Skip to contentApple Iphone vulnerabilities
- apple iphone osSettings in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended...CVE-2014-13504.6 Medium
- apple iphone osUse-after-free vulnerability in Safari in Apple iOS before 7.1.2 allows remote attackers to...CVE-2014-13496.8 Medium
- apple iphone osMail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but...CVE-2014-13482.1 Low
- apple safari, iphone os +1 moreWebKit in Apple iOS before 7.1.2 and Apple Safari before 6.1.5 and 7.x before 7.0.5 does not...CVE-2014-13454.3 Medium
- apple safari, iphone os, tvos +2 moreWebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and...CVE-2014-13256.8 Medium
- apple iphone os, mac os x, tvos +2 moreIOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places...CVE-2014-13204.9 Medium
- apple iphone os, mac os x, mac os x server +1 more +3 moreCFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does...CVE-2014-12964.3 Medium
- apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and...CVE-2014-12956.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12946.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12936.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12926.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12916.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12906.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...CVE-2014-12896.8 Medium
- apple iphone os, tvos +1 moreUSB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to...CVE-2014-1287Public exploit7.2 High
- apple iphone osSpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of...CVE-2014-12865.0 Medium
- apple iphone osSpringboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended...CVE-2014-12855.8 Medium
- apple iphone os, tvos +1 moreThe Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass...CVE-2014-12825.8 Medium
- apple iphone osPhotos Backend in Apple iOS before 7.1 does not properly manage the asset-library cache during...CVE-2014-12811.9 Low
- apple iphone os, tvos +1 moreVideo Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a...CVE-2014-12807.1 High
- apple iphone os, tvos +1 moreThe ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1...CVE-2014-12787.2 High
- apple iphone osIOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring...CVE-2014-12765.0 Medium
- apple iphone os, tvos +1 moreBuffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote...CVE-2014-12756.8 Medium
- apple iphone osFaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive...CVE-2014-12742.1 Low
- apple iphone os, tvos +1 moredyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing...CVE-2014-12735.8 Medium
- apple iphone os, tvos +1 moreCrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local...CVE-2014-12726.3 Medium
- apple iphone os, tvos +1 moreCoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API...CVE-2014-12717.8 High
- apple iphone os, tvos +1 moreThe Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not...CVE-2014-12675.8 Medium
- apple iphone osTelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user...CVE-2013-6835Public exploit5.0 Medium
- apple iphone osBackup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers...CVE-2013-51338.8 High
- apple iphone os, mac os x, tvos +2 moreThe SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the...CVE-2014-1266Public exploit7.4 High
- apple iphone osThe iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an...CVE-2014-20194.6 Medium
- apple pages, iphone os, mac os x +2 moreDouble free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote...CVE-2014-12527.5 High
- apple ipados, iphone os, macos +7 more +9 moreexpat 2.1.0 and earlier does not properly handle entities expansion unless an application...CVE-2013-0340Fix availableEPSS 19.4%6.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-52286.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-52256.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51996.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51986.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51976.8 Medium
- apple safari, webkit, iphone os +2 more +4 moreWebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to...CVE-2013-51966.8 Medium
- apple iphone osThe App Store component in Apple iOS before 7.0.4 does not properly enforce an intended...CVE-2013-51934.7 Medium
- apple iphone osMultiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate...CVE-2013-51643.3 Low
- apple iphone osPasscode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers...CVE-2013-51622.1 Low
- apple iphone osPasscode Lock in Apple iOS before 7.0.3 on iPhone devices allows physically proximate attackers...CVE-2013-51443.3 Low
- apple iphone osPasscode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows...CVE-2013-51614.4 Medium
- apple iphone osPasscode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers...CVE-2013-51603.3 Low
- apple iphone osWebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain...CVE-2013-51594.3 Medium
- apple iphone osThe Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of...CVE-2013-51582.1 Low
- apple iphone osThe Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter...CVE-2013-51575.0 Medium
- apple iphone osThe Telephony subsystem in Apple iOS before 7 does not require API conformity for access to...CVE-2013-51564.3 Medium
- Show moreLoading…