Sploitus

72 exploited vulnerabilities in Icloud

Showing 1–50 of 72, highest-scoring first

Vendors
Almalinux, Centos, Red Hat, Rocky Linux, Apple, Suse
With known exploits
72
Affected Apple Icloud versions
< 7.12, 7.16, 10.9, 10.4, 7.11, 7.13, 10.6, 6.2.2, 12.3, 7.20, 11.3
Affected Apple Itunes versions
< 12.9.5, 12.10.3, 12.9.4, 12.9.6, 12.6.2, 12.11.3, 12.10.8
Affected Apple Safari versions
< 12.1.1, 13.0.4, 12.1, 12.1.2, 14.1, 13.1.2, 12.0.2, 12, 11.1.1, 11.1
Affected Apple Iphone Os versions
< 12.3, 13.3, 12.2, 12.4, 14.5, 13.6, 12.1.1, 12.0, 11.4, 11.3.1, 11.3
Affected Apple Mac Os X versions
< 10.14.5, 10.14.6
Affected Apple Tvos versions
< 12.3, 13.3, 12.2, 12.4, 14.5, 13.4.8, 12.1.1, 12, 11.4, 11.3
Affected Apple Watchos versions
< 5.2.1, 6.1.1, 5.2, 5.3, 7.4, 6.2.8, 5.1.2, 4.3.1, 4.3
Affected Apple Ipados versions
< 13.3, 14.5, 13.6

Vulnerabilities with exploits

Highest CVSS first — 31 of these already have exploit code on Sploitus

CVE-2019-8601 1 exploit
CVSS 10.0 HIGH 2019-05-20FIX AVAILABLE
Exploit for Integer Overflow or Wraparound in Apple Icloud
CVE-2019-8583
CVSS 10.0 HIGH 2019-05-20FIX AVAILABLE
CVE-2019-8571
CVSS 10.0 HIGH 2019-05-20FIX AVAILABLE
CVE-2020-9915
CVSS 9.8 CRITICAL 2020-07-29FIX AVAILABLE
CVE-2019-8846
CVSS 9.3 HIGH 2020-01-23FIX AVAILABLE
CVE-2019-8844
CVSS 9.3 HIGH 2020-01-23FIX AVAILABLE
CVE-2019-8835
CVSS 9.3 HIGH 2019-12-19FIX AVAILABLE
CVE-2019-8623 3 exploits
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzermacOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT
CVE-2019-8622 4 exploits
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
DFG JIT Use-After-FreeFuzzilli - A JavaScript Engine Fuzzer
CVE-2019-8619
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
CVE-2019-8611 3 exploits
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzermacOS < 10.14.5 / iOS < 12.3 JavaScriptCore - AIR Optimization Incorrectly Removes Assignment
CVE-2019-8610
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
CVE-2019-8609
CVSS 9.3 HIGH 2019-05-13FIX AVAILABLE
CVE-2019-8563
CVSS 9.3 HIGH 2019-04-10FIX AVAILABLE
CVE-2019-8535
CVSS 9.3 HIGH 2019-03-25FIX AVAILABLE
CVE-2019-8558 3 exploits
CVSS 9.3 HIGH 2019-04-10FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzerWebKit JavaScriptCore - CodeBlock Dangling Watchpoints Use-After-Free Exploit
CVE-2019-8673
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8672 3 exploits
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
Fuzzilli - A JavaScript Engine FuzzermacOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles Exploit
CVE-2019-8666
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
CVE-2019-8644
CVSS 9.3 HIGH 2019-07-24FIX AVAILABLE
CVE-2019-8689 3 exploits
CVSS 9.3 HIGH 2019-08-29FIX AVAILABLE
Webkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform ExploitWebkit JSC: JIT - Uninitialized Variable Access in ArgumentsEliminationPhase::transform
CVE-2017-7041 4 exploits
CVSS 9.3 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::Node::getFlag(CVE-2017-7041)WebKit WebCore::Node::getFlag Use-After-Free
CVE-2017-7042 4 exploits
CVSS 9.3 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::InputType::element(CVE-2017-7042)WebKit WebCore::InputType::element Use-After-Free
CVE-2021-1825
CVSS 8.8 HIGH 2020-11-23FIX AVAILABLE
CVE-2020-9893
CVSS 8.8 HIGH 2020-07-21FIX AVAILABLE
CVE-2020-9807
CVSS 8.8 HIGH 2020-05-20FIX AVAILABLE
CVE-2018-4442 3 exploits
CVSS 8.8 HIGH 2019-01-15FIX AVAILABLE
WebKit JSC JIT - GetIndexedPropertyStorage Use-After-Free ExploitWebKit JSC JIT - GetIndexedPropertyStorage Use-After-Free
CVE-2018-4438 3 exploits
CVSS 8.8 HIGH 2019-01-15FIX AVAILABLE
WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains ExploitWebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains
CVE-2019-8597
CVSS 8.8 HIGH 2019-05-20FIX AVAILABLE
CVE-2019-8559
CVSS 8.8 HIGH 2019-04-10FIX AVAILABLE
CVE-2018-4328 3 exploits
CVSS 8.8 HIGH 2018-09-28FIX AVAILABLE
WebKit - WebCore::InlineTextBox::paint Out-of-Bounds Read ExploitWebKit - 'WebCore::InlineTextBox::paint' Out-of-Bounds Read
CVE-2018-4323 3 exploits
CVSS 8.8 HIGH 2018-09-28FIX AVAILABLE
WebKit - WebCore::RenderMultiColumnSet::updateMinimumColumnHeight Use-After-Free ExploitWebKit - 'WebCore::RenderMultiColumnSet::updateMinimumColumnHeight' Use-After-Free
CVE-2018-4233 11 exploits
CVSS 8.8 HIGH 2012-02-17FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple SafariExploit for CVE-2016-2434
CVE-2018-4222 3 exploits
CVSS 8.8 HIGH 2018-06-08FIX AVAILABLE
WebKit - WebAssembly Compilation Info Leak ExploitWebKit - WebAssembly Compilation Info Leak
CVE-2018-4218 3 exploits
CVSS 8.8 HIGH 2018-06-08FIX AVAILABLE
WebKit - Use-After-Free when Resuming Generator ExploitWebKit - Use-After-Free when Resuming Generator
CVE-2018-4204 1 exploit
CVSS 8.8 HIGH 2012-02-17FIX AVAILABLE
WebKitGTK+ Memory Corruption / Code Execution Vulnerability
CVE-2018-4200 4 exploits
CVSS 8.8 HIGH 2018-05-07FIX AVAILABLE
WebKitGTK+ Memory Corruption / Code Execution VulnerabilityWebKit WebCore::jsElementScrollHeightGette Use-After-Free Exploit
CVE-2018-4197 3 exploits
CVSS 8.8 HIGH 2018-09-28FIX AVAILABLE
WebKit - WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeededWebKit - 'WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeeded' Use-After-Free
CVE-2018-4162 3 exploits
CVSS 8.8 HIGH 2018-04-03FIX AVAILABLE
Safari Webkit For iOS 7.1.2 JIT Optimization Bug ExploitSafari Webkit JIT Exploit for iOS 7.1.2
CVE-2018-4121 5 exploits
CVSS 8.8 HIGH 2012-02-17FIX AVAILABLE
WebKitGTK+ Memory Corruption / Code Execution VulnerabilityExploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
CVE-2017-7117 7 exploits
CVSS 8.8 HIGH 2017-10-18FIX AVAILABLE
PS4-12.00-JailbreakExploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
CVE-2017-7092 1 exploit
CVSS 8.8 HIGH 2017-09-26FIX AVAILABLE
WebKitGTK+ Code Execution / Cookie Handling / Memory Corruption Vulnerabilities
CVE-2017-7061 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: JSC: Incorrect optimization in BytecodeGenerator::emitGetByVal(CVE-2017-7061)WebKit JSC BytecodeGenerator::emitGetByVal Incorrect Optimization
CVE-2017-7056 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: JSC: Incorrect LoadVarargs handling in ArgumentsEliminationPhase::transform(CVE-2017-7056)WebKit JSC ArgumentsEliminationPhase::transform Incorrect LoadVarargs Handling Vulnerability
CVE-2017-7048 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::AccessibilityNodeObject::textUnderElement(CVE-2017-7048)WebKit WebCore::AccessibilityNodeObject::textUnderElement Use-After-Free
CVE-2017-7046 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::RenderObject with accessibility enabled(CVE-2017-7046)WebKit WebCore::RenderObject Use-After-Free
CVE-2017-7043 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::AccessibilityRenderObject::handleAriaExpandedChanged(CVE-2017-7043)WebKit WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free
CVE-2017-7040 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::getCachedWrapper(CVE-2017-7040)WebKit WebCore::getCachedWrapper Use-After-Free
CVE-2017-7039 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: use-after-free in WebCore::Node::nextSibling(CVE-2017-7039)WebKit WebCore::Node::nextSibling Use-After-Free
CVE-2017-7037 4 exploits
CVSS 8.8 HIGH 2017-07-20FIX AVAILABLE
WebKit: JSC: UXSS via JSObject::putInlineSlow and JSValue::putToPrimitive(CVE-2017-7037)WebKit JSC - 'JSObject::putInlineSlow' / 'JSValue::putToPrimitive' Universal Cross-Site Scripting