Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Apple watchOS 8.4 Clear all filters
TI-2022-06861 CVE-2022-22594 · GHSA-3xf9-qwxv-r3r4

Origin validation error in Apple iOS and iPadOS

Priority LOW 30

A cross-origin issue in the IndexDB API was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00821 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-346
TI-2022-06860 CVE-2022-22593 · GHSA-85p9-rg6j-hvqw

Buffer overflow in Apple iOS and iPadOS

Priority LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0148 Published 2022-03-18 Fixed in 15.3, 12.2 +3 CWE-120
TI-2022-06857 CVE-2022-22590 · GHSA-8gq6-m624-5hx9

Use after free in Apple iOS and iPadOS

Priority MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01555 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-416
TI-2022-06851 CVE-2022-22584 · GHSA-7qqr-c8r6-gcwc

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 37

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01611 Published 2022-03-18 Fixed in 15.3, 12.2 +1 CWE-787
TI-2022-06852 CVE-2022-22585 · GHSA-9fx7-23qc-wwjv

Link following in Apple iOS and iPadOS

Priority LOW 36

An issue existed within the path validation logic for symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2022-03-18 Fixed in 15.3, 12.2 +2 CWE-59