Platform

iOS

3,637 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,637 results · Feed

Unscored —

CVE-2023-32394

The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, …

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2023-32376

This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2023-32388

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 9.5,…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2023-32419

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.5 and iPadOS 16.5. A remote attacker…

Apple iOS and iPadOS iOS

Jun 23, 2023
Medium 5.5

CVE-2023-32372

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, wa…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2023-27930

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2023-27940

The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS …

Apple macOS iOS and iPadOS macOS iOS

Jun 23, 2023
Unscored —

CVE-2022-46715

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to …

Apple iOS and iPadOS iOS

Jun 23, 2023
Unscored —

CVE-2022-42792

This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be ab…

Apple iOS and iPadOS iOS

Jun 23, 2023
Medium 4.3

CVE-2023-3201

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possible for unauthenticated attackers to update new order title via a forged request …

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Jun 14, 2023
Medium 4.3

CVE-2023-3198

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it possible for unauthenticated attackers to update status order message via a forge…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Jun 14, 2023
Medium 4.3

CVE-2023-3200

MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it possible for unauthenticated attackers to update new order message via a forged requ…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Jun 14, 2023
Medium 4.3

CVE-2023-3203

MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible for unauthenticated attackers to update limit the number of product per categor…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Jun 14, 2023
Medium 4.3

CVE-2023-28599

Zoom clients prior to 5.13.10 contain an HTML injection vulnerability. A malicious user could inject HTML into their di…

Zoom Video Communications Zoom for Windows Zoom for Android Zoom for Linux Linux Windows Android macOS iOS

Jun 13, 2023
Unscored —

CVE-2023-29501

Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android ver…

RUNSYSTEM Jiyu Kukan Toku-Toku coupon App for iOS, and Jiyu Kukan Toku-Toku coupon App for Android Android iOS

Jun 13, 2023
Critical 9.8

CVE-2020-36713

MStore API <= 2.1.5 - Authentication Bypass

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'update_user_profile' routes. This makes it possible for unauthenticated attackers to …

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

Jun 7, 2023
Critical 9.8

CVE-2023-2732 Public exploit Scanner template EPSS 67%

MStore API <= 3.9.2 - Authentication Bypass

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

May 25, 2023
Critical 9.8

CVE-2023-2733

MStore API <= 3.9.0 - Authentication Bypass

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.0. This is due to insufficient verification on the user being supplied during the coupon redemption REST API request through the plugin. This make…

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

May 25, 2023
Critical 9.8

CVE-2023-2734 Scanner template

MStore API <= 3.9.1 - Authentication Bypass

The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.1. This is due to insufficient verification on the user being supplied during the cart sync from mobile REST API request through the plugin. This …

inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS

May 25, 2023
High 7.1

CVE-2022-41690

Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authentica…

iOS Browsers

May 10, 2023
Medium 5.9

CVE-2023-28932

WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.20 versions.

WPMobile.App WPMobile.App — Android and iOS Mobile Application Android iOS

May 10, 2023
Medium 5.5

CVE-2023-28200

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…

Apple macOS iOS and iPadOS macOS iOS

May 8, 2023
Low 3.3

CVE-2023-28194

The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to un…

Apple iOS and iPadOS iOS

May 8, 2023
Medium 5.5

CVE-2023-28178

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
Critical 9.8

CVE-2023-28201

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers

May 8, 2023
High 7.8

CVE-2023-28181

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
Medium 6.5

CVE-2023-28182

The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…

Apple macOS iOS and iPadOS macOS iOS

May 8, 2023
Medium 5.5

CVE-2023-27956

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
Medium 5.5

CVE-2023-27931

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
High 7.8

CVE-2023-27936

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, i…

Apple macOS iOS and iPadOS macOS iOS

May 8, 2023
Medium 5.5

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023
High 7.8

CVE-2023-27946

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…

Apple macOS iOS and iPadOS macOS iOS

May 8, 2023
Medium 6.5

CVE-2023-27954

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023
High 7.5

CVE-2023-27963

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
High 7.8

CVE-2023-27959

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be a…

Apple iOS and iPadOS iOS

May 8, 2023
High 7.8

CVE-2023-27937

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 a…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
Medium 5.5

CVE-2023-27929

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
Medium 6.7

CVE-2023-27933

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023
High 7.8

CVE-2023-27970

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16…

Apple iOS and iPadOS iOS

May 8, 2023
Low 3.3

CVE-2023-27928

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 8, 2023