-2024-23219MedJan 23, 2024
    Apple Inc.
    Ipados
    risk 0.40cvss 6.2epss 0.00

    The issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS 17.3. Stolen Device Protection may be unexpectedly disabled.

  • CVE-2023-32445MedJul 28, 2023
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack.

  • CVE-2022-32891MedFeb 27, 2023
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

  • CVE-2022-42799MedNov 1, 2022
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

  • CVE-2022-22652MedMar 18, 2022
    Apple Inc.
    Ipados
    risk 0.40cvss 6.1epss 0.00

    The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to interact with the GSMA authentication panel. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access may be able to view and modify…

  • CVE-2022-22589MedMar 18, 2022
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.02

    A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

  • CVE-2021-30689MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-1826MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-1825MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may…

  • CVE-2021-30744MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to…

  • CVE-2021-30890MedAug 24, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-30862MedAug 24, 2021
    Apple Inc.
    Itunes U
    risk 0.40cvss 6.1epss 0.02

    A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

  • CVE-2020-9995MedApr 2, 2021
    Apple Inc.
    Macos Server
    risk 0.40cvss 6.1epss 0.01

    An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.

  • CVE-2020-10012MedDec 8, 2020
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted document may lead to a cross site scripting attack.

  • CVE-2019-8771MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.

  • CVE-2019-8762MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross…

  • CVE-2019-8753MedOct 27, 2020
    Apple Inc.
    tvOS
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack.

  • CVE-2020-9925MedOct 16, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may…

  • CVE-2020-9819MedKEVJun 9, 2020
    Apple Inc.
    Ipados
    risk 0.40cvss 4.3epss 0.02

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

  • CVE-2020-3902MedApr 1, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to…

  • CVE-2020-3884MedApr 1, 2020
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.

  • CVE-2020-3867MedFeb 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to…

  • CVE-2013-1867MedJan 30, 2020
    Gemalto
    Tokend
    risk 0.40cvss 6.1epss 0.00

    Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability

  • CVE-2019-8813MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8791MedDec 18, 2019
    Shazam
    Shazam Android App
    risk 0.40cvss 6.1epss 0.01

    An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect.

  • CVE-2019-8764MedDec 18, 2019
    Apple Inc.
    watchOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8719MedDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8674MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8658MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may…

  • CVE-2019-8625MedDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8551MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8505MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.

  • CVE-2019-6204MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.

  • CVE-2019-9536MedNov 22, 2019
    Apple Inc.
    Iphone 3gs
    risk 0.40cvss 6.1epss 0.00

    Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.

  • CVE-2019-11041HigAug 9, 2019
    PHP
    PHP
    risk 0.40cvss 7.1epss 0.04

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This…

  • CVE-2018-4377MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.02

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  • CVE-2018-4374MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.03

    A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  • CVE-2018-4345MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.02

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Page 70 of 181