Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Iphone_os
(Apple)Repositories |
• https://github.com/madler/zlib
• https://github.com/file/file • https://github.com/WebKit/webkit • https://github.com/vadz/libtiff |
#Vulnerabilities | 3498 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2024-05-14 | CVE-2024-27816 | A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker may be able to access user data. | Ipados, Iphone_os, Macos, Tvos, Watchos | 5.5 | ||
2024-05-14 | CVE-2024-27818 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution. | Ipados, Iphone_os, Macos | 7.8 | ||
2024-05-14 | CVE-2024-27821 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A shortcut may output sensitive user data without consent. | Ipados, Iphone_os, Macos, Watchos | 4.7 | ||
2024-05-14 | CVE-2024-27834 | The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. | Ipados, Iphone_os, Macos, Safari, Tvos, Watchos, Fedora, Webkitgtk, Wpe_webkit | 5.5 | ||
2024-05-14 | CVE-2024-27835 | This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen. | Ipados, Iphone_os | 2.4 | ||
2024-09-17 | CVE-2024-27869 | The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to record the screen without an indicator. | Ipados, Iphone_os, Macos | 5.5 | ||
2024-09-17 | CVE-2024-27874 | This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attacker may be able to cause a denial-of-service. | Ipados, Iphone_os | 7.5 | ||
2024-09-17 | CVE-2024-27876 | A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files. | Ipados, Iphone_os, Macos, Visionos | 5.5 | ||
2024-09-17 | CVE-2024-27879 | The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. An attacker may be able to cause unexpected app termination. | Ipados, Iphone_os | 7.5 | ||
2024-09-17 | CVE-2024-40852 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18. An attacker may be able to see recent photos without authentication in Assistive Access. | Ipados, Iphone_os | 5.3 |