526 matches found
CVE-2025-27425 QR code user confirmation bypass with invalid protocol
Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136...
CVE-2025-25333
An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25300
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...
Apple Confirms ‘Extremely Sophisticated’ Exploit Threatening iOS Security
Apple fixes the USB Restricted Mode flaw in iOS 18.3.1 and iPadOS 18.3.1. Vulnerability exploited in targeted attacks.…...
CVE-2025-21253
CVE-2025-21253 affects Microsoft Edge for iOS and Android. A spoofing vulnerability is described, arising from UI handling errors that could mislead users. The CVE has a MEDIUM base score (CVSSv3.1: 5.3; Network attack vector, no user interaction required, low attack complexity) per the provided ...
CVE-2024-56955
An issue in Tencent Technology Shenzhen Company Limited QQMail iOS 6.6.4 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56959
An issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56957
An issue in Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56972
The Midea Home smart home software, specifically version 9.3.12 on iOS, contains a security vulnerability that allows an attacker to access sensitive user information . This is achieved by supplying a crafted link , which is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 ...
CVE-2024-56950
The KuGou Concept music applet for iOS version 4.0.61 , developed by KuGou Technology Co., Ltd, is vulnerable to an issue that allows attackers to access sensitive user information by providing a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and C...
CVE-2024-56963
The Sogou Input application for iOS 12.2.0 , developed by Beijing Sogou Technology Development Co., Ltd, is vulnerable to unauthorized access of sensitive user information. An attacker can exploit this by providing a manipulated or crafted link , which leads to the exposure of confidential data. ...
CVE-2024-56950
An issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56957
Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 is vulnerable to a security issue that allows an attacker to access sensitive user information by providing a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure S...
CVE-2024-56964
The Guazi Used Car mobile application for iOS version 10.15.1 (by Che Hao Duo Used Automobile Agency (Beijing) Co., Ltd) contains a vulnerability that allows attackers to access sensitive user information . The flaw is triggered by providing a crafted link , which may lead to unauthorized access ...
New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones
Everybody is reporting about a new security iPhone security feature with iOS 18: if the phone hasn't been used for a few days, it automatically goes into its "Before First Unlock" state and has to be rebooted. This is a really good security feature. But various police departments don't like it,...
CVE-2024-44261
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen...
CVE-2024-44180
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen...
Mozilla Firefox for iOS Security Bypass Vulnerability (CNVD-2024-36715)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for iOS, which can be exploited by attackers to execute Javascript commands in the browser...
CVE-2024-40818
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. An attacker with physical access may be able to use Siri to access sensitive user data...