Approved changes feed: RSS · Atom

cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:iphone:*

part: o version: - update: *

VendorApple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7)
ProductIphone Os (a8f177aa-2ee7-5c0b-9356-ee8bf462ff28)
Edition*
Language*
Software edition*
Target software*
Target hardwareiphone
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-44309 vulnerable 2026-06-08 06:45:53.975493 Details available
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
Published: 2024-11-19T23:43:55.493Z
Updated: 2026-04-02T18:26:41.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44308 vulnerable 2026-06-08 06:45:53.972772 Details available
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
Published: 2024-11-19T23:43:50.135Z
Updated: 2026-04-02T18:23:18.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44258 vulnerable 2026-06-08 06:45:53.920401 Details available
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Published: 2024-10-28T21:07:58.858Z
Updated: 2026-04-02T18:12:19.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27855 vulnerable 2026-06-08 06:33:24.822994 Details available
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. A shortcut may be able to use sensitive data with certain actions without prompting the user.
Published: 2024-06-10T20:56:40.924Z
Updated: 2026-04-02T18:16:59.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27850 vulnerable 2026-06-08 06:33:24.801130 Details available
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user.
Published: 2024-06-10T20:56:45.824Z
Updated: 2026-04-02T18:24:27.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27848 vulnerable 2026-06-08 06:33:24.793442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27808 vulnerable 2026-06-08 06:31:29.301875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4404 vulnerable 2026-06-08 05:11:41.990497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8129 vulnerable 2026-06-08 05:06:07.789316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.