Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Release: Apple iOS and iPadOS 16.7.6, 17.4 Clear all filters
TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

Priority MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20
TI-2024-15383 CVE-2024-23278 · GHSA-vhc9-gpcr-f248

Code injection in Apple iOS and iPadOS

Priority MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00494 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-94
TI-2024-15367 CVE-2024-23262 · GHSA-g4m8-6xwj-mc45

Incorrect authorization in Apple iOS and iPadOS

Priority LOW 21

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0048 Published 2024-03-08 Fixed in 16.7.6, 17.4 +1 CWE-863
TI-2024-15341 CVE-2024-23235 · GHSA-v98w-rc85-gp5v

Information disclosure in Apple iOS and iPadOS

Priority LOW 38

A race condition was addressed with additional validation.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00501 Published 2024-03-08 Fixed in 16.7.6, 17.4 +3 CWE-200
TI-2024-15391 CVE-2024-23286 · GHSA-6f36-v2cc-hv4m

Buffer overflow in Apple iOS and iPadOS

Priority MEDIUM 51

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01236 Published 2024-03-08 Fixed in 16.7.6, 17.4 +5 CWE-120
TI-2024-15369 CVE-2024-23264 · GHSA-54qr-qrfv-pmc3

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 26

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00797 Published 2024-03-08 Fixed in 16.7.6, 17.4 +4 CWE-125
TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

Priority LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693