Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Iphone Os
Total 4173 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-27810 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-12 N/A 5.5 MEDIUM
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to read sensitive location information.
CVE-2024-27821 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2024-12-12 N/A 4.7 MEDIUM
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A shortcut may output sensitive user data without consent.
CVE-2024-27816 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-12 N/A 5.5 MEDIUM
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker may be able to access user data.
CVE-2024-27804 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2024-12-12 N/A 5.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-38261 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-12 N/A 7.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-32425 1 Apple 3 Ipados, Iphone Os, Watchos 2024-12-12 N/A 7.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain elevated privileges.
CVE-2023-32432 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-12 N/A 5.5 MEDIUM
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data.
CVE-2023-34352 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-12 N/A 5.3 MEDIUM
A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.
CVE-2023-28208 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-12 N/A 4.3 MEDIUM
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
CVE-2023-38136 1 Apple 3 Ipados, Iphone Os, Watchos 2024-12-12 N/A 7.8 HIGH
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-32438 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2024-12-12 N/A 5.5 MEDIUM
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy preferences.
CVE-2023-32428 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2024-12-12 N/A 7.8 HIGH
This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges.
CVE-2024-27839 1 Apple 2 Ipados, Iphone Os 2024-12-09 N/A 3.3 LOW
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and iPadOS 17.5. A malicious application may be able to determine a user's current location.
CVE-2024-27841 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-09 N/A 5.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.
CVE-2024-27852 1 Apple 2 Ipados, Iphone Os 2024-12-09 N/A 6.5 MEDIUM
A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages.
CVE-2024-27847 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-09 N/A 5.5 MEDIUM
This issue was addressed with improved checks This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to bypass Privacy preferences.
CVE-2024-27789 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-09 N/A 5.5 MEDIUM
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Ventura 13.6.7, macOS Sonoma 14.4. An app may be able to access user-sensitive data.
CVE-2024-27796 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-09 N/A 7.8 HIGH
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges.
CVE-2023-42843 4 Apple, Fedoraproject, Webkitgtk and 1 more 7 Ipad Os, Iphone Os, Macos and 4 more 2024-12-09 N/A 4.3 MEDIUM
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.
CVE-2024-44123 1 Apple 3 Ipados, Iphone Os, Macos 2024-12-06 N/A 2.3 LOW
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may be able to access keyboard input and location information without user consent.