Apple iOS vulnerabilities

CVE-2016-1785 [MEDIUM] CVE-2016-1785: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2016-1785 Component: CVE-ID

CVE-2017-7085 [MEDIUM] CVE-2017-7085: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-7085 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2015-1086 [MEDIUM] CVE-2015-1086: iOS 8.3 Apple Security Update: About the security content of iOS 8.3 Product: iOS Version: 8.3 CVE: CVE-2015-1086 Component: CVE-2015-1086

CVE-2016-7591 [MEDIUM] CVE-2016-7591: iOS 10.2 Apple Security Update: About the security content of iOS 10.2 Product: iOS Version: 10.2 CVE: CVE-2016-7591 Component: IOHIDFamily Impact: A local application with system privileges may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed through improved memory management.

CVE-2017-7011 [MEDIUM] CVE-2017-7011: iOS 10.3.3 Apple Security Update: About the security content of iOS 10.3.3 Product: iOS Version: 10.3.3 CVE: CVE-2017-7011 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: A state management issue was addressed with improved frame handling.

CVE-2017-2517 [MEDIUM] CVE-2017-2517: iOS 10.3.3 Apple Security Update: About the security content of iOS 10.3.3 Product: iOS Version: 10.3.3 CVE: CVE-2017-2517 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2018-4444 [MEDIUM] CVE-2018-4444: A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iO A logic issue was addressed with improved state management. This issue is fixed in Safari 12.0.2, iOS 12.1.1, tvOS 12.1.1, iTunes 12.9.2 for Windows. Processing maliciously crafted web content may disclose sensitive user information.

CVE-2019-8528 [MEDIUM] CWE-416 CVE-2019-8528: A use after free issue was addressed with improved memory management. This issue is fixed in watchOS A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. An application may be able to execute arbitrary code with kernel privileges.

CVE-2018-4202 [MEDIUM] CVE-2018-4202: iOS 11.4 Apple Security Update: About the security content of iOS 11.4 Product: iOS Version: 11.4 CVE: CVE-2018-4202 Component: FontParser Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation.

CVE-2016-4642 [MEDIUM] CVE-2016-4642: iOS 9.3.3 Apple Security Update: About the security content of iOS 9.3.3 Product: iOS Version: 9.3.3 CVE: CVE-2016-4642 Component: CFNetwork Proxies Impact: An application may unknowingly send a password unencrypted over the network Description: Proxy authentication incorrectly reported HTTP proxies received credentials securely. This issue was addressed through improved warnings.

CVE-2018-4086 [MEDIUM] CVE-2018-4086: iOS 11.2.5 Apple Security Update: About the security content of iOS 11.2.5 Product: iOS Version: 11.2.5 CVE: CVE-2018-4086 Component: Security Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed with improved trust evaluation of certificates.

CVE-2014-4474 [MEDIUM] CVE-2014-4474: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4474 Component: CVE-2014-4459

CVE-2014-4471 [MEDIUM] CVE-2014-4471: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4471 Component: CVE-2014-4459

CVE-2014-4473 [MEDIUM] CVE-2014-4473: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4473 Component: CVE-2014-4459

CVE-2014-4470 [MEDIUM] CVE-2014-4470: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4470 Component: CVE-2014-4459

CVE-2014-4475 [MEDIUM] CVE-2014-4475: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4475 Component: CVE-2014-4459

CVE-2014-4472 [MEDIUM] CVE-2014-4472: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4472 Component: CVE-2014-4459

CVE-2014-4468 [MEDIUM] CVE-2014-4468: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4468 Component: CVE-2014-4459

CVE-2014-4469 [MEDIUM] CVE-2014-4469: iOS 8.1.3 Apple Security Update: About the security content of iOS 8.1.3 Product: iOS Version: 8.1.3 CVE: CVE-2014-4469 Component: CVE-2014-4459

CVE-2015-6982 [MEDIUM] CVE-2015-6982: iOS 9.1 Apple Security Update: About the security content of iOS 9.1 Product: iOS Version: 9.1 CVE: CVE-2015-6982 Component: CVE-2015-6982