Product:

Iphone_os

(Apple)
Date Id Summary Products Score Patch Annotated
2016-03-13 CVE-2016-1950 Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate. Iphone_os, Mac_os_x, Tvos, Watchos, Firefox, Network_security_services, Opensuse, Glassfish_server, Iplanet_web_proxy_server, Iplanet_web_server, Linux, Vm_server 8.8
2024-10-04 CVE-2024-44204 A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's saved passwords may be read aloud by VoiceOver. Ipados, Iphone_os 5.5
2024-10-04 CVE-2024-44207 This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Messages may be able to capture a few seconds of audio before the microphone indicator is activated. Ipados, Iphone_os 4.3
2024-09-17 CVE-2024-44170 A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPadOS 18, watchOS 11, macOS Sequoia 15. An app may be able to access user-sensitive data. Ipados, Iphone_os, Macos, Watchos 5.5
2024-09-17 CVE-2024-44164 This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to bypass Privacy preferences. Ipados, Iphone_os, Macos 7.1
2024-09-17 CVE-2024-44165 A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Network traffic may leak outside a VPN tunnel. Ipados, Iphone_os, Macos, Visionos 7.5
2024-09-17 CVE-2024-40857 This issue was addressed through improved state management. This issue is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to universal cross site scripting. Ipados, Iphone_os, Macos, Safari, Tvos, Visionos, Watchos 6.1
2024-09-17 CVE-2024-40840 This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to use Siri to access sensitive user data. Ipados, Iphone_os 4.6
2024-09-17 CVE-2024-40856 An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, tvOS 18, macOS Sequoia 15. An attacker may be able to force a device to disconnect from a secure network. Ipados, Iphone_os, Macos 7.5
2024-09-17 CVE-2024-40863 This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to leak sensitive user information. Ipados, Iphone_os 5.5