Known vulnerabilities in Apple iOS 17.4 21E217

Vendor: Apple Inc.
Software: Apple iOS
Version: 17.4 21E217
Software CPE: cpe:2.3:o:apple:apple_ios:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apple iOS version 17.4 21E217 Apple iOS 17.4 21E217 is affected by 133 vulnerabilities: 2 critical, 19 high, 31 medium, 81 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114314 - Out-of-bounds write
CVE-2025-43300
CWE-787 Critical
Public exploit available
Exploited
18.6.2 22G100, 15.8.5 19H394, 16.7.12 20H364 20.08.2025 SB20250820136
SB20250820137
SB20250820138
and 4 more
#VU103756 - Security Features
CVE-2025-24200
CWE-254 High
No
Exploited
18.3.1 22D72, 15.8.4 19H390, 16.7.11 20H360 10.02.2025 SB2025021076
SB2025021077
SB2025040101
and 1 more
#VU100669 - Improper input validation
CVE-2024-44308
CWE-20 Critical
No
Exploited
17.7.2 21H216, 18.1.1 22B83 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309
CWE-79 High
No
Exploited
17.7.2 21H216, 18.1.1 22B83 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more
#VU99424 - Improper input validation
CVE-2024-44155
CWE-20 Medium
No
No
17.7.1 21H216, 18.0 22A3354 28.10.2024 SB2024102851
SB2024091702
SB2024091707
and 2 more
#VU99423 - Improper input validation
CVE-2024-44252
CWE-20 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102851
SB2024102852
SB2024102853
and 1 more
#VU99422 - UNIX Symbolic Link (Symlink) Following
CVE-2024-44258
CWE-61 Medium
Public exploit available
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102851
SB2024102852
SB2024102853
and 1 more
#VU99421 - Improper Authentication
CVE-2024-44274
CWE-287 Low
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102851
SB2024102852
SB2024102854
#VU99419 - Security Features
CVE-2024-44296
CWE-254 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102849
SB2024102850
SB2024102851
and 28 more
#VU99415 - Security Features
CVE-2024-44259
CWE-254 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102850
SB2024102851
SB2024102852
and 2 more
#VU99405 - Heap-based Buffer Overflow
CVE-2024-44218
CWE-122 High
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102848
SB2024102850
SB2024102851
and 1 more
#VU99404 - Memory corruption
CVE-2024-44144
CWE-119 Low
No
No
17.7.1 21H216, 18.0 22A3354 28.10.2024 SB2024102848
SB2024102851
SB2024091711
and 4 more
#VU99399 - Security Features
CVE-2024-44278
CWE-254 Low
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 4 more
#VU99392 - Improper Access Control
CVE-2024-44269
CWE-284 Low
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 4 more
#VU99377 - Information Exposure Through Log Files
CVE-2024-44239
CWE-532 Low
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more
#VU99373 - Memory corruption
CVE-2024-44297
CWE-119 Low
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more
#VU99372 - Out-of-bounds read
CVE-2024-44215
CWE-125 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more
#VU99370 - Out-of-bounds read
CVE-2024-44282
CWE-125 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more
#VU99366 - Out-of-bounds read
CVE-2024-44302
CWE-125 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more
#VU99365 - Out-of-bounds read
CVE-2024-44240
CWE-125 Medium
No
No
17.7.1 21H216, 18.1 22B83 28.10.2024 SB2024102847
SB2024102848
SB2024102850
and 5 more


Showing elements 1 - 20 out of 133