Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

922 records

Vendor: Apple Component: Itunes Clear all filters
TI-2024-29724 CVE-2024-44157 · GHSA-q557-m5m4-m7pc

Buffer overflow in Apple TV

Priority LOW 24

A stack buffer overflow was addressed through improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00204 Published 2024-10-11 Fixed in 1.5.0, 12.13.3 CWE-120
TI-2024-18408 CVE-2024-27793 · GHSA-3m3m-q3hw-6qq6

Code injection in Apple iTunes for Windows

Priority LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00678 Published 2024-05-08 Fixed in 12.13.2 CWE-94
TI-2022-09972 CVE-2022-26717 · GHSA-53cf-5qp4-7jrr

Use after free in Apple macOS

Priority MEDIUM 44

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02035 Published 2022-11-01 Partial fix · 12.4, 15.5 +2 CWE-416
TI-2022-06893 CVE-2022-22629 · GHSA-pp63-cgj5-h996

Out-of-bounds write in Apple Safari

Priority MEDIUM 48

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05046 Published 2022-09-23 Partial fix · 15.4, 12.3 +2 CWE-787
TI-2020-18755 CVE-2020-36521 · GHSA-f54m-mh6r-hqvj

Out-of-bounds read in Apple iTunes for Windows

Priority LOW 32

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00444 Published 2022-09-23 Fixed in 12.10, 14.0 +3 CWE-125
TI-2022-09967 CVE-2022-26711 · GHSA-wj68-2jqr-2ghf

Integer overflow in Apple watchOS

Priority MEDIUM 49

An integer overflow issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04037 Published 2022-05-26 Fixed in 8.6, 15.5 +2 CWE-190
TI-2022-06878 CVE-2022-22612 · GHSA-8frx-qm3c-4j6p

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 35

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00801 Published 2022-03-18 Fixed in 15.4, 12.3 +2 CWE-787
TI-2022-06877 CVE-2022-22611 · GHSA-2v7v-cqmh-xjw2

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01088 Published 2022-03-18 Fixed in 15.4, 12.3 +2 CWE-125
TI-2018-03252 CVE-2018-4302 · GHSA-2573-rpmq-pq99

NULL pointer dereference in Apple iOS

Priority LOW 36

A null pointer dereference was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00945 Published 2021-12-23 Fixed in 11, 4 +3 CWE-476
TI-2021-11221 CVE-2021-30849 · GHSA-4jcp-gxvj-75jh

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 38

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01904 Published 2021-10-19 Partial fix · 14.8, 15 +2 CWE-787
TI-2021-01534 CVE-2021-1825 · GHSA-7gx9-m7c6-98gf

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01364 Published 2021-09-08 Partial fix · 14.5, 14.1 +4 CWE-79
TI-2020-05986 CVE-2020-7463 · GHSA-j8c4-54pw-h2vw

Use after free in FreeBSD

Priority LOW 25

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00399 Published 2021-03-26 No fix listed CWE-416
TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

Priority LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416
Load more