Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

20 records

Release: Apple Safari Safari 12.1 Clear all filters
TI-2019-06139 CVE-2019-8563 · GHSA-7j96-jhpg-mggh

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0174 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06138 CVE-2019-8562 · GHSA-5qc4-qvx4-264m

Out-of-bounds write in Apple iOS

Priority MEDIUM 44

A memory corruption issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01371 Published 2019-12-18 Fixed in iOS 12.2, tvOS 12.2 +2 CWE-787
TI-2019-06135 CVE-2019-8559 · GHSA-qj23-qqxr-6g3c

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01769 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06134 CVE-2019-8558 · GHSA-jj32-8cmg-q469

Out-of-bounds write in Apple iOS

Priority MEDIUM 48

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07536 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06133 CVE-2019-8556 · GHSA-pgv5-pw9f-4x5j

Use after free in Apple iOS

Priority MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0142 Published 2019-12-18 Fixed in iOS 12.2, tvOS 12.2 +3 CWE-416
TI-2019-06128 CVE-2019-8551 · GHSA-cmg5-g4rq-vw3j

Cross-site scripting in Apple iOS

Priority LOW 30

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01276 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-79
TI-2019-06121 CVE-2019-8544 · GHSA-7cj7-pfg5-fxwf

Out-of-bounds write in Apple iOS

Priority MEDIUM 43

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02348 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06114 CVE-2019-8536 · GHSA-3f9p-7mj8-2f34

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02078 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06113 CVE-2019-8535 · GHSA-g65r-99hv-qpfv

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02185 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-787
TI-2019-06102 CVE-2019-8524 · GHSA-2g9q-g8g7-r7xw

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01798 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-787
TI-2019-06101 CVE-2019-8523 · GHSA-8hr6-w86p-r6w9

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02175 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-787
TI-2019-06096 CVE-2019-8518 · GHSA-wvj5-49vm-wf8w

Out-of-bounds write in Apple iOS

Priority MEDIUM 51

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.11189 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
TI-2019-06093 CVE-2019-8515 · GHSA-7wpr-8w56-gx6v

Improper input validation in Apple iOS

Priority LOW 31

A cross-origin issue existed with the fetch API.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01225 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-20
TI-2019-06084 CVE-2019-8506 · GHSA-fg7h-q67h-82rg

Type confusion in Apple iOS

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16159 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-843
TI-2019-06083 CVE-2019-8505 · GHSA-m5fg-phfr-7975

Cross-site scripting in Apple iOS

Priority LOW 28

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0065 Published 2019-12-18 Fixed in iOS 12.2, Safari 12.1 CWE-79
TI-2019-06081 CVE-2019-8503 · GHSA-66q9-mrhp-9hrp

Improper input validation in Apple iOS

Priority MEDIUM 42

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02002 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-20
TI-2019-05182 CVE-2019-7292 · GHSA-gfxm-h9rh-4vcm

Improper input validation in Apple iOS

Priority LOW 32

A validation issue was addressed with improved logic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01505 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-20
TI-2019-05175 CVE-2019-7285 · GHSA-vfpv-wm4r-vp6p

Use after free in Apple iOS

Priority MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02097 Published 2019-12-18 Partial fix · iOS 12.2, tvOS 12.2 +3 CWE-416
TI-2019-04402 CVE-2019-6204 · GHSA-r5q9-989v-wqpc

Cross-site scripting in Apple iOS

Priority LOW 28

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00679 Published 2019-12-18 Fixed in iOS 12.2, Safari 12.1 CWE-79
TI-2019-04399 CVE-2019-6201 · GHSA-fvg7-8gpm-h9v4

Out-of-bounds write in Apple iOS

Priority MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01953 Published 2019-12-18 Fixed in iOS 12.2, tvOS 12.2 +3 CWE-787