Vulnerabilities

TI-2023-23042 CVE-2023-42977 · GHSA-m6p7-g6ff-wxw5

Improper input validation in Apple iOS and iPadOS

LOW 35

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00206 Published 2025-04-11 Fixed in 17, 14 CWE-20

TI-2025-17953 CVE-2025-24203 · GHSA-378r-2hmj-3r7x

Apple iOS and iPadOS: An app may be able to modify protected parts of the file system

LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00634 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5

TI-2024-29853 CVE-2024-44297 · GHSA-j23c-hpvj-54p6

Apple iOS and iPadOS: Processing a maliciously crafted message may lead to a…

LOW 30

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00853 Published 2024-10-28 Fixed in 17.7.1, 18.1 +5

TI-2024-29709 CVE-2024-44139 · GHSA-9rg3-9338-mwcv

Information disclosure in Apple iOS and iPadOS

LOW 12

The issue was addressed with improved checks.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00249 Published 2024-09-16 Fixed in 18 CWE-200

TI-2023-23041 CVE-2023-42974 · GHSA-42pj-35w6-4jwg

Race condition in Apple iOS and iPadOS

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00148 Published 2024-03-28 Fixed in 17.2, 16.7 +3 CWE-362

TI-2024-15360 CVE-2024-23255 · GHSA-7523-56gq-473q

Incorrect authorization in Apple iOS and iPadOS

MEDIUM 48

An authentication issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00672 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-863

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15402 CVE-2024-23297 · GHSA-ggwq-65m4-2gf3

Apple iOS and iPadOS: A malicious application may be able to access private information

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2024-03-08 Fixed in 17.4, 10.4

TI-2024-00233 CVE-2024-0258 · GHSA-mwm3-q3pf-fp7v

Improper access control in Apple iOS and iPadOS

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00265 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-284

TI-2024-15345 CVE-2024-23239 · GHSA-9v4g-5w22-xh84

Race condition in Apple iOS and iPadOS

LOW 27

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0043 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-362

TI-2024-15348 CVE-2024-23242 · GHSA-v2jv-c66v-hqhv

Sensitive information in log files in Apple iOS and iPadOS

LOW 15

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-532

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15378 CVE-2024-23273 · GHSA-qg9g-p9q2-wjvw

Improper certificate validation in Apple Safari

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00732 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-295

TI-2024-15312 CVE-2024-23205 · GHSA-f8q5-x5fj-x8wj

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-922

TI-2024-15332 CVE-2024-23226 · GHSA-9hgh-cqm9-hh6h

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2024-03-08 Fixed in 17.4, 14.4 +2 CWE-787

TI-2024-15375 CVE-2024-23270 · GHSA-4rxr-8xrx-9rf3

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00277 Published 2024-03-08 Fixed in 17.4, 12.7.4 +2 CWE-787

TI-2024-15356 CVE-2024-23250 · GHSA-9whp-6cg8-4p5h

Incorrect authorization in Apple iOS and iPadOS

LOW 24

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00236 Published 2024-03-08 Fixed in 17.4, 14.4 +1 CWE-863

TI-2024-15398 CVE-2024-23293 · GHSA-2vf8-hmhp-gw9x

Apple iOS and iPadOS: An attacker with physical access may be able to use Siri to access…

LOW 21

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0041 Published 2024-03-08 Fixed in 17.4, 14.4 +1

TI-2024-15327 CVE-2024-23220 · GHSA-xqpf-pfm9-3p52

Apple iOS and iPadOS: An app may be able to fingerprint the user

LOW 24

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2024-03-08 Fixed in 17.4, 1.1

TI-2024-15382 CVE-2024-23277 · GHSA-j6q4-78q3-g22f

Apple iOS and iPadOS: An attacker in a privileged network position may be able to inject…

LOW 28

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00709 Published 2024-03-08 Fixed in 17.4, 14.4

TI-2024-15347 CVE-2024-23241 · GHSA-r944-7xp4-cg8q

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 29

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00441 Published 2024-03-08 Fixed in 17.4, 14.4 CWE-922

TI-2024-15346 CVE-2024-23240 · GHSA-j333-97w2-3p5r

Apple iOS and iPadOS: Shake-to-undo may allow a deleted photo to be re-surfaced without…

LOW 12

The issue was addressed with improved checks.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00255 Published 2024-03-08 Fixed in 17.4

TI-2024-15349 CVE-2024-23243 · GHSA-8q68-7gwp-333p

Apple iOS and iPadOS: An app may be able to read sensitive location information

LOW 21

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00574 Published 2024-03-05 Fixed in 17.4

TI-2024-15361 CVE-2024-23256 · GHSA-9475-r4q8-rfwm

Apple iOS and iPadOS: A user's locked tabs may be briefly visible while switching tab…

LOW 16

A logic issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00256 Published 2024-03-05 Fixed in 17.4

TI-2023-22936 CVE-2023-42848 · GHSA-48j9-xh9v-wh6m

Heap-based buffer overflow in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-122

Vulnerabilities

Filters