Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

Release: Apple iOS and iPadOS 16.7.9, 17.6 Clear all filters
TI-2024-27164 CVE-2024-40782 · GHSA-4rw8-cxgp-9r2g

Use after free in Apple Safari

Priority MEDIUM 51

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-27208 CVE-2024-40829 · GHSA-8qjj-rx3q-j7f8

Use after free in Apple iOS and iPadOS

Priority MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00814 Published 2024-07-29 Fixed in 16.7.9, 17.6 +2 CWE-416
TI-2024-27158 CVE-2024-40776 · GHSA-4645-h4xp-pj82

Use after free in Apple Safari

Priority LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01006 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-27181 CVE-2024-40799 · GHSA-mhm9-743p-jfxq

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 32

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00426 Published 2024-07-29 Fixed in 16.7.9, 17.6 +5 CWE-125
TI-2024-27166 CVE-2024-40784 · GHSA-4j6f-p6g5-r4mh

Integer overflow in Apple iOS and iPadOS

Priority LOW 36

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0029 Published 2024-07-29 Fixed in 16.7.9, 17.6 +4 CWE-190
TI-2024-27170 CVE-2024-40788 · GHSA-98g4-wc2v-qqh4

Type confusion in Apple iOS and iPadOS

Priority LOW 27

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00316 Published 2024-07-29 Fixed in 16.7.9, 17.6 +5 CWE-843
TI-2024-27201 CVE-2024-40822 · GHSA-r54r-9gw2-2w5v

Improper access control in Apple iOS and iPadOS

Priority LOW 13

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00408 Published 2024-07-29 Fixed in 16.7.9, 17.6 +2 CWE-284
TI-2024-27171 CVE-2024-40789 · GHSA-6mp9-hrx8-6ffg

Out-of-bounds read in Apple Safari

Priority LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01148 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27167 CVE-2024-40785 · GHSA-6hq7-9r57-p64g

Cross-site scripting in Apple Safari

Priority LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2024-07-29 Fixed in 17.6, 16.7.9 +3 CWE-79
TI-2024-27175 CVE-2024-40793 · GHSA-cg5c-5558-3qmm

Information disclosure in Apple iOS and iPadOS

Priority LOW 25

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00303 Published 2024-07-29 Fixed in 16.7.9, 17.6 +4 CWE-200
TI-2024-27168 CVE-2024-40786 · GHSA-552v-q4m3-2x72

Improper access control in Apple iOS and iPadOS

Priority LOW 35

This issue was addressed through improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00959 Published 2024-07-29 Fixed in 16.7.9, 17.6 +1 CWE-284
TI-2024-27215 CVE-2024-40836 · GHSA-ch9g-7w68-jqjr

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 40

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00555 Published 2024-07-29 Fixed in 16.7.9, 17.6 +2 CWE-200
TI-2024-18480 CVE-2024-27873 · GHSA-m23c-995x-54xh

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0029 Published 2024-07-29 Fixed in 16.7.9, 17.6 +3 CWE-787
TI-2024-27162 CVE-2024-40780 · GHSA-j573-cwg3-wh35

Out-of-bounds read in Apple Safari

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.007 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27161 CVE-2024-40779 · GHSA-7j6x-9hgr-mv7c

Out-of-bounds read in Apple Safari

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00337 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27160 CVE-2024-40778 · GHSA-prvp-xgc5-f378

Improper authentication in Apple iOS and iPadOS

Priority LOW 16

An authentication issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00294 Published 2024-07-29 Fixed in 16.7.9, 17.6 +1 CWE-287
TI-2024-27188 CVE-2024-40806 · GHSA-47wg-8627-3f57

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00336 Published 2024-07-29 Fixed in 16.7.9, 17.6 +5 CWE-125