IC
Product
Icloud
On CISA KEVExploited in the wild
449
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 343Medium 85Low 2
Watch
Add Icloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-4266 | 5.9 | Apr 3 | A race condition was addressed with additional validation Affected: before 7.6 |
| CVE-2017-13864 | 5.9 | Dec 25 | An issue was discovered in certain Apple products Affected: before 7.2 |
| CVE-2022-46692 | 5.5 | Dec 15 | A logic issue was addressed with improved state management Affected: before 14.1 |
| CVE-2020-7463 | 5.5 | Mar 26 | In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel… Affected: before 12.3 |
| CVE-2020-10002 | 5.5 | Dec 8 | A logic issue was addressed with improved state management Affected: before 11.5 |
| CVE-2019-8582 | 5.5 | Oct 27 | An out-of-bounds read was addressed with improved bounds checking Affected: before 7.12 |
| CVE-2020-15358 | 5.5 | Jun 27 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant… Affected: before 7.21 |
| CVE-2020-13631 | 5.5 | May 27 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c Affected: before 11.5 |
| CVE-2020-13434 | 5.5 | May 24 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c Affected: before 11.5 |
| CVE-2020-11765 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11764 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11763 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11762 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11761 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11760 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11759 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 10.0 before 11.3 |
| CVE-2020-11758 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 7.20; 11.0 before 11.3 |
| CVE-2019-8598 | 5.5 | Dec 18 | An input validation issue was addressed with improved input validation Affected: before 7.12 |
| CVE-2018-4226 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 7.5 |
| CVE-2018-4225 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 7.5 |
| CVE-2018-4224 | 5.5 | Jun 8 | An issue was discovered in certain Apple products Affected: before 7.5 |
| CVE-2017-7064 | 5.5 | Jul 20 | An issue was discovered in certain Apple products Affected: through 6.2.1 |
| CVE-2016-7614 | 5.5 | Feb 20 | An issue was discovered in certain Apple products Affected: through 6.0.1 |
| CVE-2020-9916 | 5.3 | Oct 16 | A URL Unicode encoding issue was addressed with improved state management Affected: before 7.20; 11.0 before 11.3 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: before 7.13; 10.0 before 10.6 |
| CVE-2018-4293 | 5.3 | Apr 3 | A cookie management issue was addressed with improved checks Affected: before 7.6 |
| CVE-2019-8834 | 4.3 | Oct 27 | A configuration issue was addressed with additional restrictions Affected: before 7.16; 10.0 before 10.9 |
| CVE-2019-8827 | 4.3 | Oct 27 | The HTTP referrer header may be used to leak browsing history Affected: before 7.15; 10.0 before 10.9.2 |
| CVE-2020-9894 | 4.3 | Oct 16 | An out-of-bounds read was addressed with improved input validation Affected: before 7.20; 11.0 before 11.3 |
| CVE-2020-3887 | 4.3 | Apr 1 | A logic issue was addressed with improved restrictions Affected: before 7.18; 10.0.0 before 10.9.3 |
| CVE-2020-3885 | 4.3 | Apr 1 | A logic issue was addressed with improved restrictions Affected: before 7.18; 10.0.0 before 10.9.3 |
| CVE-2018-4440 | 4.3 | Apr 3 | A logic issue was addressed with improved state management Affected: before 7.9 |
| CVE-2018-4278 | 4.3 | Jan 11 | In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be… Affected: before 7.6 |
| CVE-2018-4232 | 4.3 | Jun 8 | An issue was discovered in certain Apple products Affected: before 7.5 |
| CVE-2016-7592 | 4.3 | Feb 20 | An issue was discovered in certain Apple products Affected: through 6.0.1 |