Apple iOS vulnerabilities

3,940 known vulnerabilities affecting apple/iphone_os.

Total CVEs

3,940

CISA KEV

actively exploited

Public exploits

248

Exploited in wild

Severity breakdown

CRITICAL313HIGH1610MEDIUM1730LOW287

Vulnerabilities

Page 140 of 197

CVE-2016-7637HIGHCVSS 7.8PoC≤ 10.1.12017-02-20

CVE-2016-7637 [HIGH] CWE-119 CVE-2016-7637: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

nvd

CVE-2016-7642HIGHCVSS 8.8≤ 10.1.12017-02-20

CVE-2016-7642 [HIGH] CWE-119 CVE-2016-7642: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a cra

nvd

CVE-2016-7626HIGHCVSS 8.8PoCfixed in 10.22017-02-20

CVE-2016-7626 [HIGH] CWE-119 CVE-2016-7626: An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted certificate profile.

nvd

CVE-2016-7616HIGHCVSS 7.8≤ 10.1.12017-02-20

CVE-2016-7616 [HIGH] CWE-119 CVE-2016-7616: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Disk Images" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

nvd

CVE-2016-7649HIGHCVSS 8.8≤ 10.1.12017-02-20

CVE-2016-7649 [HIGH] CWE-119 CVE-2016-7649: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a cra

nvd

CVE-2016-4660HIGHCVSS 7.1≤ 10.0.32017-02-20

CVE-2016-4660 [HIGH] CWE-200 CVE-2016-4660: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash)

nvd

CVE-2017-2360HIGHCVSS 7.8PoCfixed in 10.2.12017-02-20

CVE-2017-2360 [HIGH] CWE-416 CVE-2017-2360: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted

nvd

CVE-2016-7588HIGHCVSS 8.8≤ 10.1.12017-02-20

CVE-2016-7588 [HIGH] CWE-119 CVE-2016-7588: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted MP4 file.

nvd

CVE-2016-7607MEDIUMCVSS 5.5≤ 10.1.12017-02-20

CVE-2016-7607 [MEDIUM] CWE-200 CVE-2016-7607: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows attackers to obtain sensitive information from kernel memory via a crafted app.

nvd

CVE-2017-2371MEDIUMCVSS 6.5PoCfixed in 10.2.12017-02-20

CVE-2017-2371 [MEDIUM] CWE-20 CVE-2017-2371: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.

nvd

CVE-2016-4679MEDIUMCVSS 5.5fixed in 10.12017-02-20

CVE-2016-4679 [MEDIUM] CWE-59 CVE-2016-4679: An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libarchive" component, which allows remote attackers to write to arbitrary files via a crafted archive containing a symlink.

nvd

CVE-2016-7634MEDIUMCVSS 4.6≤ 10.1.12017-02-20

CVE-2016-7634 [MEDIUM] CWE-200 CVE-2016-7634: An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves t An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component, which accepts spoken passwords without considering that they are locally audible.

nvd

CVE-2016-7623MEDIUMCVSS 6.5≤ 10.1.12017-02-20

CVE-2016-7623 [MEDIUM] CWE-200 CVE-2016-7623: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site.

nvd

CVE-2016-7619MEDIUMCVSS 5.5≤ 10.1.12017-02-20

CVE-2016-7619 [MEDIUM] CWE-59 CVE-2016-7619: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "libarchive" component, which allows local users to write to arbitrary files via vectors related to symlinks.

nvd

CVE-2016-7759MEDIUMCVSS 4.3≤ 9.3.52017-02-20

CVE-2016-7759 [MEDIUM] CWE-200 CVE-2016-7759: An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" component, which allows physically proximate attackers to obtain sensitive information by viewing application snapshots in the Task Switcher.

nvd

CVE-2016-4686MEDIUMCVSS 4.4≤ 10.0.32017-02-20

CVE-2016-4686 [MEDIUM] CWE-264 CVE-2016-4686: An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves t An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "Contacts" component, which does not prevent an app's Address Book access after access revocation.

nvd

CVE-2017-2364MEDIUMCVSS 6.5PoC≤ 10.2.02017-02-20

CVE-2017-2364 [MEDIUM] CWE-200 CVE-2017-2364: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

nvd

CVE-2017-2365MEDIUMCVSS 6.5PoCfixed in 10.2.12017-02-20

CVE-2017-2365 [MEDIUM] CWE-200 CVE-2017-2365: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

nvd

CVE-2016-7592MEDIUMCVSS 4.3≤ 10.1.12017-02-20

CVE-2016-7592 [MEDIUM] CWE-200 CVE-2016-7592: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attackers to obtain sensitive information via crafted JavaScript prompts on a web site.

nvd

CVE-2017-2352MEDIUMCVSS 4.6≤ 10.2.02017-02-20

CVE-2017-2352 [MEDIUM] CVE-2017-2352: An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors.

nvd

← Previous140 / 197Next →