Ios Security Vulnerabilities and Issues — Page 34 of Ios CVE List

Lucene search

AppleIos

1737 matches found

CVE•added 2024/10/28 9:15 p.m.•42 views

CVE-2024-44273

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, tvOS 18.1. A malicious app may be able to access private information.

5.5CVSS5.2AI score0.00029EPSS

CVE•added 2025/01/27 10:15 p.m.•42 views

CVE-2024-54488

A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.7.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Photos in the Hidden Photos Album may be viewed without authentication.

5.3CVSS5.8AI score0.00126EPSS

CVE•added 2025/03/10 7:15 p.m.•42 views

CVE-2024-54558

A clickjacking issue was addressed with improved out-of-process view handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to trick a user into granting access to photos from the user's photo library.

2.8CVSS5.4AI score0.00008EPSS

CVE•added 2025/05/12 10:15 p.m.•42 views

CVE-2025-31222

A correctness issue was addressed with improved checks. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A user may be able to elevate privileges.

7.8CVSS5.6AI score0.00015EPSS

CVE•added 2025/05/12 10:15 p.m.•42 views

CVE-2025-31245

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination.

5.5CVSS5.6AI score0.00016EPSS

CVE•added 2019/04/03 6:29 p.m.•41 views

CVE-2018-4352

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of notes deletions. This issue affected versions prior to iOS 12.

3.3CVSS4.9AI score0.00054EPSS

CVE•added 2023/06/23 6:15 p.m.•41 views

CVE-2022-42792

This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information

5.5CVSS4.2AI score0.00053EPSS

CVE•added 2024/12/12 2:15 a.m.•41 views

CVE-2024-44201

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service.

5.5CVSS5.8AI score0.00029EPSS

CVE•added 2024/09/17 12:15 a.m.•41 views

CVE-2024-44202

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.

5.3CVSS6.3AI score0.00099EPSS

CVE•added 2024/10/28 9:15 p.m.•41 views

CVE-2024-44215

This issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing an image may result in disclosure of process memory.

5.5CVSS5.3AI score0.00028EPSS

CVE•added 2024/10/28 9:15 p.m.•41 views

CVE-2024-44278

An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. A sandboxed app may be able to access sensitive u...

5.5CVSS4.8AI score0.00045EPSS

CVE•added 2025/01/27 10:15 p.m.•41 views

CVE-2024-54517

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.

7.8CVSS5.7AI score0.00029EPSS

CVE•added 2025/05/12 10:15 p.m.•41 views

CVE-2025-31217

The issue was addressed with improved input validation. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

6.5CVSS5.8AI score0.00143EPSS

CVE•added 2019/04/03 6:29 p.m.•40 views

CVE-2018-4335

A validation issue was addressed with improved input sanitization. This issue affected versions prior to iOS 12.

5.5CVSS6AI score0.00226EPSS

CVE•added 2019/04/03 6:29 p.m.•40 views

CVE-2018-4439

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

6.5CVSS6.6AI score0.00344EPSS

CVE•added 2020/10/27 8:15 p.m.•40 views

CVE-2018-4444

A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

6.5CVSS6.3AI score0.00457EPSS

CVE•added 2024/01/10 10:15 p.m.•40 views

CVE-2023-42831

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to fingerprint the user.

5.5CVSS5.4AI score0.00108EPSS

CVE•added 2024/09/17 12:15 a.m.•40 views

CVE-2024-40840

This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data.

4.6CVSS5.7AI score0.00059EPSS

CVE•added 2024/09/17 12:15 a.m.•40 views

CVE-2024-44180

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen.

2.4CVSS5.5AI score0.0005EPSS

CVE•added 2024/10/28 9:15 p.m.•40 views

CVE-2024-44218

This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption.

7.8CVSS5.4AI score0.00021EPSS

CVE•added 2024/10/28 9:15 p.m.•40 views

CVE-2024-44239

An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. An app may be able to leak sensitive k...

5.5CVSS4.7AI score0.00037EPSS

CVE•added 2025/03/10 7:15 p.m.•40 views

CVE-2024-54469

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, macOS Sequoia 15, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. A local user may be able to leak sensitive user information.

5.5CVSS5.2AI score0.00015EPSS

CVE•added 2025/05/12 10:15 p.m.•40 views

CVE-2025-24111

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.3, visionOS 2.3, iPadOS 17.7.7, watchOS 11.3, macOS Sonoma 14.7.5, iOS 18.3 and iPadOS 18.3, tvOS 18.3, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

5.5CVSS5.9AI score0.00012EPSS

CVE•added 2025/05/12 10:15 p.m.•40 views

CVE-2025-31234

The issue was addressed with improved input sanitization. This issue is fixed in visionOS 2.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

8.2CVSS5.7AI score0.00066EPSS

CVE•added 2019/04/03 6:29 p.m.•39 views

CVE-2018-4327

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.

9.3CVSS7.1AI score0.15106EPSS

CVE•added 2019/04/03 6:29 p.m.•39 views

CVE-2018-4356

A permissions issue existed. This issue was addressed with improved permission validation. This issue affected versions prior to iOS 12.

5.3CVSS5.9AI score0.00179EPSS

CVE•added 2019/04/03 6:29 p.m.•39 views

CVE-2018-4380

A lock screen issue allowed access to photos and contacts on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1.

5.5CVSS4.8AI score0.0006EPSS

CVE•added 2019/04/03 6:29 p.m.•39 views

CVE-2018-4429

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2.

6.5CVSS5.8AI score0.00222EPSS

CVE•added 2024/01/10 10:15 p.m.•39 views

CVE-2023-40438

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14, iOS 16.7 and iPadOS 16.7. An app may be able to access edited photos saved to a temporary directory.

5.5CVSS4.8AI score0.00058EPSS

CVE•added 2024/10/28 9:15 p.m.•39 views

CVE-2024-40867

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox.

9.6CVSS5.6AI score0.00157EPSS

CVE•added 2024/10/28 9:15 p.m.•39 views

CVE-2024-44126

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption.

7.8CVSS5.4AI score0.00035EPSS

CVE•added 2024/10/28 10:15 p.m.•39 views

CVE-2024-44145

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. An attacker with physical access to a macOS device with Sidecar enabled may be able to bypass the Lock Screen.

6.1CVSS5AI score0.00033EPSS

CVE•added 2025/03/10 7:15 p.m.•39 views

CVE-2024-44227

The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory.

7.5CVSS5.7AI score0.00034EPSS

CVE•added 2024/10/28 9:15 p.m.•39 views

CVE-2024-44251

This issue was addressed through improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to view restricted content from the lock screen.

2.4CVSS5.5AI score0.00043EPSS

CVE•added 2024/10/28 9:15 p.m.•39 views

CVE-2024-44254

This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. An app may be able to access sensitive user data.

5.5CVSS5.1AI score0.00035EPSS

CVE•added 2025/01/27 10:15 p.m.•39 views

CVE-2024-54512

The issue was addressed by removing the relevant flags. This issue is fixed in watchOS 11.2, iOS 18.2 and iPadOS 18.2. A system binary could be used to fingerprint a user's Apple Account.

9.1CVSS5.8AI score0.00051EPSS

CVE•added 2019/04/03 6:29 p.m.•38 views

CVE-2018-4216

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1.

5.5CVSS5.2AI score0.00194EPSS

CVE•added 2023/06/23 6:15 p.m.•38 views

CVE-2022-46715

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences

5.5CVSS4.3AI score0.00015EPSS

CVE•added 2024/01/10 10:15 p.m.•38 views

CVE-2023-42869

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 13.4, iOS 16.5 and iPadOS 16.5. Multiple issues in libxml2.

7.5CVSS7.3AI score0.00136EPSS

CVE•added 2024/09/17 12:15 a.m.•38 views

CVE-2024-27879

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause unexpected app termination.

7.5CVSS6AI score0.00252EPSS

CVE•added 2024/12/12 2:15 a.m.•38 views

CVE-2024-44200

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.

5.5CVSS5.8AI score0.0002EPSS

CVE•added 2024/12/12 2:15 a.m.•38 views

CVE-2024-44212

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.

5.3CVSS5.8AI score0.00052EPSS

CVE•added 2025/01/27 10:15 p.m.•38 views

CVE-2024-54518

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.

5.3CVSS5.7AI score0.00024EPSS

CVE•added 2025/01/27 10:15 p.m.•38 views

CVE-2024-54522

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.

7.8CVSS5.7AI score0.00035EPSS

CVE•added 2025/05/12 10:15 p.m.•38 views

CVE-2025-31212

This issue was addressed through improved state management. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5. An app may be able to access sensitive user data.

5.5CVSS5.7AI score0.00015EPSS

CVE•added 2025/05/12 10:15 p.m.•38 views

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording.

4.6CVSS5.2AI score0.00024EPSS

CVE•added 2019/04/03 6:29 p.m.•37 views

CVE-2018-4379

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue affected versions prior to iOS 12.0.1.

5.5CVSS4.8AI score0.0006EPSS

CVE•added 2023/09/27 3:19 p.m.•37 views

CVE-2023-40443

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to gain root privileges.

7.8CVSS6.6AI score0.00112EPSS

CVE•added 2024/01/10 10:15 p.m.•37 views

CVE-2023-40529

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information.

2.4CVSS2.2AI score0.00125EPSS

CVE•added 2024/09/17 12:15 a.m.•37 views

CVE-2024-27869

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an indicator.

7.5CVSS5.8AI score0.00136EPSS

Total number of security vulnerabilities1737