VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

9,260 total · sorted by risk
  • CVE-2022-32891MedFeb 27, 2023
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

  • CVE-2022-42799MedNov 1, 2022
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

  • CVE-2022-22652MedMar 18, 2022
    Apple Inc.
    Ipados
    risk 0.40cvss 6.1epss 0.00

    The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to interact with the GSMA authentication panel. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access may be able to view and modify…

  • CVE-2022-22589MedMar 18, 2022
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.02

    A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.

  • CVE-2021-30689MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-1826MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-1825MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may…

  • CVE-2021-30744MedSep 8, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to…

  • CVE-2021-30890MedAug 24, 2021
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2021-30862MedAug 24, 2021
    Apple Inc.
    Itunes U
    risk 0.40cvss 6.1epss 0.02

    A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

  • CVE-2020-9995MedApr 2, 2021
    Apple Inc.
    Macos Server
    risk 0.40cvss 6.1epss 0.01

    An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.

  • CVE-2020-10012MedDec 8, 2020
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted document may lead to a cross site scripting attack.

  • CVE-2019-8771MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.

  • CVE-2019-8762MedOct 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross…

  • CVE-2019-8753MedOct 27, 2020
    Apple Inc.
    tvOS
    risk 0.40cvss 6.1epss 0.01

    This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack.

  • CVE-2020-9925MedOct 16, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may…

  • CVE-2020-9819MedKEVJun 9, 2020
    Apple Inc.
    Ipados
    risk 0.40cvss 4.3epss 0.02

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

  • CVE-2020-3902MedApr 1, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to…

  • CVE-2020-3884MedApr 1, 2020
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.

  • CVE-2020-3867MedFeb 27, 2020
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to…

  • CVE-2013-1867MedJan 30, 2020
    Gemalto
    Tokend
    risk 0.40cvss 6.1epss 0.00

    Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability

  • CVE-2019-8813MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8791MedDec 18, 2019
    Shazam
    Shazam Android App
    risk 0.40cvss 6.1epss 0.01

    An issue existed in the parsing of URL schemes. This issue was addressed with improved URL validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to an open redirect.

  • CVE-2019-8764MedDec 18, 2019
    Apple Inc.
    watchOS
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8719MedDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8674MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8658MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may…

  • CVE-2019-8625MedDec 18, 2019
    Apple Inc.
    iTunes
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8551MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-8505MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.

  • CVE-2019-6204MedDec 18, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.

  • CVE-2019-9536MedNov 22, 2019
    Apple Inc.
    Iphone 3gs
    risk 0.40cvss 6.1epss 0.00

    Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.

  • CVE-2019-11041HigAug 9, 2019
    PHP
    PHP
    risk 0.40cvss 7.1epss 0.04

    When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This…

  • CVE-2018-4377MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  • CVE-2018-4374MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.02

    A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  • CVE-2018-4345MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  • CVE-2018-4309MedApr 3, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  • CVE-2019-6229MedMar 5, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting.

  • CVE-2019-6228MedMar 5, 2019
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.

  • CVE-2018-16845MedNov 7, 2018
    Nginx
    Nginx
    risk 0.40cvss 6.1epss 0.10

    nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file.…

  • CVE-2018-4133MedApr 3, 2018
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2017-7153MedApr 3, 2018
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.02

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue…

  • CVE-2017-2492MedApr 3, 2018
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web…

  • CVE-2017-13819MedNov 13, 2017
    Apple Inc.
    macOS
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML by bypassing the Same Origin Policy for…

  • CVE-2017-7109MedOct 23, 2017
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. A cross-site…

  • CVE-2017-7059MedJul 20, 2017
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

  • CVE-2017-7038MedJul 20, 2017
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.03

    A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

  • CVE-2017-2549MedMay 22, 2017
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web…

  • CVE-2017-2497MedMay 22, 2017
    Apple Inc.
    Mac OS X
    risk 0.40cvss 6.1epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book.

  • CVE-2017-2475MedApr 2, 2017
    Apple Inc.
    Safari
    risk 0.40cvss 6.1epss 0.02

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted use of frames…

Page 74 of 186