Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

19 records

Release: Apple iOS and iPadOS 18 Clear all filters
TI-2024-27231 CVE-2024-40852 · GHSA-wjg2-c55h-phf5

Missing authorization in Apple iOS and iPadOS

Priority LOW 39

This issue was addressed by restricting options offered on a locked device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00482 Published 2024-09-16 Fixed in 18 CWE-862
TI-2024-29753 CVE-2024-44187 · GHSA-xmf6-p99q-898v

Origin validation error in Apple Safari

Priority LOW 30

A cross-origin issue existed with "iframe" elements.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00646 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-346
TI-2024-29764 CVE-2024-44198 · GHSA-x44q-9q24-vjf9

Integer overflow in Apple iOS and iPadOS

Priority LOW 24

An integer overflow was addressed through improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00187 Published 2024-09-16 Fixed in 18, 15 +2 CWE-190
TI-2024-27236 CVE-2024-40857 · GHSA-8476-jpv4-xp4p

Cross-site scripting in Apple Safari

Priority LOW 28

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00553 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-79
TI-2024-29734 CVE-2024-44167 · GHSA-22rq-cmx2-gvr4

Path traversal in Apple iOS and iPadOS

Priority LOW 38

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00626 Published 2024-09-16 Fixed in 18, 13.7 +3 CWE-22
TI-2024-18477 CVE-2024-27869 · GHSA-6h8g-35xx-6xv3

Path traversal in Apple iOS and iPadOS

Priority LOW 39

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00529 Published 2024-09-16 Fixed in 18, 15 CWE-22
TI-2024-29768 CVE-2024-44202 · GHSA-5m5p-hvxj-grxr

Improper authentication in Apple Safari

Priority LOW 31

An authentication issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00501 Published 2024-09-16 Fixed in 18 CWE-287
TI-2024-29702 CVE-2024-44131 · GHSA-cmvv-gwr2-36xm

Link following in Apple iOS and iPadOS

Priority LOW 26

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00664 Published 2024-09-16 Fixed in 18, 15 CWE-59