Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (272 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-43422 1 Apple 3 Ios, Ipados, Iphone Os 2025-12-01 4.6 Medium
The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able to disable Stolen Device Protection.
CVE-2025-43360 1 Apple 4 Ios, Ipad Os, Ipados and 1 more 2025-12-01 5.5 Medium
The issue was addressed with improved UI. This issue is fixed in iOS 26 and iPadOS 26. Password fields may be unintentionally revealed.
CVE-2025-64304 3 Apple, Fujitv, Google 3 Ios, Fod App, Android 2025-11-27 N/A
"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to retrieve the cryptographic keys.
CVE-2025-43374 1 Apple 9 Ios, Ipados, Iphone Os and 6 more 2025-11-26 4.3 Medium
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory.
CVE-2025-31216 1 Apple 3 Ios, Ipados, Iphone Os 2025-11-26 2.4 Low
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to override managed Wi-Fi profiles.
CVE-2025-43342 3 Apple, Webkitgtk, Wpewebkit 10 Ios, Ipados, Iphone Os and 7 more 2025-11-20 9.8 Critical
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-13983 2 Apple, Google 3 Ios, Iphone Os, Chrome 2025-11-17 6.3 Medium
Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low)
CVE-2025-43205 1 Apple 6 Ios, Ipados, Iphone Os and 3 more 2025-11-14 4 Medium
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR.
CVE-2023-44487 32 Akka, Amazon, Apache and 29 more 367 Http Server, Opensearch Data Prepper, Apisix and 364 more 2025-11-07 7.5 High
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2025-43365 1 Apple 3 Ios, Ipados, Iphone Os 2025-11-05 2.8 Low
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An unprivileged process may be able to terminate a root processes.
CVE-2025-43452 1 Apple 3 Ios, Ipados, Iphone Os 2025-11-05 4.6 Medium
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen.
CVE-2025-43350 1 Apple 3 Ios, Ipados, Iphone Os 2025-11-05 2.4 Low
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted content from the lock screen.
CVE-2025-43400 1 Apple 8 Ios, Ipados, Iphone Os and 5 more 2025-11-04 6.3 Medium
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
CVE-2025-43368 1 Apple 5 Ios, Ipados, Iphone Os and 2 more 2025-11-04 4.3 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43356 1 Apple 8 Ios, Ipados, Iphone Os and 5 more 2025-11-04 6.5 Medium
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. A website may be able to access sensor information without user consent.
CVE-2025-43272 1 Apple 7 Ios, Ipados, Iphone Os and 4 more 2025-11-04 6.5 Medium
The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43265 1 Apple 9 Ios And Ipados, Ipados, Iphone Os and 6 more 2025-11-04 4 Medium
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2025-43228 1 Apple 4 Ios, Ipados, Iphone Os and 1 more 2025-11-04 4.3 Medium
The issue was addressed with improved UI. This issue is fixed in iOS 18.6 and iPadOS 18.6, Safari 18. 6. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-43227 1 Apple 9 Ios, Ipados, Iphone Os and 6 more 2025-11-04 7.5 High
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may disclose sensitive user information.
CVE-2025-43216 1 Apple 9 Ios, Ipados, Iphone Os and 6 more 2025-11-04 6.5 Medium
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, watchOS 11.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, tvOS 18.6, macOS Sequoia 15.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.