CVE-2021-31007

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30998

A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more...

CVE-2011-3440

The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS before 18.3 and Apple iPadOS before 18.3, which originates from processing...

Apple Security Update: iPadOS 17.7.8

Apple recommends to install security update iPadOS 17.7.8 on devices iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation...

SUSE CVE-2025-31215

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected process crash...

The vulnerability of operating systems iPadOS and iOS, related to access control errors, allows attackers to disclose confidential information.

The vulnerability of iPadOS and iOS operating systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose confidential information by connecting to the device...

The vulnerability of the Safari browser on iPadOS and iOS operating systems allows attackers to execute XSS attacks.

The vulnerability of the Safari browser on iPadOS and iOS operating systems relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

The vulnerability of the Power Management component in operating systems such as visionOS, MacOS, tvOS, iPadOS, and iOS allows attackers to trigger service failures.

The vulnerability of the Power Management component in operating systems such as visionOS, MacOS, tvOS, iPadOS, and iOS is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of FaceTime video/audio call technology in operating systems iPadOS and iOS allows a perpetrator to cause a service failure.

The vulnerability of FaceTime video telephony technology in iPadOS and iOS operating systems is related to the incorrect duration of a call session. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of FaceTime video/audio call technology in operating systems iPadOS and iOS, which allows a perpetrator to cause service failure.

The vulnerability of the FaceTime video/audio call technology in iPadOS and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS allows attackers to compromise the confidentiality of protected information.

The vulnerability of the RepairKit component in iPadOS, iOS, and visionOS is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality of protected information...

The vulnerabilities of the libxml2 and libxpc libraries in MacOS, iPadOS, iOS operating systems allow attackers to execute XSS attacks.

The vulnerability of the libxml2 and libxpc libraries in MacOS, iPadOS, and iOS operating systems stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the CoreMedia component in operating systems such as macOS, tvOS, iPadOS, iOS, visionOS, and watchOS relates to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the CoreText component in iPadOS, iOS, tvOS, and MacOS operating systems relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Safari browser on operating systems such as visionOS, macOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the Safari browser in operating systems such as visionOS, macOS, iOS, and iPadOS is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Baseband component in iPadOS and iOS operating systems allows attackers to intercept network traffic.

The vulnerability of the Baseband component in iPadOS and iOS systems relates to the transmission of confidential information in plaintext. Exploiting this vulnerability could allow a malicious actor to intercept network traffic remotely...

CVE-2025-31242

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to access sensitive user data...

CVE-2025-31234

The issue was addressed with improved input sanitization. This issue is fixed in visionOS 2.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory...