Skip to content
OpenAdvisories

Platform

iOS

3,637 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

860 results · Clear filters · Feed

  • High 8.6
    CVE-2020-3566 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue manageme…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-9818 Exploited

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13…

    Apple watchOS iOS iOS-1 iOS
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-9802 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
  • High 7.8
    CVE-2020-9859 Exploited

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13…

    Apple macOS watchOS tvOS macOS iOS
    KEV Nov 3, 2021
  • High 8.1
    CVE-2020-3257

    Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • High 7.7
    CVE-2020-3235

    Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnera…

    Cisco Cisco IOS 12.2(53)SG1 iOS Network devices
  • High 8.8
    CVE-2020-3234

    Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability

    A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • High 7.7
    CVE-2020-3200

    Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability

    A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented corr…

    Cisco Cisco IOS 12.2(58)SE iOS Network devices
  • High 8.1
    CVE-2020-3199

    Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

    Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) that are running Cisco IOS Software could allow an attacker …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • High 7.5
    CVE-2020-3230

    Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerability

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent IKEv2 from establishing new security associations. The vulnerability is du…

    Cisco Cisco IOS 15.1(2)T iOS Network devices
  • High 8.8
    CVE-2020-3229

    Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

    A vulnerability in Role Based Access Control (RBAC) functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorre…

    Cisco Cisco IOS XE Software 16.2.2 iOS Network devices
  • High 8.6
    CVE-2020-3226

    Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

    A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The v…

    Cisco Cisco IOS 15.0(2)SG11a iOS Network devices
  • High 8.6
    CVE-2020-3225

    Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of serv…

    Cisco Cisco IOS 12.2(55)SE iOS Network devices
  • High 8.8
    CVE-2020-3224

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege lev…

    Cisco Cisco IOS XE Software 16.11.1 iOS Network devices
  • High 8.6
    CVE-2020-3221

    Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability

    A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • High 8.8
    CVE-2020-3219

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. The vulnerability is due to …

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • High 7.2
    CVE-2020-3218

    Cisco IOS XE Software Web UI Remote Code Execution Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code with root privileges on the underlying Linux shell. The vulnerability is due to improper validation o…

    Cisco Cisco IOS XE Software 16.6.1 iOS Network devices
  • High 8.8
    CVE-2020-3217

    Cisco IOS, IOS XE, IOS XR, and NX-OS Software One Platform Kit Remote Code Execution Vulnerability

    A vulnerability in the Topology Discovery Service of Cisco One Platform Kit (onePK) in Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or ca…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.2
    CVE-2020-3212

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input saniti…

    Cisco Cisco IOS XE Software 16.11.1 iOS Network devices
  • High 7.2
    CVE-2020-3211

    Cisco IOS XE Software Web UI Command Injection Vulnerability

    A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input saniti…

    Cisco Cisco IOS XE Software 16.10.1 iOS Network devices
  • High 8.8
    CVE-2020-3205

    Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability

    A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent …

    Cisco Cisco IOS 12.2(60)EZ16 iOS Network devices
  • High 8.6
    CVE-2020-3203

    Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability

    A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead …

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • High 7.8
    CVE-2019-16011

    Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit t…

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices
  • High 7.8
    CVE-2020-3837 Exploited Public exploit EPSS 15%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 8.4
    CVE-2019-1950

    Cisco IOS XE SD-WAN Software Default Credentials Vulnerability

    A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected …

    Cisco Cisco IOS XE SD-WAN Software iOS Network devices
  • High 7.4
    CVE-2020-3120

    Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.8
    CVE-2020-3118 Exploited EPSS 12%

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of st…

    Cisco Cisco IOS XR Software iOS Network devices
    KEV Nov 3, 2021
  • High 7.7
    CVE-2019-16027

    Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

    A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–IS) routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) conditio…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.6
    CVE-2019-16022

    Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

    Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are du…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.6
    CVE-2019-16020

    Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

    Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are du…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.4
    CVE-2019-16018

    Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability

    A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorre…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 8.6
    CVE-2019-15989

    Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability

    A vulnerability in the implementation of the Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of…

    Cisco Cisco IOS XR Software iOS Network devices
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-7286 Exploited Public exploit EPSS 16%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

    Apple macOS iOS macOS iOS
    KEV May 23, 2022
  • High 8.8
    CVE-2019-8506 Exploited Public exploit EPSS 16%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

    Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
    KEV May 4, 2022
  • High 7.8
    CVE-2019-7287 Exploited

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An applicati…

    Apple iOS iOS
    KEV May 23, 2022
  • High 8.6
    CVE-2019-12658

    Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability

    A vulnerability in the filesystem resource management code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to exhaust filesystem resources on an affected device and cause a denial of service (DoS) condition. The vulnerability is due t…

    Cisco Cisco IOS XE Software 16.1.1 iOS Network devices
  • High 8.6
    CVE-2019-12652

    Cisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability

    A vulnerability in the ingress packet processing function of Cisco IOS Software for Cisco Catalyst 4000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is du…

    Cisco Cisco IOS 15.0(1)XO1 iOS Network devices
  • High 8.6
    CVE-2019-12654

    Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability

    A vulnerability in the common Session Initiation Protocol (SIP) library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerabi…

    Cisco Cisco IOS 15.0(1)XA2 iOS Network devices
  • High 8.6
    CVE-2019-12657

    Cisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability

    A vulnerability in Unified Threat Defense (UTD) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper validation of IPv6 packets through the UTD feature. An attacke…

    Cisco Cisco IOS XE Software 3.16.0S iOS Network devices