Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

33 records

Release: Apple visionOS 2.4 Clear all filters
TI-2025-21770 CVE-2025-30470 · GHSA-5qvg-xp2f-fp45

Path traversal in Apple iOS and iPadOS

Priority LOW 25

A path handling issue was addressed with improved logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00343 Published 2025-03-31 Fixed in 18.4, 13.7.5 +4 CWE-22
TI-2025-21727 CVE-2025-30427 · GHSA-62f2-58pp-q2wg

Use after free in Apple Safari

Priority LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00833 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-416
TI-2025-17964 CVE-2025-24214 · GHSA-m773-p743-chvm

Improper access control in Apple iOS and iPadOS

Priority LOW 25

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-284
TI-2025-17991 CVE-2025-24243 · GHSA-qm2f-w2gq-vqp6

Code injection in Apple iOS and iPadOS

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-94
TI-2025-21726 CVE-2025-30426 · GHSA-7345-q82m-2h46

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01235 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-200
TI-2025-21730 CVE-2025-30430 · GHSA-xg7p-78j8-hfrp

Improper authentication in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed through improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-287
TI-2025-17934 CVE-2025-24182 · GHSA-q556-7cxr-pm34

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00294 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-125
TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400
TI-2025-17932 CVE-2025-24180 · GHSA-793h-885v-rxrh

Open redirect in Apple Safari

Priority LOW 39

The issue was addressed with improved input validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0104 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-601
TI-2025-17978 CVE-2025-24230 · GHSA-fhfh-9mcw-2g3q

Out-of-bounds read in Apple iOS and iPadOS

Priority MEDIUM 53

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0192 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-125
TI-2025-21738 CVE-2025-30438 · GHSA-p57m-j445-jv2j

Improper access control in Apple iOS and iPadOS

Priority LOW 25

This issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00291 Published 2025-03-31 Fixed in 18.4, 13.7.5 +4 CWE-284
TI-2025-22424 CVE-2025-31182 · GHSA-rwvj-3jx7-frmw

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed with improved handling of symlinks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01256 Published 2025-03-31 Fixed in 18.4, 13.7.5 +4 CWE-862
TI-2025-17985 CVE-2025-24237 · GHSA-8h8h-4h46-6wx3

Buffer overflow in Apple iOS and iPadOS

Priority MEDIUM 52

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01637 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-120
TI-2025-17970 CVE-2025-24221 · GHSA-vc63-6wjr-qvp6

Incorrect authorization in Apple iOS and iPadOS

Priority MEDIUM 40

This issue was addressed with improved data access restriction.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00872 Published 2025-03-31 Fixed in 18.4, 17.7.6 +1 CWE-863
TI-2025-17926 CVE-2025-24173 · GHSA-hc9m-f2mx-w9j7

Improper access control in Apple iOS and iPadOS

Priority LOW 36

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0033 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-284
TI-2025-21733 CVE-2025-30433 · GHSA-wmw5-c4qx-m982

Improper access control in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed with improved access restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01288 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-284
Load more