Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

25 records

Release: Apple iOS and iPadOS 18.3 Clear all filters
TI-2025-17906 CVE-2025-24150 · GHSA-qmjg-q5x7-48p2

Command injection in Apple Safari

Priority MEDIUM 45

A privacy issue was addressed with improved handling of files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0294 Published 2025-01-27 Partial fix · 18.3, 15.3 CWE-77
TI-2025-17889 CVE-2025-24131 · GHSA-69r8-3jjv-g7rv

Buffer overflow in Apple iOS and iPadOS

Priority LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01268 Published 2025-01-27 Fixed in 18.3, 17.7.6 +4 CWE-120
TI-2025-17898 CVE-2025-24141 · GHSA-xmpx-2mhf-xq2j

Incorrect authorization in Apple iOS and iPadOS

Priority LOW 15

An authentication issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00214 Published 2025-01-27 Fixed in 18.3 CWE-863
TI-2025-17929 CVE-2025-24177 · GHSA-hfq6-5gvf-hm89

NULL pointer dereference in Apple iOS and iPadOS

Priority LOW 34

A null pointer dereference was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00838 Published 2025-01-27 Fixed in 18.3, 17.7.6 +3 CWE-476
TI-2025-17894 CVE-2025-24137 · GHSA-rrg9-j69g-xfm7

Type confusion in Apple iOS and iPadOS

Priority LOW 39

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00954 Published 2025-01-27 Fixed in 18.3, 17.7.4 +3 CWE-843
TI-2025-17900 CVE-2025-24143 · GHSA-23h9-xj7q-3m7r

Missing authorization in Apple Safari

Priority LOW 30

The issue was addressed with improved access restrictions to the file system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00811 Published 2025-01-27 Partial fix · 18.3, 15.3 +1 CWE-862
TI-2025-17915 CVE-2025-24159 · GHSA-q7qh-x2m6-6www

Code injection in Apple iOS and iPadOS

Priority LOW 36

A validation issue was addressed with improved logic.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00324 Published 2025-01-27 Fixed in 18.3, 17.7.4 +4 CWE-94
TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

Out-of-bounds read in Apple Safari

Priority LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125
TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

Priority LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2025-17910 CVE-2025-24154 · GHSA-mjmw-w38h-7mcx

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 50

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0116 Published 2025-01-27 Fixed in 18.3, 13.7.3 +3 CWE-757
TI-2025-17905 CVE-2025-24149 · GHSA-2gv2-58w9-6q94

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00332 Published 2025-01-27 Fixed in 18.3, 17.7.4 +5 CWE-125
TI-2025-17865 CVE-2025-24104 · GHSA-wjg3-gwjx-xwj5

Link following in Apple iOS and iPadOS

Priority LOW 28

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01529 Published 2025-01-27 Fixed in 18.3, 17.7.4 CWE-59
TI-2025-17887 CVE-2025-24129 · GHSA-v87f-3m66-pc8x

Type confusion in Apple iOS and iPadOS

Priority MEDIUM 41

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01311 Published 2025-01-27 Fixed in 18.3, 13.7.5 +3 CWE-843