Threats tagged 'exploited-in-the-wild'

1,164 threats

Threats tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 75%	CVE-2021-30860Multiple Products · Apple Multiple Products Integer Overflow Vulnerability High7.8KEVEPSS 75%2021-11-03CISA KEVCVE-2021-30860 CVE-2021-30860 is an integer overflow vulnerability in Apple CoreGraphics affecting iOS, iPadOS, macOS, and watchOS. This flaw may allow code execution when processing a maliciously crafted PDF file. It is also known as FORCEDENTRY and has been exploited in the wild. The vulnerability is rated as high severity due to its potential impact. No specific affected versions or patch information is provided in the input data. KEVEPSS 75%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 22%	CVE-2020-27930Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 22%2021-11-03CISA KEVCVE-2020-27930 A memory corruption vulnerability exists in the FontParser component of multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow an attacker to execute arbitrary code when processing a maliciously crafted font. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 22%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 28%	CVE-2021-30807Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 28%2021-11-03CISA KEVCVE-2021-30807 A memory corruption vulnerability exists in Apple iOS, iPadOS, macOS, and watchOS within the IOMobileFrameBuffer component. This flaw may allow an application to execute code with kernel privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 28%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Medium	5.5	KEVEPSS 16%	CVE-2020-27950Multiple Products · Apple Multiple Products Memory Initialization Vulnerability Medium5.5KEVEPSS 16%2021-11-03CISA KEVCVE-2020-27950 A memory initialization vulnerability exists in multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow a malicious application to disclose kernel memory, potentially exposing sensitive information. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 16%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 10%	CVE-2020-27932Multiple Products · Apple Multiple Products Type Confusion Vulnerability High7.8KEVEPSS 10%2021-11-03CISA KEVCVE-2020-27932 A type confusion vulnerability exists in multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow a malicious application to execute code with kernel privileges, potentially leading to significant system compromise. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data. KEVEPSS 10%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 2.3%	CVE-2020-9818iOS, iPadOS, and watchOS · Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability High8.8KEVEPSS 2.3%2021-11-03CISA KEVCVE-2020-9818 CVE-2020-9818 is an out-of-bounds write vulnerability in the Mail app on Apple iOS, iPadOS, and watchOS. This flaw may allow memory modification or cause the application to terminate when processing a specially crafted email message. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 2.3%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Medium	4.3	KEVEPSS 2.2%	CVE-2020-9819iOS, iPadOS, and watchOS · Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Medium4.3KEVEPSS 2.2%2021-11-03CISA KEVCVE-2020-9819 A memory corruption vulnerability exists in the Mail app on Apple iOS, iPadOS, and watchOS. This flaw may allow heap corruption when processing a specially crafted email message. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 2.2%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 10%	CVE-2021-30762iOS · Apple iOS WebKit Use-After-Free Vulnerability High8.8KEVEPSS 10%2021-11-03CISA KEVCVE-2021-30762 CVE-2021-30762 is a use-after-free vulnerability in Apple iOS WebKit that can lead to code execution when processing maliciously crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 10%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.0	KEVEPSS 2.2%	CVE-2021-1782Multiple Products · Apple Multiple Products Race Condition Vulnerability High7.0KEVEPSS 2.2%2021-11-03CISA KEVCVE-2021-1782 A race condition vulnerability exists in multiple Apple operating systems including iOS, iPadOS, macOS, watchOS, and tvOS. This flaw may allow a malicious application to elevate its privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 2.2%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Critical	9.8	KEVEPSS 7.7%	CVE-2021-1870iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Critical9.8KEVEPSS 7.7%2021-11-03CISA KEVCVE-2021-1870 CVE-2021-1870 is a high-severity remote code execution vulnerability in Apple iOS, iPadOS, and macOS WebKit. It involves an unspecified logic flaw that allows remote attackers to execute arbitrary code via crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit for HTML processing. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 7.7%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Critical	9.8	KEVEPSS 7.0%	CVE-2021-1871iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability Critical9.8KEVEPSS 7.0%2021-11-03CISA KEVCVE-2021-1871 CVE-2021-1871 is a high-severity remote code execution vulnerability in Apple iOS, iPadOS, and macOS WebKit. It involves an unspecified logic flaw that allows remote attackers to execute arbitrary code via HTML parsing. This affects Apple Safari and other products using WebKit for HTML processing. Exploits have been observed in the wild. No specific affected versions or patch status are provided. KEVEPSS 7.0%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Medium	6.1	KEVEPSS 7.1%	CVE-2021-1879iOS, iPadOS, and watchOS · Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability Medium6.1KEVEPSS 7.1%2021-11-03CISA KEVCVE-2021-1879 CVE-2021-1879 is a high-severity cross-site scripting (XSS) vulnerability in Apple iOS, iPadOS, and watchOS WebKit. It allows universal XSS when processing maliciously crafted web content, potentially affecting HTML parsers that use WebKit, including Apple Safari and other products relying on WebKit. Exploits have been observed in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 7.1%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 4.5%	CVE-2021-30661Multiple Products · Apple Multiple Products WebKit Storage Use-After-Free Vulnerability High8.8KEVEPSS 4.5%2021-11-03CISA KEVCVE-2021-30661 CVE-2021-30661 is a use-after-free vulnerability in WebKit Storage affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, watchOS, and Safari. The flaw allows code execution when processing maliciously crafted web content. It also potentially affects other products using WebKit for HTML parsing. Exploitation in the wild has been observed. No explicit patch information is provided in the input data. KEVEPSS 4.5%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 3.0%	CVE-2021-30666iOS · Apple iOS WebKit Buffer Overflow Vulnerability High8.8KEVEPSS 3.0%2021-11-03CISA KEVCVE-2021-30666 CVE-2021-30666 is a buffer overflow vulnerability in Apple iOS WebKit that allows code execution when processing maliciously crafted web content. It affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided. KEVEPSS 3.0%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 7.0%	CVE-2021-30713macOS · Apple macOS Unspecified Vulnerability High7.8KEVEPSS 7.0%2021-11-03CISA KEVCVE-2021-30713 An unspecified permissions issue exists in Apple macOS Transparency, Consent, and Control (TCC) that may allow a malicious application to bypass privacy preferences. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 7.0%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
Medium	5.5	KEVEPSS 68%	CVE-2021-30657macOS · Apple macOS Unspecified Vulnerability Medium5.5KEVEPSS 68%2021-11-03CISA KEVCVE-2021-30657 CVE-2021-30657 is an unspecified logic vulnerability in Apple macOS System Preferences that can allow a malicious application to bypass Gatekeeper security checks. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided. KEVEPSS 68%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 3.7%	CVE-2021-30665Multiple Products · Apple Multiple Products WebKit Memory Corruption Vulnerability High8.8KEVEPSS 3.7%2021-11-03CISA KEVCVE-2021-30665 A memory corruption vulnerability exists in WebKit used by multiple Apple products including iOS, iPadOS, macOS, watchOS, and tvOS. This flaw can lead to code execution when processing maliciously crafted web content. The vulnerability affects HTML parsers relying on WebKit, including Apple Safari and other products using WebKit. Exploitation in the wild has been observed. No specific affected versions or patch details are provided in the input data. KEVEPSS 3.7%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 3.5%	CVE-2021-30663Multiple Products · Apple Multiple Products WebKit Integer Overflow Vulnerability High7.8KEVEPSS 3.5%2021-11-03CISA KEVCVE-2021-30663 An integer overflow vulnerability exists in Apple WebKit used by iOS, iPadOS, macOS, tvOS, and Safari. This flaw allows code execution when processing specially crafted web content. The vulnerability affects HTML parsers relying on WebKit, including Apple Safari and potentially other products using WebKit. Exploitation in the wild has been confirmed. No explicit affected versions or patch information is provided. KEVEPSS 3.5%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 10%	CVE-2021-30761iOS · Apple iOS WebKit Memory Corruption Vulnerability High8.8KEVEPSS 10%2021-11-03CISA KEVCVE-2021-30761 CVE-2021-30761 is a memory corruption vulnerability in Apple iOS WebKit that can lead to code execution when processing maliciously crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. KEVEPSS 10%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.8	KEVEPSS 4.1%	CVE-2021-30869iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS Type Confusion Vulnerability High7.8KEVEPSS 4.1%2021-11-03CISA KEVCVE-2021-30869 CVE-2021-30869 is a type confusion vulnerability in the XNU kernel affecting Apple iOS, iPadOS, and macOS. This flaw may allow a malicious application to execute code with kernel privileges. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the input data. KEVEPSS 4.1%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2021-11-03

Showing 901–920 of 1,164 results