Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Release: Apple watchOS 11.3 Clear all filters
TI-2025-17915 CVE-2025-24159 · GHSA-q7qh-x2m6-6www

Code injection in Apple iOS and iPadOS

Priority LOW 36

A validation issue was addressed with improved logic.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00324 Published 2025-01-27 Fixed in 18.3, 17.7.4 +4 CWE-94
TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

Out-of-bounds read in Apple Safari

Priority LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125
TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

Priority LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79
TI-2025-17847 CVE-2025-24085 · GHSA-7h23-57pg-3hwc

Use after free in Apple iOS and iPadOS

Priority CRITICAL 100KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17401 Published 2025-01-27 Fixed in 18.3, 17.7.6 +5 CWE-416
TI-2025-17905 CVE-2025-24149 · GHSA-2gv2-58w9-6q94

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00332 Published 2025-01-27 Fixed in 18.3, 17.7.4 +5 CWE-125