CVE-2022-32911

CVE-2022-32911 is an Apple macOS/kernel memory handling issue that could allow an app to execute arbitrary code with kernel privileges. It is fixed in macOS Monterey 12.6, iOS 15.7/iPadOS 15.7, iOS 16, and macOS Big Sur 11.7, per the CVE description and corroborating NASL/Apple security docs in t...

CVE-2024-23265

CVE-2024-23265 is a memory corruption vulnerability fixed by updated locking in macOS family. Affected products/versions include macOS Monterey 12.7.4 and later (Ventura 13.6.5, Sonoma 14.4), visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, and tvOS 17.4. The is...

CVE-2024-27808

CVE-2024-27808 : The vulnerability is in memory handling within WebKit technologies affecting multiple Apple platforms and WebKitGTK-based components. When processing web content, an attacker could trigger arbitrary code execution. The issue is addressed in: tvOS 17.5, visionOS 1.2, Safari 17.5, ...

CVE-2024-27838

CVE-2024-27838 describes a fingerprinting risk in WebKit-based components exposed by Apple platforms. The issue, triggered by visiting a malicious webpage, allows fingerprinting of the user. The CVE is fixed in multiple platforms and versions: tvOS 17.5; iOS 16.7.8 and iPadOS 16.7.8; visionOS 1.2...

CVE-2022-32824

The CVE-2022-32824 entry describes a kernel memory disclosure vulnerability. Affected Apple platforms include tvOS, iOS, iPadOS, and watchOS; the issue stems from memory handling weaknesses that could allow an app to disclose kernel memory. Apple lists fixes in tvOS 15.6, iOS 15.6, iPadOS 15.6, a...

CVE-2022-32839

The CVE-2022-32839 issue is resolved by improved bounds checks and affects multiple Apple platforms. Affects macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6, iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The vulnerability could allow a remote attacker to cause an...

CVE-2022-32883

CVE-2022-32883 describes a logic issue that allowed an app to read sensitive location information. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The issue is mitigated by applying the listed Apple OS updates; no exploitation status is provided beyon...

CVE-2024-23235

CVE-2024-23235 is a kernel race condition addressed by Apple with additional validation. It is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4/iPadOS 17.4, watchOS 10.4, and iOS 16.7.6/iPadOS 16.7.6 and tvOS 17.4. The affected impact is that an app may be able to access user-sensitive data. Th...

CVE-2026-64782

The vulnerability resides in the WebKit component of Apple platforms. A memory corruption issue was addressed with improved locking. Processing maliciously crafted web content may cause an unexpected Safari crash. Fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26...

CVE-2024-27851

CVE-2024-27851 affects Apple WebKit-based content processing. The issue arises from insufficient bounds checks in processing malicious web content, enabling arbitrary code execution. Official mitigation notes specify fixes across multiple Apple platforms, including tvOS 17.5, visionOS 1.2, Safari...

CVE-2024-40789

CVE-2024-40789 is a WebKitGTK/WebKit-related out-of-bounds access issue. The initial CVE description notes an out-of-bounds access that could cause an unexpected process crash when processing malicious web content, with fixes across Apple platforms (iOS, iPadOS, macOS, Safari, watchOS, tvOS, visi...

CVE-2020-9992

CVE-2020-9992 affects Apple's IDE Device Support in Xcode 12.0 and iOS/iPadOS 14 (paired-device remote debugging). The vulnerability allows an attacker in a privileged network position to execute arbitrary code on a paired device during a debug session over the network. Apple addressed this by en...

CVE-2021-30724

Technical details for CVE-2021-30724 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-30905

CVE-2021-30905 is an out-of-bounds read vulnerability fixed in Apple OS updates: iOS 15.1 / iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, and macOS Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information. Affected component is title-lis...

CVE-2021-30919

CVE-2021-30919: An out-of-bounds write in processing a maliciously crafted PDF may lead to arbitrary code execution. Affected components relate to Apple platforms including iOS/iPadOS, macOS, tvOS and watchOS. The issue was addressed by input validation improvements and is fixed in iOS 15.1/iPadO...

CVE-2022-32943

The CVE-2022-32943 issue affects Apple’s Photos component and is addressed in iOS 16.2 and iPadOS 16.2, and macOS Ventura 13.1. The root cause is described as an issue addressed with improved bounds checks, preventingShake-to-undo from resurfacing a deleted photo without authentication. In the pu...

CVE-2024-44244

CVE-2024-44244 is a memory corruption vulnerability in WebKitGTK/WebKit2GTK where processing maliciously crafted web content could cause an unexpected process crash. Public advisories across several distros confirm the issue and its fixed versions, including Debian webkit2gtk 2.46.3-1~deb11u2 and...

CVE-2026-65335

CVE-2026-65335 is a WebKit state-management flaw in Safari/iOS/iPadOS/macOS that causes an unexpected Safari crash when processing malicious web content. Fixed in Safari 26.6.1, iOS/iPadOS 18.7.10 and 26.6.1, and macOS Tahoe 26.6.2. No exploitation observed; CVSS 3.1 base score 4.3 (Medium).

CVE-2020-9789

CVE-2020-9789 is an out-of-bounds write issue in Apple image processing paths that was fixed by Apple in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and corresponding Windows/iCloud components. The vulnerability could allow arbitrary code execution when processing a ...

CVE-2021-30723

CVE-2021-30723 describes an information-disclosure bug where processing a malicious USD file could reveal memory contents due to an issue in state management. The vulnerability affects Apple platforms and is fixed in macOS Big Sur 11.4, macOS Catalina Security Update 2021-003, macOS Mojave Securi...

CVE-2024-40780

CVE-2024-40780 is an out-of-bounds read in WebKitGTK/webkit2gtk. The issue may cause a crash when processing malicious web content. Concrete details in connected sources show affected packages across distributions (Debian webkit2gtk, Fedora webkit2gtk, Debian DSA/DLA advisories, and Amazon Linux ...

CVE-2024-54468

CVE-2024-54468 affects Apple platforms and concerns a sandbox escape. The initial description notes: “An app may be able to break out of its sandbox,” and that the issue was addressed with improved checks. The fixed versions span multiple Apple OS families: macOS Ventura 13.7.2, macOS Sonoma 14.7...

CVE-2025-31206

The CVE-2025-31206 entry describes a type confusion issue in WebKit content processing that can cause an unexpected process crash. Connected advisories confirm this vulnerability affects WebKitGTK/WebKit-based components across multiple Linux distros (e.g., webkit2gtk) and related packages, with ...

CVE-2025-31251

CVE-2025-31251 affects Apple platforms (watchOS, macOS Sonoma, tvOS, iPadOS, iOS, macOS Sequoia, visionOS, macOS Ventura) where maliciously crafted media processing could lead to unexpected app termination or memory corruption. The vulnerability is addressed with fixes in specific updates: watchO...

CVE-2022-22653

CVE-2022-22653 corresponds to a logic issue in iOS/iPadOS that could allow a malicious website to access information about the user and their devices. The NVD/NIST entry notes the fix in iOS 15.4 and iPadOS 15.4, with CVSS v3.1 base score 7.5 (Network, High impact on confidentiality; no impact on...

CVE-2022-26714

CVE-2022-26714 is a memory corruption flaw addressed by Apple across multiple platforms (tvOS, iOS, iPadOS, watchOS, macOS). The issue involves improper validation that could allow an attacker to execute arbitrary code with kernel privileges. Affected software updates include tvOS/iOS/iPadOS 15.5...

CVE-2022-32837

CVE-2022-32837 is an Apple vulnerability addressed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The tvOS security content lists CVE-2022-32837 under Wi‑Fi indicating: an app may be able to cause unexpected system termination or write kernel memory. The base Apple advisories descri...

CVE-2022-32838

CVE-2022-32838 is a logic-issue vulnerability fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, and iOS/iPadOS 15.6. The issue could allow an app to read arbitrary files due to improved state management. These details come from connected documents that list th...

CVE-2023-40414

CVE-2023-40414 affects the WebKitGTK4 web rendering stack (GTK port). The connected advisories confirm a use-after-free in processing web content that could lead to arbitrary code execution. Affected package: webkitgtk4 (and related JS/debug variants) with fixes released as webkitgtk4 2.42.5-1.am...

CVE-2023-42956

CVE-2023-42956 is a WebKit/WebKitGTK memory-handling issue that may cause a denial-of-service when processing web content. The connected advisories confirm the vulnerability affects WebKitGTK/WebKit components and note fixes in Safari 17.2, iOS 17.2/iPadOS 17.2, and macOS Sonoma 14.2, with multip...

CVE-2024-40779

CVE-2024-40779 corresponds to an out-of-bounds read in WebKitGTK/WebKit2GTK. The issue is described as being mitigated by improved bounds checking and is fixed in various Apple OS components (e.g., iOS, iPadOS, macOS Sonoma), and is also acknowledged in Linux distributions via webkit2gtk advisori...

CVE-2026-65343

CVE-2026-65343 is a use-after-free vulnerability in the Kernel component of Apple's operating systems. A remote attacker may be able to cause unexpected system termination (denial of service). The issue was addressed with improved memory management. Fixed in iOS 26.6.1 , iPadOS 26.6.1 , and macOS...

CVE-2022-22652

CVE-2022-22652 affects Apple's iOS/iPadOS where the GSMA authentication panel could be shown on the lock screen, enabling a physically proximate user to view or modify carrier account information. The issue was mitigated by requiring device unlock to interact with the GSMA panel and is fixed in i...

CVE-2022-42829

CVE-2022-42829 is a use-after-free vulnerability in Apple platforms that was fixed with improved memory management. Public sources state the issue could allow an app with root privileges to execute arbitrary code with kernel privileges, affecting iOS and iPadOS (fixed in iOS 16.1 and iPadOS 16) a...

CVE-2022-42842

CVE-2022-42842 affects Apple platforms and is tied to a kernel memory handling issue that could allow remote code execution. The CVE is listed among Apple TV vulnerabilities in the Apple TV 16.2 and related macOS/iOS/watchOS updates as fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1...

CVE-2023-23519

The CVE-2023-23519 entry describes a memory corruption issue that affects Apple operating systems when processing images, as stated in multiple sources. Affected components are not enumerated beyond general OS updates, but the vulnerability is addressed by fixes in watchOS 9.3, tvOS 16.3, macOS V...

CVE-2023-32423

CVE-2023-32423 is a documented buffer overflow affecting Apple WebKit-derived environments, with a fixed patch set in macOS Ventura 13.4, iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, and Safari 16.5. The issue stems from improved memory handling during web content processing, and the resulting i...

CVE-2023-42866

CVE-2023-42866 affects Apple platforms (macOS, iOS/iPadOS, tvOS, Safari, watchOS) where processing web content could lead to arbitrary code execution. The issue is attributed to memory handling vulnerabilities and is fixed in macOS Ventura 13.5, iOS 16.6 / iPadOS 16.6, tvOS 16.6, Safari 16.6, and...

CVE-2024-1580

CVE-2024-1580: an integer overflow in the dav1d AV1 decoder can cause memory corruption when decoding large-frame videos. Upgrading past 1.4.0 is recommended. Debian reports fixes in bullseye 0.7.1-3+deb11u1 and bookworm 1.0.0-2+deb12u1. Apple advisories link CVE-2024-1580 to out-of-bounds write ...

CVE-2024-44191

CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...

CVE-2025-24113

CVE-2025-24113: A UI spoofing vulnerability in Safari/WebKit is fixed in Safari 18.4 and related OS updates (macOS Ventura/ Sonoma, iOS/iPadOS 18.3–18.4, visionOS, watchOS). Exploitation status is not detailed in the provided documents.

CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2021-30677

This CVE-2021-30677 describes a sandbox escape vulnerability in Apple platforms addressed by updated environment sanitization. Affected products include tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, and watchOS 7.5. The r...

CVE-2021-30704

CVE-2021-30704 is a logic issue related to improved state management that can allow an application to execute arbitrary code with kernel privileges. Affected software versions include tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Updates for Mojave/Catalina. T...

CVE-2021-30909

CVE-2021-30909 describes a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. The initial document indicates fixes in macOS Monterey 12.0.1 (and Security Update 2021-007 Catalina), iOS 15.1/iPadOS 15.1, iOS 14.8.1/iPadOS 14.8.1...

CVE-2022-22621

CVE-2022-22621 is an Apple issue affecting iOS/iPadOS/tvOS/watchOS/macOS where, with physical access to an iOS device, a user may see sensitive information via keyboard suggestions. The vulnerability stems from inadequate checks in the affected component (keyboard suggestions); it is mitigated by...

CVE-2022-42806

CVE-2022-42806 is a race-condition vulnerability that Apple fixed in iOS 16.1, iPadOS 16, and macOS Ventura 13. The issue could allow an app to execute arbitrary code with kernel privileges, and the NVD assessment indicates a local attack with high impact, requiring user interaction. Mitigation i...

CVE-2020-9999

CVE-2020-9999 is an Apple-specific memory corruption issue affecting multiple Apple platforms. Public documentation indicates that it can be triggered by processing a maliciously crafted text file, potentially leading to arbitrary code execution. The vulnerability is addressed in macOS Big Sur 11...

CVE-2021-30685

The CVE-2021-30685 issue concerns Apple platforms where parsing a maliciously crafted audio file may lead to disclosure of user information. Affected: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Root cause: improved checks addressed the is...

CVE-2021-30698

CVE-2021-30698 refers to a null pointer dereference in Apple software, addressed by improved input validation. Affected products include macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. The issue allows a remote attacker to cause a denial of service. The NVD reports CVSS v3.1 base sco...