Apple iOS vulnerabilities

CVE-2019-8541 [LOW] CVE-2019-8541: A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs.

CVE-2016-7714 [LOW] CWE-200 CVE-2016-7714: An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.

CVE-2023-40384 [LOW] CVE-2023-40384: A permissions issue was addressed with improved redaction of sensitive information. This issue is fi A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information.

CVE-2019-8857 [LOW] CWE-20 CVE-2019-8857: The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iPadOS 13.3. Live Photo audio and video data may be shared via iCloud links even if Live Photo is disabled in the Share Sheet carousel.

CVE-2023-40434 [LOW] CVE-2023-40434: A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access a user's Photos Library.

CVE-2022-22598 [LOW] CVE-2022-22598: An issue with app access to camera metadata was addressed with improved logic. This issue is fixed i An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access.

CVE-2020-3844 [LOW] CVE-2020-3844: This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter state.

CVE-2020-3873 [LOW] CVE-2020-3873: This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iP This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews.

CVE-2019-8630 [LOW] CVE-2019-8630: The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen The issue was addressed with improved UI handling. This issue is fixed in iOS 12.3. The lock screen may show a locked icon after unlocking.

CVE-2024-23256 [LOW] CVE-2024-23256: A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPad A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.

CVE-2021-30875 [LOW] CVE-2021-30875: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with imp A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1. A local attacker may be able to view contacts from the lock screen.

CVE-2024-23292 [LOW] CWE-200 CVE-2024-23292: This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 1 This issue was addressed with improved data protection. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access information about a user's contacts.

CVE-2023-40439 [LOW] CWE-22 CVE-2023-40439: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to read sensitive location information.

CVE-2025-24145 [LOW] CWE-532 CVE-2025-24145: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An app may be able to view a contact's phone number in system logs.

CVE-2017-2375 [LOW] CVE-2017-2375: An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addre An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10.2.1. Updates for CallKit call history are sent to iCloud.

CVE-2023-38605 [LOW] CVE-2023-38605: This issue was addressed with improved redaction of sensitive information. This issue is fixed in ma This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.

CVE-2023-40392 [LOW] CWE-532 CVE-2023-40392: A privacy issue was addressed with improved private data redaction for log entries. This issue is fi A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information.

CVE-2023-28194 [LOW] CVE-2023-28194: The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An ap The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen.

CVE-2024-23242 [LOW] CWE-532 CVE-2024-23242: A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17. A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data.

CVE-2024-40830 [LOW] CVE-2024-40830: This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. This issue was addressed with improved data protection. This issue is fixed in iOS 18 and iPadOS 18. An app may be able to enumerate a user's installed apps.