Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

39 records

Release: Apple tvOS 14.5 Clear all filters
TI-2021-01520 CVE-2021-1809 · GHSA-2wwm-h8xc-j39r

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 36

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01768 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787
TI-2021-01535 CVE-2021-1826 · GHSA-868x-c2ph-qm3r

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 30

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01144 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-79
TI-2021-01528 CVE-2021-1817 · GHSA-wm9j-fw55-hv9g

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-787
TI-2021-01455 CVE-2021-1740 · GHSA-9hc5-m4g5-3m3c

Path traversal in Apple iOS and iPadOS

Priority LOW 27

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01044 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-22
TI-2021-01483 CVE-2021-1770 · GHSA-hpj8-7jw7-hq79

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 47

A buffer overflow may result in arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02754 Published 2021-09-08 Fixed in 14.5, 7.4 +1 CWE-119
TI-2021-01534 CVE-2021-1825 · GHSA-7gx9-m7c6-98gf

Cross-site scripting in Apple iOS and iPadOS

Priority LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01364 Published 2021-09-08 Partial fix · 14.5, 14.1 +4 CWE-79
TI-2021-01527 CVE-2021-1816 · GHSA-82pj-27w3-mggj

Memory corruption in Apple iOS and iPadOS

Priority LOW 37

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01567 Published 2021-09-08 Fixed in 14.5, 7.4 CWE-119
TI-2021-01519 CVE-2021-1808 · GHSA-4xx2-x648-8hgc

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 36

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01746 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787
TI-2021-01454 CVE-2021-1739 · GHSA-5x9g-fm6c-gp28

Path traversal in Apple iOS and iPadOS

Priority LOW 25

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00367 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-22
TI-2021-01526 CVE-2021-1815 · GHSA-vx92-qgjq-h8fv

Path traversal in Apple iOS and iPadOS

Priority LOW 25

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.004 Published 2021-09-08 Fixed in 14.5, 7.4 +1 CWE-22
TI-2021-01577 CVE-2021-1875 · GHSA-hfh7-m9jr-j829

Double free in Apple iOS and iPadOS

Priority LOW 36

A double free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00911 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-415
TI-2021-01585 CVE-2021-1883 · GHSA-vq82-pf9c-33h9

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01999 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787
TI-2021-01586 CVE-2021-1884 · GHSA-2v79-m39q-gmxx

Race condition in Apple iOS and iPadOS

Priority LOW 30

A race condition was addressed with improved locking.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01624 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-362
TI-2021-01587 CVE-2021-1885 · GHSA-f98m-j6f8-7632

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 37

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01237 Published 2021-09-08 Fixed in 14.5, 7.4 +1 CWE-125
TI-2021-01568 CVE-2021-1864 · GHSA-cmxj-r24c-gf8p

Use after free in Apple iOS and iPadOS

Priority MEDIUM 46

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02155 Published 2021-09-08 Fixed in 14.5, 7.4 CWE-416
TI-2021-11046 CVE-2021-30661 · GHSA-79qq-9x66-f5r5

Use after free in Apple iOS and iPadOS

Priority CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04491 Published 2021-09-08 Partial fix · 14.5, 14.1 +3 CWE-416
TI-2021-11037 CVE-2021-30652 · GHSA-4cmm-h58v-xqp3

Race condition in Apple iOS and iPadOS

Priority LOW 32

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00824 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-362
TI-2021-11045 CVE-2021-30660 · GHSA-736q-c62w-j8xj

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 37

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02072 Published 2021-09-08 Fixed in 14.5, 7.4 +1 CWE-125
TI-2021-01584 CVE-2021-1882 · GHSA-wjj4-8gg2-x22g

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 45

A memory corruption issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787
Load more