Ipod Touch

Vendor:

First CVE: Oct 14, 2007 · Active for 18 years

58

Total CVEs

More Total CVEs than 98% of tracked products

9.7

Avg CVEs / Year

Higher CVE frequency than 95% of tracked products

6.1

Avg CVSS

Higher Avg CVSS than 21% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ipod Touch over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 14, 2007

18 years ago

Most Recent CVE

Aug 7, 2012

5,099 days ago

CVE Severity & Scoring

Ipod Touch58 CVEs

14%

59%

28%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown58 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown58 (100.0%)

User Interaction

None0 (0.0%)

Unknown58 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown58 (100.0%)

Top CVEs

Signals from CVEs in this product scope (58 CVEs).

58 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-2303HIGH Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or cause a denial of service (application	Jul 14, 2008	10.0	41	NO	YES
CVE-2010-1813MEDIUM WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)	Sep 9, 2010	6.8	36	NO	YES
CVE-2009-1698HIGH WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sh	Jun 10, 2009	9.3	34	NO	NO
CVE-2007-5450HIGH Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service (application crash), an	Oct 14, 2007	9.3	34	NO	YES
CVE-2009-1725HIGH WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit)	Jul 9, 2009	9.3	33	NO	NO
CVE-2010-2973MEDIUM Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSu	Aug 5, 2010	6.9	31	NO	YES
CVE-2010-1809HIGH The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, wh	Sep 9, 2010	10.0	30	NO	NO
CVE-2009-1724MEDIUM Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows	Jul 9, 2009	4.3	29	NO	YES
CVE-2010-1387HIGH Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to exec	Jun 18, 2010	9.3	28	NO	NO
CVE-2009-1701HIGH Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1	Jun 10, 2009	9.3	28	NO	NO

View all 58 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (58 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

7 CVEs

12.1% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (58 CVEs).

Media Mentions

Signals from CVEs in this product scope (58 CVEs).

Top CNAs Publishing CVEs For Ipod Touch

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2.0.2	2	8.2	3.9%	0
2.0.1	2	8.2	3.9%	0
2.0	3	7.1	5.0%	1
1.1.4	2	7.2	6.5%	1
1.1.3	1	9.3	5.9%	0
1.1.2	1	9.3	5.9%	0
1.1.1	1	9.3	5.9%	0
1.1	1	9.3	5.9%	0