Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

56 records

Release: Apple iOS and iPadOS 18.4 Clear all filters
TI-2025-21770 CVE-2025-30470 · GHSA-5qvg-xp2f-fp45

Path traversal in Apple iOS and iPadOS

Priority LOW 25

A path handling issue was addressed with improved logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00343 Published 2025-03-31 Fixed in 18.4, 13.7.5 +4 CWE-22
TI-2025-21727 CVE-2025-30427 · GHSA-62f2-58pp-q2wg

Use after free in Apple Safari

Priority LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00833 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-416
TI-2025-22432 CVE-2025-31191 · GHSA-h2wh-36m8-j3rp

Information disclosure in Apple iOS and iPadOS

Priority LOW 25

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00469 Published 2025-03-31 Fixed in 18.4, 13.7.5 +3 CWE-200
TI-2025-17952 CVE-2025-24202 · GHSA-9r28-p42w-83mg

Improper access control in Apple iOS and iPadOS

Priority LOW 24

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00265 Published 2025-03-31 Fixed in 18.4, 15.4 CWE-284
TI-2025-17964 CVE-2025-24214 · GHSA-m773-p743-chvm

Improper access control in Apple iOS and iPadOS

Priority LOW 25

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-284
TI-2025-17859 CVE-2025-24097 · GHSA-28ch-w3c2-xg68

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 23

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00369 Published 2025-03-31 Fixed in 18.4, 17.7.7 +3 CWE-125
TI-2025-17991 CVE-2025-24243 · GHSA-qm2f-w2gq-vqp6

Code injection in Apple iOS and iPadOS

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-94
TI-2025-21726 CVE-2025-30426 · GHSA-7345-q82m-2h46

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01235 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-200
TI-2025-21730 CVE-2025-30430 · GHSA-xg7p-78j8-hfrp

Improper authentication in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed through improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-287
TI-2025-17934 CVE-2025-24182 · GHSA-q556-7cxr-pm34

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00294 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-125
TI-2025-17992 CVE-2025-24244 · GHSA-f2wv-6cwg-48rq

Information disclosure in Apple iOS and iPadOS

Priority LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00322 Published 2025-03-31 Fixed in 18.4, 17.7.6 +4 CWE-200
TI-2025-17955 CVE-2025-24205 · GHSA-5jpr-cwj3-v74m

Improper access control in Apple iOS and iPadOS

Priority LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-284
TI-2025-17959 CVE-2025-24209 · GHSA-j8gc-8grp-vffr

Buffer overflow in Apple Safari

Priority LOW 33

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00903 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +2 CWE-120
TI-2025-17948 CVE-2025-24198 · GHSA-38rr-jcx6-prmh

Improper access control in Apple iOS and iPadOS

Priority LOW 30

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1MEDIUM 6.6 Physical No auth User interaction EPSS 0.00445 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-284
TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400
Load more