CVE-2020-9882

CVE-2020-9882 involves a buffer overflow in processing a malicious USD file, fixed in Apple updates: iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8. Root cause: improved memory handling to address a memory-corruption risk. Affected products include Apple platforms listed above; ...

CVE-2023-40410

CVE-2023-40410 concerns an out-of-bounds read in macOS/iOS/watchOS/tvOS kernel-related handling, disclosed via improved input validation. The issue allows an app to disclose kernel memory and is addressed by updates across Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14,...

CVE-2023-42919

The linked records confirm CVE-2023-42919 is a privacy-related issue described as an improved private data redaction in log entries that could allow an app to access sensitive user data. Red Hat’s RH:CVE-2023-42919 entry reiterates the same description and lists affected platforms as Apple macOS ...

CVE-2024-40796

Technical details about CVE-2024-40796 are not publicly provided in the supplied documents; the materials reference the fix in Apple OS versions but do not describe root cause, affected components, or exploit information. Monitor for updates.

CVE-2024-44205

CVE-2024-44205 describes a privacy issue where a sandboxed app may access sensitive user data in system logs. The vendor-fixed versions are: macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, and iOS 17.6 and iPadOS 17.6. The NVD/NVD-derived entry notes ...

CVE-2024-54500

CVE-2024-54500 affects Apple platforms (iPadOS/iOS, macOS, watchOS, visionOS, tvOS) and is tied to processing a maliciously crafted image that could disclose process memory. The issue is addressed by Apple in iPadOS 18.2/iOS 18.2, macOS 14.7.2/Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7...

CVE-2024-54538

CVE-2024-54538 describes a denial‑of‑service vulnerability in Apple OS components resolved by improved input validation. A remote attacker could trigger a DoS. Affected and fixed versions per sources: visionOS 2.1; iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; tvOS 18.1; macOS Sonoma 14...

CVE-2025-24221

CVE-2025-24221 affects Apple devices and is addressed by patches in visionOS 2.4, iOS 18.4, iPadOS 18.4, and iPadOS 17.7.6. The root cause is improved data access restriction that prevents unauthorized exposure of keychain data in iOS backups. Impact is that sensitive keychain data may have been ...

CVE-2025-24283

CVE-2025-24283 describes a logging issue where sensitive user data could be exposed due to inadequate data redaction. The problem has been fixed in Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The CVE entry notes that an app may access sensitive user data as a res...

CVE-2025-30445

CVE-2025-30445 is a type-confusion vulnerability addressed by Apple across multiple platforms. The issue, triggered by local-network access, could cause an unexpected app termination and was fixed with improved checks. Affected products/versions include macOS Sequoia 15.4, macOS Ventura 13.7.5, m...

CVE-2026-20687

CVE-2026-20687 is a use-after-free memory issue that Apple fixed in multiple platforms: iOS 18.7.7 and iPadOS 18.7.7; iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5; macOS Tahoe 26.4; tvOS 26.4; and watchOS 26.4. The root cause is a memory-management defect that can lead to an app causing unexpec...

CVE-2026-43707

CVE-2026-43707 is a memory corruption vulnerability in WebKit that could cause an unexpected process crash when processing maliciously crafted web content. Apple fixed it in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerability is tied to memory handling in WebKit co...

CVE-2020-9901

CVE-2020-9901 – Apple platforms : An issue in the path validation logic for symbolic links allowed local privilege elevation. Apple fixed this by improved path sanitization, with patches in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and tvOS 13.4.8. The vulnerability is local and requires no ...

CVE-2020-9933

CVE-2020-9933 relates to an authorization issue in Apple’s GeoServices component that could allow a malicious app to read sensitive location information. The vulnerability affects multiple Apple platforms (iOS, iPadOS, tvOS, watchOS) and is addressed by state-management improvements, with patches...

CVE-2020-9958

CVE-2020-9958 is an Apple iOS/iPadOS vulnerability described as an out-of-bounds write that could cause an application to terminate unexpectedly or write to kernel memory. According to connected sources, the issue is addressed in iOS 14.0 and iPadOS 14.0, with Apple’s security content confirming ...

CVE-2020-9974

CVE-2020-9974 is a kernel-level logic issue in the XNU kernel that could allow a malicious app to determine kernel memory layout. Apple fixed it by improved state management, with patches in macOS Big Sur 11.0.1 and iOS/iPadOS 14.2 (as well as tvOS/watchOS updates per HT211930/HT211929).

CVE-2021-1877

Apple fixed an out-of-bounds read in the Kernel (iOS/iPadOS) with improved input validation, addressed in iOS 14.5 and iPadOS 14.5. A local user may have read kernel memory prior to patch. Affected component: Kernel on Apple devices; remediation: upgrade to 14.5 or later.

CVE-2021-30882

CVE-2021-30882 is a logic-issue vulnerability in Apple's FaceTime access flow. It could allow an app with microphone permission to unexpectedly access microphone input during a FaceTime call. Affected platforms: watchOS 8, iOS 15, and iPadOS 15; fix/mitigation: patches are in those OS versions. I...

CVE-2021-30923

CVE-2021-30923 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s advisory for macOS Monterey 12.0.1 fixes this issue by applying improved locking to the affected kernel/file-system pathways. The available connect...

CVE-2021-30985

CVE-2021-30985 is an out-of-bounds write in the IOMobileFrameBuffer component affecting Apple iOS/iPadOS. The issue could let a malicious app execute arbitrary code with kernel privileges and is mitigated by the vendor by memory/bounds checking improvements. Apple states this flaw is fixed in iOS...

CVE-2021-31000

CVE-2021-31000 is described in Apple security updates as a permissions issue that could allow a malicious app to read sensitive contact information. The Apple advisories (HT212978 for macOS Monterey 12.1 and related entries) tie this CVE to the Game Center component and note fixes in iOS 15.2/iPa...

CVE-2023-34352

CVE-2023-34352 concerns a permissions issue in Apple platforms where sensitive information (user account emails) could be leaked due to inadequate redaction. The issue is addressed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5, via enhanced redaction of sensitive data i...

CVE-2023-38596

CVE-2023-38596: Apple fixed a protocol handling issue that allowed an app to fail to enforce App Transport Security. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14. Root cause: insufficient protocol handling in CFNetwork/App Transport Security logic. Reme...

CVE-2023-40396

CVE-2023-40396 is an Apple-level memory-handling issue that could allow an app to execute arbitrary code with kernel privileges. The description consistently states that the fix involves improved memory handling and lists affected products/versions: iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS ...

CVE-2023-40420

CVE-2023-40420 affects Apple platforms where processing web content may cause a DoS due to a memory-handling issue. The entry states the vulnerability is fixed in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, and watchOS 10. Exp...

CVE-2023-41075

CVE-2023-41075 is a type-confusion vulnerability affecting Apple operating systems. The issue could allow an app to execute arbitrary code with kernel privileges due to a type confusion flaw, with a local attack vector and user interaction required. Affected product families and versions (as stat...

CVE-2024-23282

CVE-2024-23282 is an Apple iOS/macOS/iPadOS FaceTime-related vulnerability: a maliciously crafted email may initiate FaceTime calls without user authorization. Connected sources confirm remediation: Apple patches in macOS Sonoma 14.5, watchOS 10.5, iOS 17.5 and iPadOS 17.5, and older iOS/iPadOS v...

CVE-2024-27805

CVE-2024-27805 describes an issue where improved validation of environment variables prevents an app from accessing sensitive user data. Affected Apple platforms include macOS Ventura 13.6.7, macOS Monterey 12.7.5, macOS Sonoma 14.5, iOS 16.7.8 / 16.7.8, iPadOS 16.7.8 / 17.5, iOS 17.5, watchOS 10...

CVE-2024-27863

CVE-2024-27863 is an information-disclosure vulnerability in Apple’s kernel related to insufficient private data redaction in log entries. A local attacker could determine kernel memory layout. Apple has fixed the issue in iOS 17.6, iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS So...

CVE-2024-44273

CVE-2024-44273 concerns an issue in Apple OS handling of symlinks. Connected documents confirm that the vulnerability is fixed in iOS 18.1, iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The primary root cause is improved handling of symlinks, and the impact is that ...

CVE-2024-44302

CVE-2024-44302 affects Apple platforms: tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and visionOS 2.1. Issue stems from processing a maliciously crafted font, which may disclose process memory. Root cause described as ...

CVE-2025-24179

CVE-2025-24179 is tied to a null pointer dereference that Apple fixed by improving input validation. Affected products include iOS 18.3 and iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3, and tvOS 18.3. The vulnerability could allow an atta...

CVE-2025-24217

CVE-2025-24217 affects Apple platforms; fixed in iOS 18.4 / iPadOS 18.4 / tvOS 18.4 / macOS Sequoia 15.4. Description indicates an app may access sensitive user data; root cause details are not provided beyond note of improved redaction of sensitive information. Exploitation status is not disclos...

CVE-2025-31197

CVE-2025-31197 affects Apple AirPlay implementations across multiple Apple OSes (macOS, iOS, iPadOS, tvOS, visionOS). The vulnerability allows a local-network attacker to cause an unexpected app termination due to an issue corrected by improved input/state checks. Affected versions include macOS ...

CVE-2026-28990

CVE-2026-28990 involves a memory handling flaw that may allow memory corruption when processing a specially crafted image. Apple lists this as fixed in multiple devices: iOS 26.5 and iPadOS 26.5; macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5; tvOS 26.5; visionOS 26.5; and watchOS 26.5. The entr...

CVE-2026-43676

CVE-2026-43676 affects WebKit-related components used in Safari/WebKit on macOS Tahoe and iOS/iPadOS, with an out-of-bounds access issue addressed by improved bounds checking. The vulnerability leads to potential crashes when processing malicious web content, and is fixed in Safari 26.5.2 (and re...

CVE-2026-43807

The CVE-2026-43807 issue is a buffer overflow in MobileAccessoryUpdater addressed by improved bounds checking. Affected products include iOS 26.5.2 and iPadOS 26.5.2; macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.5.2; tvOS 26.6, visionOS 26.6, and watchOS 26.6. The vulnerability could cause unexp...

CVE-2019-8857

The CVE-2019-8857 issue concerns the Photos component in Apple iOS/iPadOS where Live Photo audio and video data could be shared via iCloud links even when Live Photo is disabled in the Share Sheet carousel. Root cause: insufficient validation during iCloud Link creation, leading to data exposure....

CVE-2020-27924

CVE-2020-27924 describes an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution when processing a malicious image. Apple confirms fixes across macOS Big Sur 11.1, Catalina 10.15.7 (Security Update 2020-001), Mojave 10.14.6 (Security Update 2020-007), mac...

CVE-2020-3873

CVE-2020-3873 is an Apple iOS/iPadOS vulnerability affecting the Mail component, tied to improper propagation of settings for loading remote content in messages. The issue could affect how mail previews handle remote content loading. It is addressed with a fix in iOS 13.3.1 and iPadOS 13.3.1, wit...

CVE-2020-3917

CVE-2020-3917 affects Apple platforms (iOS 13.4/iPadOS 13.4, tvOS 13.4, watchOS 6.2). A local application could use an SSH client via private frameworks due to an entitlement issue; Apple addressed this with a new entitlement and patched versions. Public references indicate the vulnerability is f...

CVE-2020-6147

Pixar OpenUSD 20.05 vulnerability CVE-2020-6147 involves heap overflow when parsing USDC binary sections with compression. Four compressed sections (FIELDS, FIELDSETS, PATHS, SPECS) can trigger overflows because allocated buffers depend on file-provided counts while read sizes come from the same ...

CVE-2020-9897

CVE-2020-9897 affects Apple platforms via CoreGraphics. It describes an out-of-bounds write triggered by processing a maliciously crafted PDF, leading to potential arbitrary code execution. Root cause identified as improper input validation in the PDF handling path. Affected products include iOS/...

CVE-2021-31005

CVE-2021-31005 is a logic issue in WebKit related to state management, enabling issues when Block all remote content is disabled. It is fixed in iOS 15/iPadOS 15 and macOS Monterey 12.0.1. Affected UI/web content handling is addressed; remediation is upgrading to the listed Apple OS versions (and...

CVE-2023-32376

The CVE-2023-32376 issue relates to Apple platforms (iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4) and specifically affects the StorageKit/File- system entitlements. A vulnerable path could allow an app to modify protected parts of the file system due to entitlement weaknesses...

CVE-2023-32415

CVE-2023-32415 relates to an issue in Apple's platform disclosures where an app could read sensitive location information. The connected sources confirm this affects iOS 16.5 and iPadOS 16.5, tvOS 16.5, and macOS Ventura 13.4, with the root cause described as insufficient redaction of location da...

CVE-2023-42870

CVE-2023-42870 describes a use-after-free vulnerability fixed via memory-management improvements. Affected platforms include Apple macOS Sonoma 14, iOS 17, and iPadOS 17. The issue could allow an app to execute arbitrary code with kernel privileges. Public documentation in the initial record cite...

CVE-2024-23228

Apple iOS 17.3 and iPadOS 17.3 fix a vulnerability in the Notes component where Locked Notes content may have been unexpectedly unlocked due to state-management issues. Affected products are iPhone and iPad models supporting iOS/iPadOS 17.3. Root cause: improved state management within Notes. Imp...

CVE-2024-44145

CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...

CVE-2025-46305

CVE-2025-46305 affects Apple platforms via a bounds-check issue that can be triggered by a malicous HID device, potentially causing an unexpected process crash. The fixed versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Taho...