Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple iphone os 9.0 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2023-32373
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code exec...
Apple WatchosApple TvosApple MacosApple IpadosApple SafariApple Iphone OsRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
7.5
CVSSv3
CVE-2022-23308
valid.c in libxml2 prior to 2.9.13 has a use-after-free of ID and IDREF attributes.
Xmlsoft Libxml2Fedoraproject Fedora 34Debian Debian Linux 9.0Apple Mac Os X 10.15.7Apple Mac Os XApple Iphone OsApple WatchosApple TvosApple IpadosApple MacosNetapp Snapdrive -Netapp Snapmanager -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Smi-s Provider -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Bootstrap Os -Netapp H300s Firmware -
9.8
CVSSv3
CVE-2020-36328
A flaw was found in libwebp in versions prior to 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...
Webmproject LibwebpRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Ipados 14.7Apple Iphone Os 14.7
9.8
CVSSv3
CVE-2020-36329
A flaw was found in libwebp in versions prior to 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Webmproject LibwebpRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Iphone OsApple Ipados
9.1
CVSSv3
CVE-2020-36330
A flaw was found in libwebp in versions prior to 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Webmproject LibwebpDebian Debian Linux 9.0Debian Debian Linux 10.0Redhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Apple IpadosApple Iphone Os
9.1
CVSSv3
CVE-2020-36331
A flaw was found in libwebp in versions prior to 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Webmproject LibwebpRedhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Iphone OsApple Ipados
6.5
CVSSv3
CVE-2020-6514
Inappropriate implementation in WebRTC in Google Chrome before 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
Google ChromeOpensuse Leap 15.1Opensuse Backports Sle 15.0Opensuse Leap 15.2Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Apple TvosApple Iphone OsApple SafariApple WatchosApple Ipados
7
CVSSv3
CVE-2020-13630
ext/fts3/fts3.c in SQLite prior to 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Sqlite SqliteFedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Brocade Fabric Operating System -Netapp Hci Compute Node Firmware -Debian Debian Linux 9.0Siemens Sinec Infrastructure Network ServicesApple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple ItunesApple MacosOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1
5.5
CVSSv3
CVE-2020-13434
SQLite up to and including 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Sqlite SqliteDebian Debian Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Freebsd Freebsd 12.0Freebsd Freebsd 12.1Freebsd Freebsd 11.4Freebsd FreebsdOracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Cloud Native Core Policy 1.14.0Apple Iphone OsApple WatchosApple TvosApple IpadosApple IcloudApple Itunes
5.5
CVSSv3
CVE-2020-11762
An issue exists in OpenEXR prior to 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.
Openexr OpenexrFedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Mac Os XApple TvosApple Iphone OsApple IcloudApple ItunesApple WatchosApple IpadosApple Mac Os X 10.14.6Apple Mac Os X 10.13.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook