CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2025-432004.2/MEDIUMEPSS 1.2%CISA KEV
2025-06-16

Apple iOS, iPadOS, macOS, visionOS, watchOS iCloud Link Processing Logic Vulnerability (CVE-2025-43200) Analysis and Mitigation Guide

[Affected Scope] Apple operating systems including iOS 15/16/17/18, iPadOS 15/16/17/18, macOS Ventura/Sonoma/Sequoia, visionOS, and watchOS

[Impact] A logic issue in processing maliciously crafted photos or videos shared via iCloud Links allows unauthorized data access and modification, with active exploitation observed in highly targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple (e.g., iOS 18.3.1, macOS 15.3.1) and exercise caution when opening untrusted iCloud shared links

CVE-2019-85068.8/HIGHEPSS 16.2%CISA KEV
2019-12-18

Apple WebKit Type Confusion Vulnerability Analysis and Mitigation Guide (CVE-2019-8506)

[Affected Scope] Systems running versions prior to iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target system

[Mitigation] Immediately update all affected operating systems and applications to their latest patched versions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse