Advisories · Technology
Apple watchOS.
Every CVE that names Apple watchOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
This issue was addressed with improved checks.
- Apple watchOS
- Apple macOS
-
A memory initialization issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
-
Processing a maliciously crafted image may lead to arbitrary code execution.
- Apple iOS and iPadOS
- Apple tvOS
-
A memory initialization issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple iTunes for Windows
-
An issue in code signature validation was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
-
A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple tvOS
-
Copied files may not have the expected file permissions.
- Apple iOS and iPadOS
- Apple tvOS
-
Processing a maliciously crafted audio file may disclose restricted memory.
- Apple iOS and iPadOS
- Apple tvOS
-
This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple tvOS
-
An out-of-bounds write issue was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple tvOS
-
An issue in code signature validation was addressed with improved checks.
- Apple iOS
- Apple tvOS
-
A logic issue was addressed with improved state management.
- Apple iOS
- Apple tvOS
-
A logic issue was addressed with improved validation.
- Apple iOS
- Apple tvOS
-
Processing a maliciously crafted file may lead to arbitrary code execution.
- Apple iOS and iPadOS
- Apple tvOS
-
An input validation issue was addressed with improved input validation.
- Apple iOS
- Apple watchOS
-
An out-of-bounds write was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple tvOS
-
Processing a maliciously crafted image may lead to arbitrary code execution.
- Apple iOS and iPadOS
- Apple tvOS
- CVSS 7.5 HighCritical · KEVKEV
Deserialization of untrusted data in Apple macOS and others
- Apple macOS
- Apple watchOS
- Insecure deserialization
-
A type confusion issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
-
Description: A permissions issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple watchOS
-
Description: A permissions issue was addressed with improved validation.
- Apple macOS
- Apple tvOS
-
A permissions issue was addressed with improved validation.
- Apple watchOS
-
A race condition was addressed with improved state handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A buffer overflow issue was addressed with improved memory handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A race condition was addressed with improved state handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A use after free issue was addressed with improved memory management.
- Apple watchOS
- Apple iOS and iPadOS
-
A validation issue related to hard link behavior was addressed with improved sandbox restrictions.
- Apple watchOS
- Apple iOS and iPadOS
-
A logic issue was addressed with improved state management.
- Apple watchOS
- Apple iOS and iPadOS
-
An inherited permissions issue was addressed with additional restrictions.
- Apple watchOS
- Apple iOS and iPadOS
-
A buffer overflow issue was addressed with improved memory handling.
- Apple watchOS
- Apple iOS and iPadOS
-
An out-of-bounds read was addressed with improved input validation.
- Apple watchOS
- Apple iOS and iPadOS
-
A buffer overflow issue was addressed with improved memory handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A race condition was addressed with improved state handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A type confusion issue was addressed with improved memory handling.
- Apple watchOS
- Apple iOS and iPadOS
-
An out-of-bounds read was addressed with improved bounds checking.
- Apple watchOS
- Apple iOS and iPadOS
- CVSS 8.8 HighCritical · KEVKEV
Integer overflow in Apple watchOS and others
- Apple watchOS
- Apple iOS and iPadOS
- Memory corruption
-
A use after free issue was addressed with improved memory management.
- Apple watchOS
- Apple iOS and iPadOS
-
A memory corruption issue was addressed with improved state management.
- Apple watchOS
- Apple iOS and iPadOS
-
An access issue was addressed with additional sandbox restrictions.
- Apple watchOS
- Apple iOS and iPadOS
-
A logic issue was addressed with improved restrictions.
- Apple watchOS
- Apple iOS and iPadOS
-
This issue was addressed with improved checks.
- Apple watchOS
- Apple iOS and iPadOS
-
Description: A logic issue was addressed with improved state management.
- Apple watchOS
-
An issue in the handling of group membership was resolved with improved logic.
- Apple watchOS
-
Apple watchOS: Description: A memory corruption issue in the processing of ICC profiles was addressed…
- Apple watchOS
- Apple iOS and iPadOS
-
An out-of-bounds read was addressed with improved bounds checking.
- Apple watchOS
- Apple iOS and iPadOS
-
A memory corruption vulnerability was addressed with improved locking.
- Apple watchOS
- Apple iOS and iPadOS
-
A use after free issue was addressed with improved memory management.
- Apple watchOS
- Apple iOS and iPadOS
-
A buffer overflow issue was addressed with improved memory handling.
- Apple watchOS
- Apple iOS and iPadOS
-
A memory corruption issue was addressed with improved input validation.
- Apple macOS
- Apple tvOS
-
A use after free issue was addressed with improved memory management.
- Apple watchOS
- Apple iOS and iPadOS
-
Apple watchOS: Description: A memory corruption issue in the processing of ICC profiles was addressed…
- Apple watchOS
- Apple iOS and iPadOS
-
The issue was addressed with improved permissions logic.
- Apple macOS
- Apple watchOS
-
The issue was resolved with additional restrictions on CSS compositing.
- Apple iOS and iPadOS
- Apple tvOS
-
A logic issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple watchOS
-
A user privacy issue was addressed by removing the broadcast MAC address.
- Apple iOS and iPadOS
- Apple tvOS
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Integer overflow in Apple macOS and others
- Apple macOS
- Apple watchOS
- Memory corruption
-
A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple tvOS
-
A type confusion issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
-
A memory corruption vulnerability was addressed with improved locking.
- Apple iOS and iPadOS
- Apple tvOS
- CVSS 6.1 MediumCritical · KEVKEV
Cross-site scripting in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iOS
- Cross-site scripting (XSS)