CVE-2020-27899

CVE-2020-27899 describes a use-after-free vulnerability that was addressed with improved memory management. The issue could allow a local attacker to elevate privileges. Apple confirms fixes in multiple platforms and releases: iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, and tvOS ...

CVE-2020-9863

CVE-2020-9863 affects Apple platforms (iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8). Description: a memory initialization issue was fixed via improved memory handling; impact: an application may execute arbitrary code with kernel privileges. Mitigation: apply the Appl...

CVE-2020-9868

CVE-2020-9868: A certificate validation issue occurred when processing administrator-added certificates on Apple platforms. The root cause is a validation flaw that could allow impersonation of a trusted website via shared key material associated with an administrator-added certificate. Affected ...

CVE-2020-9888

CVE-2020-9888 affects Apple OS components handling audio on iOS/iPadOS, macOS, tvOS, and watchOS. The root cause is an out-of-bounds read vulnerability in audio processing, mitigated by improved bounds checking. Impact described as potential arbitrary code execution when processing a maliciously ...

CVE-2020-9944

CVE-2020-9944: An out-of-bounds read in certain Apple media components was addressed by improved bounds checking. Affected: macOS Big Sur 11.0.1 and prior; affected watchOS 7.0, tvOS 14.0, iOS 14.0, and iPadOS 14.0. Impact (as stated): an application may be able to read restricted memory. Public ...

CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...

CVE-2021-1867

CVE-2021-1867 is an out-of-bounds read that was mitigated by improved input validation. Affected: iOS 14.5, iPadOS 14.5, macOS Big Sur 11.3. Impact described as potential arbitrary code execution with kernel privileges by a malicious app. Mitigation: upgrade to iOS/iPadOS 14.5 or later, macOS Big...

CVE-2021-30664

CVE-2021-30664 is an Apple-core vulnerability affecting CoreAudio on macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The issue is an out-of-bounds write that is triggered when processing a maliciously crafted file, with the potential to execute arbitrary code. The fixed ver...

CVE-2021-30810

CVE-2021-30810: An authorization issue in Apple's Wi-Fi subsystem was fixed via improved state management. A nearby attacker could coerce a user into a malicious Wi-Fi network during device setup. Affected platforms include iOS 15/iPadOS 15, watchOS 8, and tvOS 15; patch available in those updates.

CVE-2021-30863

CVE-2021-30863 affects devices with Face ID. The issue describes a spoofing risk where a 3D model resembling the enrolled user may authenticate via Face ID. Apple fixed the vulnerability in iOS 15 and iPadOS 15 by improving Face ID anti-spoofing models. Public-facing details in the connected sour...

CVE-2021-30867

The CVE-2021-30867 issue affects Apple iOS/iPadOS and was addressed in iOS 15 / iPadOS 15. A malicious application could access photo metadata without requiring permission to access photos due to an authentication flaw. Apple states the vulnerability was fixed by improved authentication. Public r...

CVE-2021-30874

CVE-2021-30874 affects Apple iOS/iPadOS 15 where an authorization issue in NetworkExtension could allow a VPN configuration to be installed by an app without user permission. Root cause cited as improved state management; fix implemented in iOS 15 / iPadOS 15. Implication: local apps may cause VP...

CVE-2022-32939

CVE-2022-32939 is Apple iOS/iPadOS graphics driver kernel‑level vulnerability. The issue allowed an app to execute arbitrary code with kernel privileges due to bounds checking improvements. Apple patched it in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16. The Nessus/NVD entries corroborate the...

CVE-2023-28191

CVE-2023-28191 describes a privacy bypass vulnerability where an app may bypass Privacy preferences. The issue affects Apple platforms across multiple releases and was addressed with improved redaction of sensitive information. The fixed versions are: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, m...

CVE-2023-32385

CVE-2023-32385 affects Apple’s PDFKit on iOS 16.5/iPadOS 16.5 and macOS Ventura 13.4. The issue is described as a denial-of-service caused by a PDF file opening that may lead to the application terminating unexpectedly, with the underlying fix being improved memory handling. Connected sources con...

CVE-2023-41071

CVE-2023-41071 is a use-after-free vulnerability in Apple’s kernel-related components that can allow an app to execute arbitrary code with kernel privileges. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Ventura 13.6. The issue is addressed through improved memory...

CVE-2023-41980

CVE-2023-41980 describes a permissions issue that could allow an app to bypass Privacy preferences. Public details confirm impact on Apple platforms including iOS 17, iPadOS 17, and macOS Sonoma 14, with the issue fixed in those releases. The vulnerability is tracked across multiple Apple advisor...

CVE-2023-42937

CVE-2023-42937 describes a privacy issue in Apple platforms where private data redaction in log entries could allow an app to access sensitive user data. Root cause: inadequate redaction during logging. Affected products/versions include iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 1...

CVE-2024-27801

CVE-2024-27801 is an Apple vulnerability reported across multiple Apple OSes and components. It enables local privilege escalation and is stated as fixed in tvOS 17.5, visionOS 1.2, iOS 17.5, iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Connected Apple advisories note affected components inc...

CVE-2024-44234

CVE-2024-44234 affects multiple Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS). The issue stems from improper bounds checks when parsing a maliciously crafted video file, which may lead to an unexpected system termination (crash). The vulnerability is fixed in: iOS 17.7.1 / iPadOS 17.7....

CVE-2024-44269

CVE-2024-44269 involves a logic issue in Apple platforms where a malicious app could use Shortcuts to access restricted files. The issue is addressed by improved checks and is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1,...

CVE-2024-44276

CVE-2024-44276 affects Apple's Passwords feature in iOS/iPadOS. A privileged network position could leak sensitive information due to sending information over HTTP instead of HTTPS. The issue is fixed in iOS 18.2 and iPadOS 18.2. Root cause: unencrypted network requests (logos/icons and password-...

CVE-2024-44290

CVE-2024-44290 affects Apple platforms and is described as a location-privacy issue. The vulnerability is addressed in iOS 18.1, iPadOS 18.1, and watchOS 11.1; installing these updates resolves the issue. The public description indicates an app could determine a user’s current location. The CVSS ...

CVE-2024-54535

Affected product: Apple Vision Pro (calendar feature). Issue: a path handling vulnerability could allow an attacker with access to calendar data to read reminders. Root cause: path handling logic was reworked with improved validation. Affected OS updates and patches: watchOS 11.1, visionOS 2.1, i...

CVE-2025-24270

CVE-2025-24270 affects Apple devices via AirPlay. The issue could allow an attacker on the local network to leak sensitive user information. Apple addresses this by removing the vulnerable code, with fixes shipped in macOS Sonoma 14.7.5 and earlier macOS versions, macOS Sequoia 15.4, tvOS 18.4, i...

CVE-2025-30469

CVE-2025-30469 concerns a lock-screen photo exposure on iOS devices. The public description states that the issue was addressed through improved state management and is fixed in iOS 18.4 and iPadOS 18.4 . The vulnerability allows a person with physical access to an iOS device to potentially view ...

CVE-2025-31235

CVE-2025-31235 is a local, memory‑corruption issue in Apple’s coreaudiod where a double‑free leads to an out‑of‑bounds or invalid dereference chain. The connected Google Project Zero write‑up explicates exploitation context for CVE-2025-31235 in coreaudiod alongside CVE-2024-54529, detailing how ...

CVE-2026-20673

CVE-2026-20673 is a logic-issue vulnerability in Apple Mail that is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4, and iOS/iPadOS 18.7.5. The issue centers on improved checks in the Mail component; turning off “Load remote content in messages” may not apply to all mail prev...

CVE-2026-28918

CVE-2026-28918 describes an out-of-bounds access issue fixed by improved bounds checking across Apple platforms (iOS/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). The vulnerability arises when parsing a malicious file, which could lead to an unexpected app termination. A...

CVE-2026-43712

CVE-2026-43712 concerns a memory handling issue that could cause an unexpected process crash when processing maliciously crafted web content. According to the provided sources, Apple platforms fix this with Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The CVE is tied to impro...

CVE-2026-43717

The CVE-2026-43717 entry describes a use-after-free in Safari related to processing malicious web content. Affected products are Safari across macOS and iOS/iPadOS, with fixed versions Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Root cause stated as improved memory managemen...

CVE-2026-43803

CVE-2026-43803 is an out-of-bounds write vulnerability in CoreAudio that Apple fixed in watchOS 26.6 (also addressed in iOS/iPadOS/macOS/tvOS/visionOS 26.6 and later). The watchOS entry notes an issue could allow a remote attacker to cause unexpected system termination; remediation is applying th...

CVE-2020-10011

CVE-2020-10011: An out-of-bounds read vulnerability was fixed by improved bounds checking when processing a maliciously crafted USD file. Affected platforms include iOS 14.2, iPadOS 14.2, macOS Catalina 10.15.7, and Security Update 2020-005 for High Sierra and Mojave. Exploitation could lead to u...

CVE-2020-27926

CVE-2020-27926 relates to a use-after-free in processing malicious web content, with Apple confirming a memory-management fix in iOS 14.2 and iPadOS 14.2. The Apple-HT211929 entry lists affected areas (Audio/CoreAudio/FontParser/WebKit/XNU) and notes that exploitation could lead to arbitrary code...

CVE-2020-9795

CVE-2020-9795 is a kernel-use-after-free vulnerability in Apple OS components causing potential arbitrary code execution with kernel privileges. Affected: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Root cause: use-after-free leading to memory corruption; fixes were relea...

CVE-2020-9808

CVE-2020-9808 is a memory corruption issue addressed by Apple across multiple OS updates. The vulnerability was mitigated by improved state management and is fixed in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. The public description notes that an affected applic...

CVE-2020-9830

CVE-2020-9830 is a memory corruption vulnerability in Apple OS components that could allow a local attacker to execute arbitrary code with kernel privileges. It is fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5. Affected products include macOS Catalina (and related Apple OS versions l...

CVE-2020-9920

CVE-2020-9920 describes a path handling issue in Apple Mail that could allow a malicious mail server to overwrite arbitrary mail files. The issue is fixed by Apple in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8, addressing improper validation of mail file handling. NVD metada...

CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30656

CVE-2021-30656 describes a local access issue in Apple devices where memory management weaknesses could allow a malicious app to determine the kernel memory layout. The vulnerability is tied to Apple's iOS/iPadOS kernel components and is mitigated by updates in iOS 14.5 and iPadOS 14.5. Multiple ...

CVE-2021-30674

CVE-2021-30674 is an Apple kernel memory-disclosure issue disclosed by Apple as fixed in iOS 14.6 / iPadOS 14.6. The CVE entry states that a malicious application may disclose restricted memory, and Apple’s advisory confirms the fix was implemented via improved checks. Connected sources corrobora...

CVE-2021-30753

CVE-2021-30753 affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). Root cause: out-of-bounds read in font handling (FontParser/CoreText) due to malformed font input. Impact: potential disclosure of process memory. Fix: addressed in the listed OS updates wi...

CVE-2021-30932

CVE-2021-30932 is fixed in iOS 15.2 and iPadOS 15.2. The issue allowed a person with physical access to an iOS device to access contacts from the lock screen due to improved permissions logic. The vulnerability affects iPhone and iPad platforms covered by the Apple security content. The connected...

CVE-2022-32927

CVE-2022-32927 affects Apple iOS/iPadOS devices and relates to a memory handling weakness in the Wi‑Fi path that can cause a denial-of-service of the Settings app when joining a malicious Wi‑Fi network. The issue is fixed in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16.0+. Affected components ...

CVE-2022-48610

CVE-2022-48610 affects Apple platforms where state management flaws could let an app access user‑sensitive data. The issue is mitigated by the macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2 updates, which address the root cause described as improved state management. Affected component...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2024-23251

CVE-2024-23251 is an authentication issue in Apple’s Mail that could allow leakage of Mail account credentials when an attacker has physical access. The public description states the issue was fixed via improved state management and lists affected platforms and patches: macOS Sonoma 14.5, iOS 17....

CVE-2024-27828

CVE-2024-27828 describes a memory-handling issue in Apple OS components that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed with patches in visionOS 1.2, watchOS 10.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. The available description indicates a l...

CVE-2024-40777

CVE-2024-40777 describes an out-of-bounds access issue that Apple fixed by improving bounds checking. The vulnerability is addressed in multiple Apple platforms: iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS Sonoma 14.6. Technical detail in the description indicates t...

CVE-2024-40795

CVE-2024-40795 affects Apple platforms where an app may be able to read sensitive location information. The issue was addressed with improved data protection and is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and tvOS 17.6. The NVD entry shows a low 3.3 CVSS due to local acce...