CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2022-22640

CVE-2022-22640 is a memory corruption in Apple’s kernel that was mitigated by improved validation. The vulnerability is fixed in tvOS 15.4, iOS 15.4/iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The affected component is the Kernel, with the explicit impact described as arbitrary code execut...

CVE-2022-26738

CVE-2022-26738 describes an out-of-bounds write vulnerability that was addressed by Apple through bounds checking improvements. The issue could allow an affected application to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and ...

CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2022-42805

CVE-2022-42805 is an Apple-related vulnerability where an integer overflow occurred due to insufficient input validation. The issue could allow an app to execute arbitrary code with kernel privileges. Public references indicate fixes in iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The Red Hat ...

CVE-2022-42840

Technical details are not provided in the provided documents. The initial entry notes a memory handling fix affecting macOS/iOS versions but does not specify component, root cause, or remediation.

CVE-2023-23532

CVE-2023-23532 is an Apple vulnerability where a sandbox escape was addressed by Apple with improved checks. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS updates: iOS 16.4 and iPadOS 16.4, as well as iOS 15.7.6 and iPadOS 15.7.6. The description notes the fix involves enhanced valid...

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2026-64757

CVE-2026-64757 describes a memory corruption issue addressed by Apple through improved state management. The vulnerability affects multiple Apple platforms and applications, most notably Safari and WebKit components, with fixes in Safari 26.6 and OS updates for iOS 26.6, iPadOS 26.6, macOS Tahoe ...

CVE-2020-9794

CVE-2020-9794 is an out-of-bounds read that Apple fixed across multiple platforms. The advisory notes a malicious app could cause a denial of service or disclose memory contents. Affected/affected versions include iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and rela...

CVE-2021-1754

CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2021-30859

CVE-2021-30859 is a Kernel-type confusion vulnerability in Apple products. According to Apple advisories, it could allow a malicious application to execute arbitrary code with kernel/system privileges. The issue was addressed by Apple in macOS Big Sur 11.6 and Security Update 2021-005 Catalina, a...

CVE-2022-22599

CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...

CVE-2022-26701

The CVE-2022-26701 issue is a race condition that was mitigated by improved locking in Apple software. It affects Apple platforms across multiple OS lines and versions, with the fixed versions/recipients listed as tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The documented impact st...

CVE-2022-32787

CVE-2022-32787 is an out-of-bounds write vulnerability in how maliciously crafted web content is processed. Root cause: improved bounds checking fixes an out-of-bounds write that could lead to arbitrary code execution. Affected products/versions per the initial description are Apple platforms inc...

CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2024-23257

Technical details about CVE-2024-23257 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-31203

Apple fixed an integer overflow by improving input validation in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6/18.4, macOS Sonoma 14.7.5, watchOS 11.4, and visionOS 2.4. The issue could allow a local-network attacker to cause a denial-of-service. Affected products and versions are listed in the CV...

CVE-2020-29618

CVE-2020-29618 is an out-of-bounds read in ImageIO during processing of a malicious image, addressed by Apple with improved input validation. Vulnerable components include ImageIO across macOS Big Sur 11.1, tvOS 14.3, iOS 14.3 / iPadOS 14.3, watchOS 7.2, and iCloud for Windows 12.0. The issue can...

CVE-2020-3870

CVE-2020-3870 relates to an out-of-bounds read in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple fixed this via input-validation improvements and OS updates including iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6...

CVE-2020-9839

CVE-2020-9839 is a race-condition vulnerability across Apple platforms that was fixed by state-handling improvements. Public details show impact as potential privilege escalation. Fixes were released in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, with System Preferenc...

CVE-2020-9876

CVE-2020-9876 is an out-of-bounds write in Apple's ImageIO component that can be triggered by processing a malicious PDF. Affected products include macOS/iOSwatch/tvOS/watchOS families via ImageIO, and Windows (iCloud for Windows, iTunes for Windows) and tvOS updates. Public details in connected ...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2021-30847

CVE-2021-30847 affects Apple ImageIO on Windows (via iCloud for Windows 13). The vulnerability is a memory corruption issue triggered by processing a malicious image, leading to arbitrary code execution. Apple’s advisory lists the fix as part of iCloud for Windows 13 security content (HT212953) w...

CVE-2022-22593

Technical details about CVE-2022-22593 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes beyond the initial description are disclosed. Monitor for updates.

CVE-2022-22667

CVE-2022-22667 (Apple GPU Drivers) is a use-after-free memory corruption issue that could allow arbitrary code execution with kernel privileges. The vulnerability is fixed in iOS 15.4 / iPadOS 15.4; exploitation requires authenticated access. Affected component: GPU Drivers. Remediation: update t...

CVE-2022-32814

CVE-2022-32814 describes a type confusion issue that Apple fixed via updated state handling. The NVD entry states the vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms and versions for the fix are: watchOS 8.7, tvOS 15.6, iOS 15.6 and iPad...

CVE-2022-46701

CVE-2022-46701 affects Apple TV 4K/HD running tvOS and was mitigated in tvOS 16.2. The Apple TV security content documents a Kernel bound-checks issue: “Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.” This is the root cause and impact described i...

CVE-2023-23511

CVE-2023-23511 concerns a memory-handling issue in Apple platforms that could allow bypass of Privacy preferences. The CVE is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, and watchOS 9.3. Affected component details and root cause are described as improv...

CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2026-65329

CVE-2026-65329 affects the Telephony framework on iOS 26.6.1/iPadOS 26.6.1 (iPhone 11+), where an authentication issue in IPSec state management allowed a privileged-network-position attacker to bypass IPSec authentication and intercept network traffic; fixed via improved state management. No exp...

CVE-2026-65338

CVE-2026-65338 is a memory handling vulnerability in WebKit , the browser engine powering Safari. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed with improved memory handling (WebKit Bugzilla 318348). Affected product...

CVE-2021-30687

CVE-2021-30687 is an out-of-bounds read vulnerability in Apple platforms triggered by processing a maliciously crafted image, leading to potential disclosure of user information. Affected software includes tvOS 14.6; Security Updates 2021-004 Mojave; iOS 14.6 and iPadOS 14.6; Security Update 2021...

CVE-2021-30710

CVE-2021-30710 describes a memory corruption issue in Apple platforms that is mitigated by updated state management. The vulnerability affects tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious ...

CVE-2021-30881

CVE-2021-30881 is an Apple vulnerability where unpacking a maliciously crafted archive could lead to arbitrary code execution due to an input validation/memory handling issue. Publicly disclosed remediation lists fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Securi...

CVE-2021-30911

CVE-2021-30911 describes an out-of-bounds read caused by insufficient bounds checking when processing a maliciously crafted USD file. Impact: potentially disclosing memory contents. Affected platforms and fixed versions include macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an...

CVE-2021-30916

CVE-2021-30916 is a memory corruption vulnerability in Apple’s Kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The initial description notes fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, Security Update 2021-007 Catalina,...

CVE-2022-22635

CVE-2022-22635 is an out-of-bounds write in AVEVideoEncoder. Apple fixes it in tvOS 15.4, iOS 15.4, and iPadOS 15.4, with the impact described as an app potentially gaining elevated privileges. Affected product/component: AVEVideoEncoder (Apple TV/iOS/iPadOS stack). Root cause: out-of-bounds writ...

CVE-2022-32793

CVE-2022-32793 refers to multiple out-of-bounds write issues in Apple GPU drivers that could lead to kernel memory disclosure. The connected Apple advisory notes these issues affect GPU Drivers and are fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The CVSS base s...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2023-23535

CVE-2023-23535 affects Apple operating systems, with the vulnerability in ImageIO-related memory handling that may cause disclosure of process memory when processing a malicious image. Affected products/versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 15.7.4/i...

CVE-2023-23537

CVE-2023-23537 affects Apple platforms via a privacy issue where log entries could reveal sensitive location data. The vulnerability is fixed by Apple in: macOS Ventura 13.3, iOS 16.4/iPadOS 16.4, iOS 15.7.4/iPadOS 15.7.4, watchOS 9.4, and macOS Big Sur 11.7.5. Root cause (as described) is improv...

CVE-2023-40391

CVE-2023-40391 affects Apple platforms with a memory handling issue that may allow an app to disclose kernel memory. Publicly documented fixes apply to tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14 (and Xcode 15). No exploitation status is stated in the provided sources. The vulnerability is ad...

CVE-2025-31214

CVE-2025-31214 is an Apple vulnerability affecting iOS 18.5 and iPadOS 18.5. The issue stems from improper state management and is fixed in the 18.5 releases. An attacker connected to a privileged network could intercept network traffic due to this flaw. The NVD description confirms the fix and s...

CVE-2026-43722

CVE-2026-43722 affects Apple OS components (kernel) on macOS Tahoe and related iOS/iPadOS versions. The issue could allow an app to leak sensitive kernel state via malicious content processed locally; attack vector is local with required user interaction and no privileges, and exploitation status...

CVE-2021-1815

CVE-2021-1815 is a path-traversal vulnerability in macOS Big Sur and related Apple platforms caused by a parsing issue in directory path handling. A local user could modify protected parts of the file system. The fixed versions include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4 and tv...

CVE-2021-1885

CVE-2021-1885 affects Apple platforms: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. It is an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution. The issue was addressed by improved bounds checking and is fixed in the listed OS ...