CVE-2024-40833

CVE-2024-40833 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8, and iOS/iPadOS 16.7.9. The issue allows a Shortcut to access sensitive data from certain actions without user prompts. The description notes improved checks as the fix. ...

CVE-2024-40867

The CVE-2024-40867 issue is an Apple-specific Web content sandbox breakout risk caused by a custom URL scheme handling flaw. Affected products are iOS 18.1 and iPadOS 18.1; Apple fixed the issue in these releases through improved input validation. The vulnerability affects the WebKit/Web content ...

CVE-2024-44158

Apple CVE-2024-44158 concerns a flaw where a shortcut could output sensitive user data without consent. The public description cites fixes in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue appears to be addressed by improved redaction of sensitive...

CVE-2024-54558

CVE-2024-54558 describes a clickjacking issue related to out-of-process view handling. The flaw could allow an app to trick a user into granting access to the Photos Library. It affects Apple platforms and is fixed in macOS Sequoia 15, iOS 18, and iPadOS 18. The CVE’s base metrics show a low seve...

CVE-2025-31196

CVE-2025-31196 describes an out-of-bounds read mitigated by improved input validation. The issue can be triggered by processing a maliciously crafted file, potentially causing a denial-of-service or memory contents disclosure. Affected products: Apple iPadOS, macOS (Ventura 13.7.6, Sonoma 14.7.6)...

CVE-2025-43346

CVE-2025-43346 is an out-of-bounds access vulnerability addressed by improved bounds checking. It affects Apple platforms as specified in the sources: tvOS 26, watchOS 26, iOS 26, iPadOS 26, visionOS 26, and iOS 18.7 / iPadOS 18.7. The underlying cause is insufficient boundary checking when proce...

CVE-2026-20615

CVE-2026-20615 is a path-handling vulnerability described across multiple sources as fixed by Apple in iOS 26.3/iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. The issue, reported in CoreServices (path validation), could allow an app to gain root privileges due to improper ...

CVE-2026-20642

CVE-2026-20642 is an input validation vulnerability fixed in iOS 26.3 and iPadOS 26.3. The issue could let a person with physical access to an iOS device access photos from the lock screen. Affected software: iOS and iPadOS (prior to 26.3). Root cause: input validation weakness enabling exposure ...

CVE-2026-20665

CVE-2026-20665 involves Web content processing that could allow bypassing Content Security Policy enforcement. The issue affects multiple Apple platforms and WebKitGTK-based packages. Affected: Apple platforms (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) fixed in Safari 26.4, iOS 1...

CVE-2026-43668

CVE-2026-43668 is a use-after-free vulnerability in Apple software that was fixed by memory-management improvements. It affects multiple Apple platforms (iOS, iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) across several versions, including iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPa...

CVE-2026-43805

CVE-2026-43805 is a race-condition vulnerability in Apple OS components addressed by updates. Affected products include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6. Root cause: improved state handling to fix a race condition that could enable an ...

CVE-2026-64725

CVE-2026-64725 is an out-of-bounds write vulnerability addressed by Apple in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises from insufficient bounds checking and may allow an app to trigger a deni...

CVE-2020-9931

CVE-2020-9931 is an Apple Bluetooth vulnerability affecting iOS/iPadOS that allows a remote attacker to cause a denial of service. The issue stems from an input-validation deficit in Bluetooth handling, and Apple fixed it in iOS 13.6 and iPadOS 13.6. Connected documents also reference Apple’s HT2...

CVE-2021-1862

CVE-2021-1862 describes an information-disclosure issue on Apple devices where a person with physical access could potentially access contacts via Siri search. The vulnerability affects iOS and iPadOS prior to 14.5 and is addressed in iOS 14.5 / iPadOS 14.5 with improved logic for Siri search acc...

CVE-2023-28208

CVE-2023-28208 describes a logic issue in Apple platforms where a user could send a text from a secondary eSIM even when a contact was configured to use the primary eSIM. Affected: macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. Impact: potential unauthorized text sending within Messages; CVSS v3....

CVE-2023-40456

CVE-2023-40456 affects Apple platforms (tvOS, iOS, iPadOS, watchOS) where an app may access edited photos saved to a temporary directory due to inadequate access checks. Root cause: insufficient checks in Photos Storage. Impact: potential exposure of edited photos in a temp directory. Mitigation:...

CVE-2024-44217

CVE-2024-44217 concerns a permissions issue related to password autofill that could occur after a failed authentication attempt. Apple has addressed this vulnerability by removing vulnerable code and adding additional checks, with fixes published in iOS 18 and iPadOS 18. Related Red Hat and other...

CVE-2024-44277

CVE-2024-44277 affects Apple iOS family components where memory handling vulnerability may allow an app to trigger unexpected system termination or corrupt kernel memory. According to connected sources, the issue is addressed in iOS 18.1, iPadOS 18.1, visionOS 2.1, and tvOS 18.1, with fixed memor...

CVE-2024-54488

CVE-2024-54488 is an Apple logic-issue vulnerability in file handling that allows viewing photos in the Hidden Photos Album without authentication. Affected products include macOS Ventura 13.7.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2 (also iPadOS 17.7.3). Root cause p...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

CVE-2025-43436

CVE-2025-43436 is a permissions issue affecting Apple OS components (notably CoreServices) where an app may enumerate a user’s installed apps. The connected Nessus entry for Apple TV (and related Apple platforms) confirms CoreServices involvement and ties the CVE to an exposure of installed apps....

CVE-2026-20644

CVE-2026-20644 affects WebKit/Web content handling in Apple platforms. The issue, described as a memory handling problem, could cause an unexpected process crash when processing maliciously crafted web content. It is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS ...

CVE-2026-43744

CVE-2026-43744 describes an out-of-bounds write in CoreAudio when processing an audio stream from a maliciously crafted media file. The issue is addressed in Apple's security updates: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and...

CVE-2022-43454

CVE-2022-43454 describes a double-free condition that affects Apple systems where memory management improvements fix the issue. Affected is Apple platforms’ kernel-level handling, with the vulnerability fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. The advisory s...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-44126

CVE-2024-44126 affects Apple ARKit components on macOS and iOS family. The vulnerability allows processing a maliciously crafted file to trigger a heap corruption, with potential impact across confidentiality, integrity, and availability as described in the CVE metrics. Apple’s advisories indicat...

CVE-2025-31220

CVE-2025-31220 concerns a privacy issue that allowed a malicious app with local access to read sensitive location information. It is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, and macOS Ventura 13.7.6. Affected component/behavior: privacy-related data handling; root cause de...

CVE-2025-43534

The CVE-2025-43534 issue is a path-handling flaw in iOS/iPadOS that was addressed by validation improvements. It affects iOS 18.7.7 and iPadOS 18.7.7, as well as iOS 26.2 and iPadOS 26.2, where a user with physical access could potentially bypass Activation Lock. The available connected sources c...

CVE-2026-28871

CVE-2026-28871 is a logic issue that can enable cross-site scripting when visiting a malicious website. The vulnerability is fixed in Apple platforms: Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, and macOS Tahoe 26.4. Related Nessus/OpenVAS entries confirm affected WebKit/...

CVE-2026-43711

CVE-2026-43711 describes a memory corruption vulnerability in processing a maliciously crafted video file. Apple lists fixed versions across multiple platforms: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The i...

CVE-2026-43769

Summary of CVE-2026-43769 : An integer overflow was addressed via improved input validation. Affected Apple platforms and fixed versions include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue could allow an app t...

CVE-2026-64729

Technical details for CVE-2026-64729 are not publicly provided in the connected documents. Monitor for updates; the initial description lists a use-after-free issue fixed in 26.6 across Apple OSes.

CVE-2021-1812

Apple CVE-2021-1812 is an Apple CoreMotion logic issue fixed in iOS 14.5/iPadOS 14.5 that could allow a malicious app to execute arbitrary code with system privileges. Affected product: Apple iOS/iPadOS devices; root cause described as improved validation. Exploitation details are not provided in...

CVE-2021-1833

CVE-2021-1833 affects Apple iOS/iPadOS. The issue stems from permission checking/filtering that could allow an application to gain elevated privileges. Apple patched this in iOS 14.5 and iPadOS 14.5; update to these versions or later to mitigate. Public exploit details are not provided in the sup...

CVE-2024-54512

CVE-2024-54512 concerns the Face Gallery component on Apple platforms. The issue allowed a system binary to fingerprint a user’s Apple Account. Apple addressed it by removing the relevant flags. Patches are included in watchOS 11.2 and iOS 18.2 / iPadOS 18.2. The Apple security content page for F...

CVE-2025-31207

CVE-2025-31207 is an Apple logic issue affecting iOS and iPadOS where an app may enumerate a user’s installed apps. The connected documentation confirms the vulnerability and that it is addressed in iOS 18.5 and iPadOS 18.5 with “improved checks.” The NVD/Red Hat/NCSC entries repeat the same desc...

CVE-2025-43511

CVE-2025-43511 is a use-after-free vulnerability in WebKit when processing maliciously crafted web content, causing an unexpected process crash. The Connected documents confirm impact on WebKitGTK/WebKit2GTK components and list remediation via security updates across multiple distributions (e.g.,...

CVE-2026-20668

CVE-2026-20668 is a logging issue in Apple OS components that could allow an app to access sensitive user data. Affected products include iOS and iPadOS (18.7.7 and 26.3), macOS (Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.3), and visionOS 26.3. The underlying problem is improper data handling in log...

CVE-2026-28969

CVE-2026-28969 is a use-after-free in the IOKit subsystem that Apple fixed by improving memory management. The vulnerability could allow an app to cause unexpected system termination. The CVE is addressed in multiple Apple OS updates: iOS 18.7.9 and iPadOS 18.7.9 iOS 26.5 and iPadOS 26.5 macOS Se...

CVE-2026-43801

CVE-2026-43801 affects Apple platforms (iOS/iPadOS 26.6; macOS Sequoia 15.7.8; Sonoma 14.8.8; Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6). The issue: an app may access sensitive user data due to inadequate checks; Apple states fixes are included in the listed OS updates (improved checks)....

CVE-2026-64707

CVE-2026-64707 : A permissions issue in the BackgroundAssets component allowed an app to delete files for which it had no permission. Root cause cited as insufficient validation in deletion/permission checks. Fixed in macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, iOS/iPadOS 26.6, a...

CVE-2026-64734

CVE-2026-64734 affects Apple platforms (iOS/iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, visionOS, watchOS 26.6). Root cause: processing a maliciously crafted contact may leak sensitive data; fix implemented via improved checks. Remediation: update to the listed fixed versions (a...

CVE-2021-30662

CVE-2021-30662 affects Apple iOS/iPadOS; processing a maliciously crafted file may lead to arbitrary code execution. Apple fixed this with iOS 14.5 and iPadOS 14.5. Public references note associated updates in Apple’s security content. Other connected records reiterate the same remediation date a...

CVE-2024-44127

CVE-2024-44127 : A privacy issue in Apple iOS/iPadOS where Private Browsing tabs could be accessed without authentication due to state-management weaknesses. The CVE is addressed in updates: iOS 17.7 and iPadOS 17.7, and iOS 18/iPadOS 18. Mitigations include applying these updates to prevent unau...

CVE-2025-43400

CVE-2025-43400 is an out-of-bounds write vulnerability in FontParser that Apple fixed across multiple platforms. According to the provided documents, the issue could be triggered by processing a maliciously crafted font and may lead to unexpected app termination or memory corruption. Affected pro...

CVE-2025-43480

CVE-2025-43480 is a cross-origin data exfiltration vulnerability impacting Apple platforms and Safari/WebKit in general. The issue is addressed with improved checks and is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1. The CVSSv3.1 score...

CVE-2025-43541

CVE-2025-43541 is a type-confusion issue in WebKit/WebKitGTK affecting the web rendering stack. Connected advisories show the issue being fixed in WebKitGTK/WebKitGTK+related components, with remediation via updated packages such as webkitgtk4 (e.g., WebKitGTK 2.50.4 and related debian/alma/redha...

CVE-2026-20675

CVE-2026-20675 is an Apple vulnerability tied to processing maliciously crafted images that could disclose user information. Connected sources confirm the issue affects multiple Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS, including Apple TV firmware references) and is addressed ...

CVE-2026-28936

CVE-2026-28936 affects Apple platforms and is described as a vulnerability where processing a maliciously crafted file may lead to an unexpected app termination. It has been fixed in multiple updates: iOS 18.7.9 and iPadOS 18.7.9; iOS 26.5 and iPadOS 26.5; macOS Sonoma 14.8.7; macOS Tahoe 26.5; a...

CVE-2026-28956

CVE-2026-28956 is a memory corruption issue addressed with improved input validation; fixed in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Processing a malicious media file may cause an app to terminate or memory corrup...