Apple iOS vulnerabilities

CVE-2015-5924 [MEDIUM] CVE-2015-5924: iOS 9.1 Apple Security Update: About the security content of iOS 9.1 Product: iOS Version: 9.1 CVE: CVE-2015-5924 Component: CVE-ID

CVE-2020-9952 [HIGH] CWE-79 CVE-2020-9952: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 1 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0, Safari 14.0, iCloud for Windows 11.4, iCloud for Windows 7.21. Processing maliciously crafted web content may lead to a cross site scripting attack.

CVE-2016-1779 [MEDIUM] CVE-2016-1779: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2016-1779 Component: CVE-ID

CVE-2018-4188 [MEDIUM] CVE-2018-4188: iOS 11.4 Apple Security Update: About the security content of iOS 11.4 Product: iOS Version: 11.4 CVE: CVE-2018-4188 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2019-8612 [MEDIUM] CVE-2019-8612: iOS 12.3 Apple Security Update: About the security content of iOS 12.3 Product: iOS Version: 12.3 CVE: CVE-2019-8612 Component: Wi-Fi Impact: An attacker in a privileged network position can modify driver state Description: A logic issue was addressed with improved state management.

CVE-2015-5312 [MEDIUM] CVE-2015-5312: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2015-5312 Component: CVE-2015-1819

CVE-2015-1103 [HIGH] CVE-2015-1103: iOS 8.3 Apple Security Update: About the security content of iOS 8.3 Product: iOS Version: 8.3 CVE: CVE-2015-1103 Component: CVE-ID

CVE-2017-13834 [HIGH] CVE-2017-13834: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13834 Component: Kernel Impact: Processing a malformed mach binary may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved validation.

CVE-2017-7007 [HIGH] CVE-2017-7007: iOS 10.3.3 Apple Security Update: About the security content of iOS 10.3.3 Product: iOS Version: 10.3.3 CVE: CVE-2017-7007 Component: EventKitUI Impact: A remote attacker may cause an unexpected application termination Description: A resource exhaustion issue was addressed through improved input validation.

CVE-2016-1684 [HIGH] CVE-2016-1684: iOS 9.3.3 Apple Security Update: About the security content of iOS 9.3.3 Product: iOS Version: 9.3.3 CVE: CVE-2016-1684 Component: Libc Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A buffer overflow existed within the "link_ntoa()" function in linkaddr.c. This issue was addressed through additional bounds checking.

CVE-2014-3192 [HIGH] CVE-2014-3192: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-3192 Component: CVE-ID

CVE-2018-4371 [HIGH] CVE-2018-4371: iOS 12.1 Apple Security Update: About the security content of iOS 12.1 Product: iOS Version: 12.1 CVE: CVE-2018-4371 Component: IPSec Impact: An application may be able to gain elevated privileges Description: An out-of-bounds read was addressed with improved input validation.

CVE-2015-5778 [MEDIUM] CVE-2015-5778: iOS 8.4.1 Apple Security Update: About the security content of iOS 8.4.1 Product: iOS Version: 8.4.1 CVE: CVE-2015-5778 Component: CVE-ID

CVE-2015-5777 [MEDIUM] CVE-2015-5777: iOS 8.4.1 Apple Security Update: About the security content of iOS 8.4.1 Product: iOS Version: 8.4.1 CVE: CVE-2015-5777 Component: CVE-ID

CVE-2016-4708 [MEDIUM] CVE-2016-4708: iOS 10 Apple Security Update: About the security content of iOS 10 Product: iOS Version: 10 CVE: CVE-2016-4708 Component: CFNetwork Impact: Processing maliciously crafted web content may compromise user information Description: An input validation issue existed in the parsing of the set-cookie header. This issue was addressed through improved validation checking.

CVE-2015-1153 [MEDIUM] CVE-2015-1153: iOS 8.4 Apple Security Update: About the security content of iOS 8.4 Product: iOS Version: 8.4 CVE: CVE-2015-1153 Component: CVE-ID

CVE-2015-1152 [MEDIUM] CVE-2015-1152: iOS 8.4 Apple Security Update: About the security content of iOS 8.4 Product: iOS Version: 8.4 CVE: CVE-2015-1152 Component: CVE-ID

CVE-2016-7667 [HIGH] CVE-2016-7667: iOS 10.2 Apple Security Update: About the security content of iOS 10.2 Product: iOS Version: 10.2 CVE: CVE-2016-7667 Component: CoreText Impact: Processing a maliciously crafted string may lead to a denial of service Description: An issue when rendering overlapping ranges was addressed through improved validation.

CVE-2016-4627 [HIGH] CVE-2016-4627: iOS 9.3.3 Apple Security Update: About the security content of iOS 9.3.3 Product: iOS Version: 9.3.3 CVE: CVE-2016-4627 Component: IOAcceleratorFamily Impact: A local user may be able to execute arbitrary code with kernel privileges Description: A null pointer dereference was addressed through improved validation.

CVE-2015-3659 [MEDIUM] CVE-2015-3659: iOS 8.4 Apple Security Update: About the security content of iOS 8.4 Product: iOS Version: 8.4 CVE: CVE-2015-3659 Component: CVE-ID