Vulnerabilities > Apple > Iphone OS > 8.1.1

DATE CVE VULNERABILITY TITLE RISK
2017-05-22 CVE-2017-2505 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, Safari and Tvos
An issue was discovered in certain Apple products.
network
apple CWE-119
6.8
6.8
2017-05-22 CVE-2017-2504 Cross-site Scripting vulnerability in Apple Iphone OS, Safari and Tvos
An issue was discovered in certain Apple products.
network
apple CWE-79
4.3
4.3
2017-05-22 CVE-2017-2502 Multiple Security vulnerability in Apple iOS/WatchOS/tvOS/macOS
An issue was discovered in certain Apple products.
network
apple
4.3
4.3
2017-05-22 CVE-2017-2501 Race Condition vulnerability in Apple products
An issue was discovered in certain Apple products.
network
high complexity
apple CWE-362
7.6
7.6
2017-05-22 CVE-2017-2499 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, Safari and Tvos
An issue was discovered in certain Apple products.
network
apple CWE-119
6.8
6.8
2017-05-22 CVE-2017-2498 Improper Certificate Validation vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-295
5.0
5.0
2017-05-22 CVE-2017-2497 Open Redirect vulnerability in Apple Iphone OS and mac OS X
An issue was discovered in certain Apple products.
network
apple CWE-601
5.8
5.8
2017-05-22 CVE-2017-2496 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS and Safari
An issue was discovered in certain Apple products.
network
apple CWE-119
6.8
6.8
2017-05-22 CVE-2017-2495 Improper Input Validation vulnerability in Apple Iphone OS and Safari
An issue was discovered in certain Apple products.
network
apple CWE-20
4.3
4.3
2017-04-20 CVE-2016-4650 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Tvos
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
network
apple CWE-119
critical
 9.3
9.3