Apple iOS vulnerabilities

CVE-2016-4693 [HIGH] CVE-2016-4693: iOS 10.2 Apple Security Update: About the security content of iOS 10.2 Product: iOS Version: 10.2 CVE: CVE-2016-4693 Component: Security Impact: An attacker may be able to exploit weaknesses in the 3DES cryptographic algorithm Description: 3DES was removed as a default cipher.

CVE-2016-1717 [HIGH] CVE-2016-1717: iOS 9.2.1 Apple Security Update: About the security content of iOS 9.2.1 Product: iOS Version: 9.2.1 CVE: CVE-2016-1717 Component: CVE-ID

CVE-2017-7080 [HIGH] CVE-2017-7080: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-7080 Component: Security Impact: A revoked certificate may be trusted Description: A certificate validation issue existed in the handling of revocation data. This issue was addressed through improved validation.

CVE-2017-13903 [HIGH] CVE-2017-13903: iOS 11.2.1 Apple Security Update: About the security content of iOS 11.2.1 Product: iOS Version: 11.2.1 CVE: CVE-2017-13903 Component: HomeKit Impact: A remote attacker may be able to unexpectedly alter application state Description: A message handling issue was addressed with improved input validation.

CVE-2015-7054 [MEDIUM] CVE-2015-7054: iOS 9.2 Apple Security Update: About the security content of iOS 9.2 Product: iOS Version: 9.2 CVE: CVE-2015-7054 Component: CVE-ID

CVE-2020-9820 [HIGH] CVE-2020-9820: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 1 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to modify the file system.

CVE-2017-6211 [CRITICAL] CVE-2017-6211: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-6211 Component: Telephony Impact: An attacker within range may be able to execute arbitrary code Description: A memory corruption issue was addressed with improved memory handling.

CVE-2016-5131 [HIGH] CVE-2016-5131: iOS 10 Apple Security Update: About the security content of iOS 10 Product: iOS Version: 10 CVE: CVE-2016-5131 Component: Keyboards Impact: Keyboard auto correct suggestions may reveal sensitive information Description: The iOS keyboard was inadvertently caching sensitive information. This issue was addressed through improved heuristics.

CVE-2013-1741 [HIGH] CVE-2013-1741: iOS 8.4 Apple Security Update: About the security content of iOS 8.4 Product: iOS Version: 8.4 CVE: CVE-2013-1741 Component: CVE-2013-1741

CVE-2015-3797 [HIGH] CVE-2015-3797: iOS 8.4.1 Apple Security Update: About the security content of iOS 8.4.1 Product: iOS Version: 8.4.1 CVE: CVE-2015-3797 Component: CVE-ID

CVE-2017-13816 [HIGH] CVE-2017-13816: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13816 Component: Keyboard Suggestions Impact: Keyboard autocorrect suggestions may reveal sensitive information Description: The iOS keyboard was inadvertently caching sensitive information. This issue was addressed with improved heuristics.

CVE-2017-13813 [HIGH] CVE-2017-13813: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13813 Component: Keyboard Suggestions Impact: Keyboard autocorrect suggestions may reveal sensitive information Description: The iOS keyboard was inadvertently caching sensitive information. This issue was addressed with improved heuristics.

CVE-2016-1808 [HIGH] CVE-2016-1808: iOS 9.3.2 Apple Security Update: About the security content of iOS 9.3.2 Product: iOS Version: 9.3.2 CVE: CVE-2016-1808 Component: CVE-ID

CVE-2016-4777 [HIGH] CVE-2016-4777: iOS 10 Apple Security Update: About the security content of iOS 10 Product: iOS Version: 10 CVE: CVE-2016-4777 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: An untrusted pointer dereference was addressed by removing the affected code.

CVE-2016-4772 [HIGH] CVE-2016-4772: iOS 10 Apple Security Update: About the security content of iOS 10 Product: iOS Version: 10 CVE: CVE-2016-4772 Component: Kernel Impact: A remote attacker may be able to cause a denial of service Description: A lock handling issue was addressed through improved lock handling.

CVE-2017-7132 [HIGH] CVE-2017-7132: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-7132 Component: Quick Look Impact: Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution Description: A memory consumption issue was addressed through improved memory handling.

CVE-2017-13825 [HIGH] CVE-2017-13825: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13825 Component: CoreText Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory consumption issue was addressed with improved memory handling.

CVE-2016-1754 [HIGH] CVE-2016-1754: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2016-1754 Component: CVE-ID

CVE-2017-13833 [HIGH] CVE-2017-13833: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13833 Component: CFNetwork Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-6219 [HIGH] CWE-20 CVE-2019-6219: A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.