Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24216 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- CWE-508
Not analysed yet 31 Mar 2025
CVE-2025-30428 CVE record

CVSS 5.4 Medium

This issue was addressed through improved state management.
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-305
Not analysed yet 31 Mar 2025
CVE-2025-24257 CVE record

CVSS 7.1 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 31 Mar 2025
CVE-2025-31184 CVE record

CVSS 7.8 High

This issue was addressed with improved permissions checking.
- Apple Safari
- Apple iOS and iPadOS
- CWE-281
Not analysed yet 31 Mar 2025
CVE-2025-31192 CVE record

CVSS 6.7 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-305
Not analysed yet 31 Mar 2025
CVE-2025-30432 CVE record

CVSS 6.4 Medium

Improper authentication in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Authentication bypass
Not analysed yet 31 Mar 2025
CVE-2024-54564 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-54551 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 20 Mar 2025
CVE-2024-44276 CVE record

CVSS 7.3 High

Cleartext transmission of sensitive information in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Weak cryptography or TLS
Not analysed yet 17 Mar 2025
CVE-2024-54525 CVE record

CVSS 8.8 High

Unrestricted file upload in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Unrestricted file upload
Not analysed yet 17 Mar 2025
CVE-2025-24201 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2022-48610 CVE record

CVSS 5.5 Medium

Information disclosure in Apple macOS and others
- Apple macOS
- Apple watchOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2022-43454 CVE record

CVSS 7.8 High

Double free in Apple macOS and others
- Apple macOS
- Apple watchOS
- Memory corruption
Not analysed yet 10 Mar 2025
CVE-2024-54558 CVE record

CVSS 2.8 Low

A clickjacking issue was addressed with improved out-of-process view handling.
- Apple iOS and iPadOS
- Apple macOS
- CWE-451
Not analysed yet 10 Mar 2025
CVE-2024-54467 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2024-44179 CVE record

CVSS 2.4 Low

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2024-44227 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 10 Mar 2025
CVE-2024-54560 CVE record

CVSS 5.5 Medium

Improper privilege management in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Privilege escalation
Not analysed yet 10 Mar 2025
CVE-2024-44192 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Mar 2025
CVE-2024-54469 CVE record

CVSS 5.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 10 Mar 2025
CVE-2025-24200 CVE record

CVSS 6.1 MediumCritical · KEVKEV

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 10 Feb 2025
CVE-2024-27859 CVE record

CVSS 8.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Code injection
Not analysed yet 10 Feb 2025
CVE-2024-54658 CVE record

CVSS 6.5 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 10 Feb 2025
CVE-2025-24126 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Uncontrolled resource consumption in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2024-54523 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54542 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Missing authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24150 CVE record

CVSS 8.8 High

Command injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Command injection
Not analysed yet 27 Jan 2025
CVE-2025-24107 CVE record

CVSS 7.8 High

Incorrect default permissions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-54543 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54522 CVE record

CVSS 7.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54488 CVE record

CVSS 5.3 Medium

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24127 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2024-54518 CVE record

CVSS 5.3 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24131 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24086 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24141 CVE record

CVSS 3.3 Low

Incorrect authorization in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24161 CVE record

CVSS 5.5 Medium

Improper check for unusual conditions in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- CWE-754
Not analysed yet 27 Jan 2025
CVE-2025-24177 CVE record

CVSS 7.5 High

NULL pointer dereference in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54499 CVE record

CVSS 8.1 High

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24137 CVE record

CVSS 8.0 High

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24160 CVE record

CVSS 4.3 Medium

Improper resource shutdown in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2025-24117 CVE record

CVSS 5.5 Medium

Insecure storage of sensitive information in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2024-54512 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple watchOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24143 CVE record

CVSS 6.5 Medium

Missing authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-54497 CVE record

CVSS 6.5 Medium

Resource allocation without limits in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Denial of service
Not analysed yet 27 Jan 2025
CVE-2024-54478 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54507 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2024-54550 CVE record

CVSS 4.0 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025
CVE-2025-24159 CVE record

CVSS 7.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Code injection
Not analysed yet 27 Jan 2025
CVE-2025-24163 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24162 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24123 CVE record

CVSS 6.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54530 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2025-24158 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 27 Jan 2025
CVE-2025-24085 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24154 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

An out-of-bounds write was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
- CWE-757
Not analysed yet 27 Jan 2025
CVE-2025-24149 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iPadOS
- Memory corruption
Not analysed yet 27 Jan 2025
CVE-2025-24124 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-54468 CVE record

CVSS 8.2 High

The issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple iPadOS
Not analysed yet 27 Jan 2025
CVE-2025-24145 CVE record

CVSS 3.3 Low

Sensitive information in log files in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Information disclosure
Not analysed yet 27 Jan 2025