The vulnerability of the tvOS operating system, the iOS operating system, the iPadOS operating system, and the watchOS operating system lies in the use of memory after it is freed, allowing an attacker to execute arbitrary control commands.

The vulnerability of the tvOS operating system, the iOS operating system, the iPadOS operating system, and the watchOS operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary control commands...

PT-2023-27498 · Unknown · Skylark App For Android +1

Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead a user to...

PT-2023-23751 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.6 iOS versions prior to 16.5 iPadOS versions prior to 15.7.6 iPadOS versions prior to 16.5 Description: The issue allows a deleted photo to be re-surfaced without authentication through the Shake-to-undo feature. Th...

The vulnerability of the graphical driver of operating systems iPadOS and iOS allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the graphics driver of operating systems iPadOS and iOS stems from the issue of operations going beyond the buffer in memory during incorrect software rendering of H.264 video. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

SUSE CVE-2015-7103

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

SUSE CVE-2016-4762

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2023-22367

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack...

CVE-2023-23131

Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security ATS Settings...

CVE-2022-31746

Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability affects Firefox for iOS 102...

CVE-2022-42861

This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2. An app may be able to break out of its sandbox...

PT-2022-21577 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 Description: An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input validation. An app may be able to disclose kernel memory. Recommendations: For...

About the security content of Safari 16.2

About the security content of Safari 16.2 This document describes the security content of Safari 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2022-41568

LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat...

PT-2022-25943 · Line · Line Client For Ios

Name of the Vulnerable Software and Affected Versions: LINE client for iOS versions prior to 12.17.0 Description: The issue is related to the LINE client for iOS, where sharing an invalid shared key of end-to-end encryption e2ee in a group chat might cause the application to crash. Recommendation...

CVE-2022-32859

A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results...

PT-2022-21601 · Apple · Airpods +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible...

CVE-2022-41797

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a...

CVE-2022-34156

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack...

CVE-2022-22667

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges...

Wire-ios 安全漏洞

Wire-ios is a client layer that handles all the data displayed in a mobile application. A security vulnerability exists in Wire-ios, which stems from the fact that in versions prior to 3.95, an incorrectly formatted resource identifier may cause the iOS Wire client to repeatedly crash on startup,...