Icloud

Vendor:

First CVE: Jun 9, 2016 · Active for 10 years

449
Total CVEs
More Total CVEs than 100% of tracked products
64.1
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.4%
KEV Rate
Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Icloud over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2016
10 years ago
Most Recent CVE
Dec 15, 2022
1,317 days ago

CVE Severity & Scoring

Icloud449 CVEs
All CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local79 (17.6%)
Network370 (82.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low440 (98.0%)
High9 (2.0%)
Unknown0 (0.0%)
User Interaction
None46 (10.2%)
Unknown0 (0.0%)
Required403 (89.8%)
Privileges Required
Low15 (3.3%)
High0 (0.0%)
None434 (96.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (449 CVEs).

449 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-9850CRITICAL
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iClo
Jun 9, 20209.882NOYES
CVE-2019-8506HIGH
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Wind
Dec 18, 20198.882YESYES
CVE-2018-4233HIGH
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on
Jun 8, 20188.876NOYES
CVE-2020-27932HIGH
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 Hig
Dec 8, 20207.866YESNO
CVE-2018-4162HIGH
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Wi
Apr 3, 20188.859NOYES
CVE-2018-4416HIGH
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1
Apr 3, 20198.858NOYES
CVE-2018-4441HIGH
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 fo
Apr 3, 20198.846NOYES
CVE-2018-4121HIGH
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Wi
Apr 3, 20188.846NOYES
CVE-2019-8518HIGH
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCl
Dec 18, 20198.844NOYES
CVE-2018-4317HIGH
A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows
Apr 3, 20198.843NOYES
View all 449 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (449 CVEs).

CISA KEV
2 CVEs
0.4% of CVEs· 96th percentile
Metasploit
3 CVEs
0.7% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
63 CVEs
14.0% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (449 CVEs).

Media Mentions

Signals from CVEs in this product scope (449 CVEs).

Top CNAs Publishing CVEs For Icloud

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
6.9.117.81.4%00
5.2.118.82.2%00
13.017.81.4%00
11.518.82.1%00