Iphone_os
(Apple)| Repositories |
•
https://github.com/file/file
• https://github.com/WebKit/webkit • https://github.com/vadz/libtiff |
| #Vulnerabilities | 2042 |
| Date | ID | Summary | Products | Score | Patch |
|---|---|---|---|---|---|
| 2015-05-21 | CVE-2015-4000 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue. | Iphone_os, Mac_os_x, Safari, Ubuntu_linux, Debian_linux, Chrome, Hp\-Ux, Content_manager, Ie, Firefox, Firefox_esr, Firefox_os, Network_security_services, Seamonkey, Thunderbird, Openssl, Opera_browser, Jdk, Jre, Jrockit, Sparc\-Opl_service_processor, Linux_enterprise_desktop, Linux_enterprise_server, Linux_enterprise_software_development_kit, Suse_linux_enterprise_server | 3.7 | |
| 2020-06-09 | CVE-2020-9839 | A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges. | Ipad_os, Iphone_os, Mac_os_x, Tvos, Watchos | N/A | |
| 2019-04-03 | CVE-2018-4356 | A permissions issue existed. This issue was addressed with improved permission validation. This issue affected versions prior to iOS 12. | Iphone_os | 5.3 | |
| 2019-04-03 | CVE-2018-4319 | A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7. | Icloud, Iphone_os, Itunes, Safari | 8.1 | |
| 2019-01-11 | CVE-2018-4298 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation. | Apple_tv, Iphone_os, Mac_os_x, Watchos | 9.8 | |
| 2019-01-11 | CVE-2018-4278 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking. | Icloud, Iphone_os, Itunes, Safari, Tvos, Ubuntu_linux | 4.3 | |
| 2018-06-08 | CVE-2018-4249 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves pktmnglr_ipfilter_input in com.apple.packet-mangler in the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow and stack-based buffer overflow) via a crafted app. | Apple_tv, Iphone_os, Mac_os_x, Watchos | 7.8 | |
| 2019-04-03 | CVE-2018-4216 | A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1. | Iphone_os | 5.5 | |
| 2019-04-03 | CVE-2018-20506 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346. | Icloud, Iphone_os, Itunes, Mac_os_x, Tvos, Watchos, Leap, Sqlite | 8.1 | |
| 2020-06-09 | CVE-2020-9843 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack. | Icloud, Ipad_os, Iphone_os, Itunes, Safari, Tvos, Watchos, Ubuntu_linux, Debian_linux, Fedora, Leap | N/A |