CVE-2026-65347

CVE-2026-65347 affects the ImageIO framework on iOS and macOS. A crafted image could cause a denial-of-service via improved checks in iOS 26.6.1/iPadOS 26.6.1/macOS Tahoe 26.6.2. CVSS 6.5 (MEDIUM). No exploitation observed. Patch applies to devices running those OS versions.

CVE-2021-1852

CVE-2021-1852 relates to an out-of-bounds read in the Apple kernel exposed on iOS and iPadOS. The underlying issue was addressed by improved input validation, and patches were released in iOS 14.5 and iPadOS 14.5. A local user could potentially read kernel memory. Public documents from Apple and ...

CVE-2021-30898

CVE-2021-30898 (Apple iOS/iPadOS 15) describes an access issue fixed by additional sandbox restrictions on third‑party applications. A malicious app could access some of the user’s Apple ID information or recent in‑app search terms. Affects devices running iOS/iPadOS up to pre‑15, with the fix im...

CVE-2022-46724

CVE-2022-46724 concerns Apple iOS/iPadOS Magnifier: with physical access to a locked device, an attacker could view the last image used in Magnifier from the lock screen. The vulnerability affects iOS/iPadOS prior to 16.4 and was addressed in iOS 16.4 / iPadOS 16.4. The issue is mitigated by the ...

CVE-2024-40771

CVE-2024-40771: Apple iOS/iPadOS/macOS/watchOS/tvOS/visionOS kernel-privilege code execution vulnerability addressed by memory-handling improvements. Fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, visionOS 1.2, iOS 16.7.8 / iPadOS 16.7.8, iOS 17.5 / iPadOS 17.5, watchOS ...

CVE-2024-40806

CVE-2024-40806 is an out-of-bounds read in Apple components fixed via input validation. Affected products include macOS (Ventura 13.6.8, Monterey 12.7.6, Sonoma 14.6), iOS/iPadOS (16.7.9, 17.6), watchOS 10.6, tvOS 17.6, and visionOS 1.3. The issue can crash apps when processing a malicious file; ...

CVE-2024-44170

CVE-2024-44170 describes a privacy issue in Apple platforms where sensitive data was moved to a more secure location. Technical details across connected documents indicate the vulnerability affects iOS 18, iPadOS 18, watchOS 11, and macOS Sequoia 15, with the underlying impact being risk to user-...

CVE-2025-24111

CVE-2025-24111 is a memory corruption issue addressed by Apple. Apple’s advisories indicate the fix is included in macOS Sequoia 15.3, visionOS 2.3, iPadOS 17.7.7, watchOS 11.3, macOS Sonoma 14.7.5, iOS 18.3, iPadOS 18.3, tvOS 18.3 and macOS Ventura 13.7.5. The description notes an improved state...

CVE-2025-43421

CVE-2025-43421 affects WebKitGTK/WebKit2GTK (webkitgtk2/webkitgtk4) and is caused by issues around processing maliciously crafted web content that can lead to an unexpected process crash due to memory handling/array allocation sinking. Multiple advisories confirm the flaw and reference fixes in W...

CVE-2025-46299

CVE-2025-46299 affects Apple platforms including tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2, iPadOS 26.2, and macOS Tahoe 26.2. Description: a memory initialization issue was addressed by improved memory handling; processing malicious web content could disclose internal applica...

CVE-2026-43668

CVE-2026-43668 is a use-after-free vulnerability in Apple software that was fixed by memory-management improvements. It affects multiple Apple platforms (iOS, iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) across several versions, including iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPa...

CVE-2026-43804

CVE-2026-43804 affects Apple WebKit/Safari on macOS, iOS, iPadOS, visionOS, and macOS Tahoe. The issue is a state-management vulnerability that could allow visiting a malicious website to trigger an app denial-of-service. Apple patched this in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6,...

CVE-2026-64763

CVE-2026-64763 is an Apple vulnerability describing an out-of-bounds write that was mitigated by removing the vulnerable code. Affected products and versions include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. ...

CVE-2020-9917

CVE-2020-9917 affects Apple iOS/iPadOS prior to 13.6 in the WiFi component as listed in the CVE entry. The vulnerability led to a potential denial-of-service and was addressed with improved checks; Apple specifies the fix in iOS 13.6 and iPadOS 13.6. Connected sources also document Apple’s securi...

CVE-2020-9964

CVE-2020-9964 describes a memory initialization issue in iOS/iPadOS that could allow a local user to read kernel memory. Apple attributes the fix to iOS 14.0 and iPadOS 14.0 with improved memory handling. Connected sources corroborate the vulnerability as an Apple memory initialization/out-of-bou...

CVE-2021-1830

CVE-2021-1830 is an Apple iOS/iPadOS kernel issue: an out-of-bounds read that was addressed by improved input validation and is fixed in iOS 14.5 / iPadOS 14.5. A local user may read kernel memory. Affected components are kernel-related memory access paths within Apple’s platforms; exploitation d...

CVE-2021-30998

Summary of CVE-2021-30998 : Apple iOS and iPadOS were affected by a S/MIME handling issue where the sender’s email address could be leaked when using a certificate that contains multiple email addresses. The vulnerability is addressed by improved selection of the encryption certificate, with patc...

CVE-2021-31007

CVE-2021-31007 pertains to a permissions issue fixed in iOS/iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, and macOS Monterey 12.1. The Apple security content ties the vulnerability to the FileProvider component, describing that a malicious application may bypass Privacy preferences d...

CVE-2023-32438

CVE-2023-32438 concerns a privacy-bypass issue in Apple platforms. The vulnerability could allow an app to bypass Privacy preferences due to insufficient checks, with the issue fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. The impact is described as an unauthorize...

CVE-2023-38610

CVE-2023-38610 is a memory corruption vulnerability associated with Apple's Wi‑Fi component that could allow a local attacker to cause a crash or write kernel memory. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Connected sources ...

CVE-2023-41069

CVE-2023-41069 pertains to Apple Face ID anti-spoofing. A 3D model constructed to resemble the enrolled user could authenticate, exposing biometric security. Apple states this was addressed by improving Face ID anti-spoofing models and it is fixed in iOS 17 and iPadOS 17. The vulnerability affect...

CVE-2023-42865

CVE-2023-42865 affects Apple platforms (macOS Ventura 13.3, tvOS 16.4, iOS 16.4, iPadOS 16.4, watchOS 9.4). Description: an out-of-bounds read was addressed by improved input validation, with the impact described as potential disclosure of process memory when processing an image. Affected compone...

CVE-2024-40852

CVE-2024-40852 affects Apple iOS 18 and iPadOS 18. The issue arises in Assistive Access where an attacker could view recent photos without authentication. Apple’s security content indicates this was addressed by restricting options on a locked device, with the patch shipped in iOS 18/iPadOS 18. C...

CVE-2024-44202

CVE-2024-44202 affects Safari Private Browsing on Apple iOS 18 and iPadOS 18. It is described as an authentication issue where Private Browsing tabs could be accessed without authentication. Root cause cited as issues with state management and its remediation is described as resolved by improved ...

CVE-2024-44299

The CVE-2024-44299 entry affects Apple iOS 18.1 and iPadOS 18.1, with the fault located in DCP firmware. The vulnerability arises from insufficient bounds checks, which could allow an attacker to terminate the system unexpectedly or execute arbitrary code. Apple states the issue is fixed in iOS 1...

CVE-2024-54541

The CVE-2024-54541 entry affects Apple platforms and is addressed by patches in multiple OS updates. Affected products include macOS Ventura 13.7.2; macOS Sonoma 14.7.2; macOS Sequoia 15.2; visionOS 2.2; tvOS 18.2; watchOS 11.2; iOS 18.2; and iPadOS 18.2. Description indicates an app may access u...

CVE-2025-31208

CVE-2025-31208 affects multiple Apple operating systems. The issue, triggered during file parsing, may cause an unexpected app termination. It is fixed in iOS 18.5, iPadOS 18.5/17.7.7, macOS Sequoia 15.5, Sonoma 14.7.6, Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and watchOS 11.5. CVSS indicates a h...

CVE-2025-31212

CVE-2025-31212 is fixed in Apple platforms: watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The underlying issue is described as improved state management, with an app potentially accessing sensitive user data. The CVSS v3.1 vector indicates a Local attack wi...

CVE-2025-43347

CVE-2025-43347 affects Apple OS ecosystem and was addressed by removing the vulnerable code. The NVD entry states the fix is in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26, with an input validation issue also addressed. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields...

CVE-2025-43349

CVE-2025-43349 describes an out-of-bounds write in media processing that may cause an app to terminate when handling a malicious video file. The Apple security content lists affected components (e.g., CoreMedia and CoreAudio entries) and notes that the issue is fixed by updating to newer OS relea...

CVE-2026-20656

A logic issue in the Safari component could allow an app to access a user’s Safari history when visiting a specially crafted website. Affected platforms include Safari on macOS (Tahoe 26.3) and WebKit-based components, and iOS/iPadOS versions 18.7.5, plus Safari 26.3 for Apple devices. The root c...

CVE-2026-28883

CVE-2026-28883 affects Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) prior to 26.5. A use-after-free issue in processing web content led to an unexpected process crash. The root cause is described as memory management flaws addressed by the vendor’s update to version 26.5 ac...

CVE-2026-28979

Summary: CVE-2026-28979 describes an out-of-bounds access issue fixed by enhanced bounds checking. The vulnerability affects web content processing in Apple platforms and is addressed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Affected components (from provided docs): Sa...

CVE-2026-43780

CVE-2026-43780 affects Apple’s ImageIO component. An integer overflow was addressed via improved input validation, with patches in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Processing a maliciously crafted texture may...

CVE-2026-43822

CVE-2026-43822 describes a use-after-free issue that Apple fixed across multiple OS versions. Affected components involve memory management in the Apple stack, with the impact described as potential unexpected termination of apps or system components. The fixed versions reported are iOS 26.6 and ...

CVE-2026-64732

CVE-2026-64732 affects Apple iOS/iPadOS where an attacker with physical access could access sensitive user data during iPhone Mirroring. The issue was resolved by improved state management and is fixed in iOS 26.6 and iPadOS 26.6. Connected advisories corroborate that core Apple components addres...

CVE-2026-64771

CVE-2026-64771 involves a buffer overflow resolved by improved bounds checking. Affected software includes iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue could enable remote-induced app termination or heap corruption. Remediation is to updat...

CVE-2020-27925

CVE-2020-27925 affects CallKit in iOS 14.2 / iPadOS 14.2. An issue in handling incoming calls allowed a user to answer two calls simultaneously without indication. Root cause: inadequate state handling; fix implemented via additional state checks. Remediation: update to iOS 14.2 / iPadOS 14.2. CV...

CVE-2021-30997

CVE-2021-30997 concerns an S/MIME handling issue in iOS/iPadOS Mail where encrypted emails could disclose plaintext content. The Apple advisory and Red Hat/NVD entries indicate the vulnerability was mitigated by not automatically loading certain MIME parts, and Apple fixed it in iOS 15.2/iPadOS 1...

CVE-2023-42973

CVE-2023-42973 concerns Apple iOS and iPadOS Safari/private-browsing tabs. The issue allows accessing private browsing tabs without authentication, which is fixed in iOS 17 and iPadOS 17 through an improved UI. Affected component is Apple’s mobile OS/browser integration (Private Browsing/session ...

CVE-2024-44227

CVE-2024-44227 affects Apple platforms and is tied to memory handling implementations. The description indicates that an app may cause unexpected system termination or kernel memory corruption, with the root cause described as improved memory handling in the fix. The vulnerability is addressed in...

CVE-2024-44239

The CVE-2024-44239 entry describes an information-disclosure issue where private data in log entries could leak sensitive kernel state. It affects multiple Apple platforms and is fixed in specific versions: tvOS 18.1, iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; macOS Ventura 13.7.1 an...

CVE-2025-31234

CVE-2025-31234: The issue is fixed by OS updates (visionOS 2.5, iOS 18.5 / iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5) after improved input sanitization. The effect could be unexpected system termination or kernel memory corruption. Connected sources confirm updated platforms and published adviso...

CVE-2026-20665

CVE-2026-20665 involves Web content processing that could allow bypassing Content Security Policy enforcement. The issue affects multiple Apple platforms and WebKitGTK-based packages. Affected: Apple platforms (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) fixed in Safari 26.4, iOS 1...

CVE-2026-20667

CVE-2026-20667 is a logic‑issue in Apple platforms that could allow an app to break out of its sandbox. It is fixed in iOS/iPadOS 26.3, watchOS 26.3, and macOS updates: Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3. Connected sources confirm the root cause and affected products; exploitation status i...

CVE-2026-43709

CVE-2026-43709 affects WebKit-based components in Safari, iOS/iPadOS, and macOS Tahoe/macOS Tahoe builds. Description confirms a use-after-free vulnerability in memory handling that can cause a crash when processing malicious web content. Affected versions include Safari 26.5.2, iOS 26.5.2, iPadO...

CVE-2019-8779

This CVE (CVE-2019-8779) affects Apple iOS/iPadOS sandbox components, specifically third-party app extensions where incorrect sandbox restrictions were applied due to a logic issue. The issue is addressed in iOS 13.1.1 and iPadOS 13.1.1, which update the logic to enforce the correct restrictions....

CVE-2022-46710

CVE-2022-46710 covers a logic issue in iCloud Photo Library where Location data may be shared via iCloud links even if Location metadata is disabled in the Share Sheet. Affected: iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1 (and related Apple security content). Root cause: improper checks around...

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-40529

CVE-2023-40529: Apple iOS/iPadOS 17 fixed; the issue allowed a person with physical access to use VoiceOver to view private calendar information. The root cause is described as insufficient redaction of sensitive calendar data, addressed by improved redaction in the update. Affected: iOS 17 and i...