Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: Apple iOS and iPadOS 16.7.8, 17.5 Clear all filters
TI-2024-18420 CVE-2024-27806 · GHSA-p457-rwhw-j6q4

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved environment sanitization.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00259 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-200
TI-2024-18445 CVE-2024-27831 · GHSA-9p2j-9mm4-8r6m

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.003 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-786
TI-2024-18434 CVE-2024-27820 · GHSA-qvvc-v3mj-qch5

Memory corruption in Apple Safari

Priority MEDIUM 48

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01016 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-119
TI-2024-18416 CVE-2024-27802 · GHSA-mxj9-494w-v3gp

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00418 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-787
TI-2024-18452 CVE-2024-27838 · GHSA-j24x-6m7r-h4gp

Cross-site scripting in Apple Safari

Priority LOW 30

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00732 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-79
TI-2024-15357 CVE-2024-23251 · GHSA-g3vc-vgcj-26vj

Improper authentication in Apple iOS and iPadOS

Priority LOW 21

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00374 Published 2024-06-10 Fixed in 16.7.8, 17.5 +2 CWE-287
TI-2024-18419 CVE-2024-27805 · GHSA-6jq2-3f4f-qgw5

Improper input validation in Apple iOS and iPadOS

Priority LOW 24

An issue was addressed with improved validation of environment variables.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2024-06-10 Fixed in 16.7.8, 17.5 +4 CWE-20
TI-2024-18447 CVE-2024-27833 · GHSA-984g-34ww-rvq9

Integer overflow in Apple Safari

Priority MEDIUM 42

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +1 CWE-190