Vulnerabilities

TI-2019-06146 CVE-2019-8570 · GHSA-rm72-v5wp-j35g

Apple iOS: Processing maliciously crafted web content may disclose sensitive user…

LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02615 Published 2020-10-27 Fixed in 12.1, 12.0 +2

TI-2019-05178 CVE-2019-7288 · GHSA-36r6-3vxv-93hp

MEDIUM 45

The issue was addressed with improved validation on the FaceTime server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01383 Published 2020-10-27 Fixed in 12.1, 10.14

TI-2018-03392 CVE-2018-4448 · GHSA-jqhx-vrx5-vcf4

LOW 25

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00295 Published 2020-10-27 Fixed in 12.1, 10.14 +1

TI-2018-03388 CVE-2018-4444 · GHSA-46h6-5944-7cqw

LOW 31

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01117 Published 2020-10-27 Fixed in 12.1, 12.0 +1

TI-2018-03373 CVE-2018-4428 · GHSA-vw94-22h5-m57w

LOW 31

A lock screen issue allowed access to the share function on a locked device.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00275 Published 2020-10-27 Fixed in 12.1

TI-2018-03327 CVE-2018-4381 · GHSA-fhhr-6q8c-w2wf

LOW 26

A resource exhaustion issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00614 Published 2020-10-27 Fixed in 12.1 CWE-400

TI-2018-03288 CVE-2018-4339 · GHSA-cg6h-7cf6-v3hp

LOW 24

This issue was addressed with a new entitlement.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00269 Published 2020-10-27 Fixed in 12.1