Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-27855 CVE record

CVSS 8.8 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 10 Jun 2024
CVE-2024-27838 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2024
CVE-2024-23251 CVE record

CVSS 4.6 Medium

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Authentication bypass
Not analysed yet 10 Jun 2024
CVE-2024-27819 CVE record

CVSS 2.4 Low

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 10 Jun 2024
CVE-2024-27815 CVE record

CVSS 5.9 Medium

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27799 CVE record

CVSS 3.3 Low

This issue was addressed with additional entitlement checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 10 Jun 2024
CVE-2024-27808 CVE record

CVSS 7.5 High

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27832 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-703
Not analysed yet 10 Jun 2024
CVE-2024-27845 CVE record

CVSS 3.3 Low

A privacy issue was addressed with improved handling of temporary files.
- Apple iOS and iPadOS
Not analysed yet 10 Jun 2024
CVE-2024-23282 CVE record

CVSS 5.5 Medium

Files accessible to external parties in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 10 Jun 2024
CVE-2024-27828 CVE record

CVSS 7.0 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27805 CVE record

CVSS 5.5 Medium

Improper input validation in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-20
Not analysed yet 10 Jun 2024
CVE-2024-27833 CVE record

CVSS 7.5 High

Integer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27848 CVE record

CVSS 7.4 High

This issue was addressed with improved permissions checking.
- Apple iOS and iPadOS
- Apple macOS
- CWE-277
Not analysed yet 10 Jun 2024
CVE-2024-27810 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

A path handling issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple macOS
- CWE-28
Not analysed yet 13 May 2024
CVE-2024-27847 CVE record

CVSS 7.4 High

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-277
Not analysed yet 13 May 2024
CVE-2024-27796 CVE record

CVSS 8.1 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
- CWE-1325
Not analysed yet 13 May 2024
CVE-2024-27816 CVE record

CVSS 5.3 Medium

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 13 May 2024
CVE-2024-27841 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 13 May 2024
CVE-2024-27821 CVE record

CVSS 7.5 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 13 May 2024
CVE-2024-27818 CVE record

CVSS 7.8 High

Command injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Command injection
Not analysed yet 13 May 2024
CVE-2024-27789 CVE record

CVSS 5.3 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 13 May 2024
CVE-2024-27834 CVE record

CVSS 5.5 MediumCritical · KEVKEV

Improper authentication in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 13 May 2024
CVE-2024-27835 CVE record

CVSS 2.4 Low

Improper authentication in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 13 May 2024
CVE-2024-27839 CVE record

CVSS 5.5 Medium

Observable discrepancy in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 13 May 2024
CVE-2024-27803 CVE record

CVSS 2.4 Low

Improper access control in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 13 May 2024
CVE-2024-27804 CVE record

CVSS 8.1 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
- CWE-1325
Not analysed yet 13 May 2024
CVE-2024-27852 CVE record

CVSS 5.5 Medium

A privacy issue was addressed with improved client ID handling for alternative app marketplaces.
- Apple iOS and iPadOS
Not analysed yet 13 May 2024
CVE-2024-27791 CVE record

CVSS 5.8 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 24 Apr 2024
CVE-2024-23228 CVE record

CVSS 4.3 Medium

Information disclosure in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 24 Apr 2024
CVE-2024-23271 CVE record

CVSS 7.3 High

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 24 Apr 2024
CVE-2023-42956 CVE record

CVSS 6.5 Medium

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Mar 2024
CVE-2023-42936 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 28 Mar 2024
CVE-2023-42950 CVE record

CVSS 8.8 High

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 28 Mar 2024
CVE-2023-42947 CVE record

CVSS 8.6 High

Path traversal in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Path traversal
Not analysed yet 28 Mar 2024
CVE-2023-42896 CVE record

CVSS 5.5 Medium

Missing authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 28 Mar 2024
CVE-2023-42893 CVE record

CVSS 5.5 Medium

A permissions issue was addressed by removing vulnerable code and adding additional checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 28 Mar 2024
CVE-2023-42974 CVE record

CVSS 7.0 High

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 28 Mar 2024
CVE-2023-42962 CVE record

CVSS 7.5 High

This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3.
- Apple iOS and iPadOS
Not analysed yet 28 Mar 2024
CVE-2024-23259 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 8 Mar 2024
CVE-2024-23263 CVE record

CVSS 8.1 High

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 8 Mar 2024
CVE-2024-23255 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23280 CVE record

CVSS 7.5 High

An injection issue was addressed with improved validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23297 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 8 Mar 2024
CVE-2024-23278 CVE record

CVSS 7.7 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 8 Mar 2024
CVE-2024-0258 CVE record

CVSS 8.2 High

Improper access control in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23239 CVE record

CVSS 5.9 Medium

Race condition in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Race condition
Not analysed yet 8 Mar 2024
CVE-2024-23242 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23254 CVE record

CVSS 6.5 Medium

The issue was addressed with improved UI handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23262 CVE record

CVSS 4.3 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple visionOS
- Broken access control
Not analysed yet 8 Mar 2024
CVE-2024-23235 CVE record

CVSS 8.1 High

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23286 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23290 CVE record

CVSS 5.3 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 8 Mar 2024
CVE-2024-23273 CVE record

CVSS 4.3 Medium

Improper certificate validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Weak cryptography or TLS
Not analysed yet 8 Mar 2024
CVE-2024-23264 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 8 Mar 2024
CVE-2024-23291 CVE record

CVSS 7.5 High

A privacy issue was addressed with improved private data redaction for log entries.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 8 Mar 2024
CVE-2024-23287 CVE record

CVSS 6.5 Medium

Insecure temporary file in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-377
Not analysed yet 8 Mar 2024
CVE-2024-23205 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024
CVE-2024-23292 CVE record

CVSS 3.3 Low

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 8 Mar 2024