apple watch os vulnerabilities and exploits

(subscribe to this query)

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

Apple Itunes Apple Iphone Os Apple Mac Os X Apple Tv Os Apple Watch Os

An issue exists in certain Apple products. iOS prior to 11.2.1 is affected. tvOS prior to 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote malicious users to modify the application state by leveraging incorrect message handling, as demons...

Apple Iphone Os Apple Tvos

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue m...

Apple Watchos Apple Iphone Os Apple Ipados

1 Github repository1 Article

An issue exists in certain Apple products. iOS prior to 10.2.1 is affected. watchOS prior to 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows malicious users to bypass the wrist-presence protection mechanism and unlock a Watch devic...

Apple Iphone Os Apple Watchos

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features

Apple Ipados Apple Iphone Os

GasGauge in Apple watchOS prior to 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5919.

GasGauge in Apple watchOS prior to 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5918.

MobileInstallation in Apple iOS prior to 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows malicious users to cause a denial of service (ID collision and Watch launch outage) via a crafted universal provisioning profile app.

Apple Iphone Os

1 Article

FontParser in Apple iOS prior to 8.3 and Apple OS X prior to 10.10.3 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Apple Mac Os X Apple Iphone Os

1 Article

Race condition in the setreuid system-call implementation in the kernel in Apple iOS prior to 8.3, Apple OS X prior to 10.10.3, and Apple TV prior to 7.2 allows malicious users to cause a denial of service via a crafted app.

Apple Mac Os X Apple Tvos Apple Iphone Os

1 Article

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook