CVE-2023-38603

CVE-2023-38603 affects Apple platforms (iOS/iPadOS/macOS) with a remote DoS possibility. The description indicates issue was addressed by improved checks and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The exact component/function and root cause are not provided in the documents. U...

CVE-2019-8820

CVE-2019-8820 is a WebKit vulnerability described as multiple memory corruption issues that could allow arbitrary code execution when processing malicious web content. The connected notes confirm the issue is present in WebKit components and was fixed in a range of Apple platforms/releases: iOS 1...

CVE-2020-9925

CVE-2020-9925 concerns a logic issue in WebKit that affects Safari/WebKit components across Apple platforms. The vulnerability could allow universal cross-site scripting when processing malicious web content. Apple patched this by updating to iOS 13.6/iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safa...

CVE-2023-23505

CVE-2023-23505 describes a privacy issue where an app could access information about a user’s contacts due to insufficient private data redaction in log entries. Affected products include Apple platforms: macOS Monterey 12.6.3, macOS Ventura 13.2, macOS Big Sur 11.7.3, watchOS 9.3, iOS 15.7.3 and...

CVE-2023-32734

CVE-2023-32734 affects Apple platforms (iOS/iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6). The root cause is improved memory handling that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed in the listed updates (iOS 16.6/iPadOS 16.6, tv...

CVE-2023-35993

CVE-2023-35993 is a use-after-free vulnerability affecting Apple's platforms (macOS, iOS, iPadOS, tvOS, watchOS) where an app may execute arbitrary code with kernel privileges. The issue stems from incorrect memory management and is fixed in specific releases: macOS Monterey 12.6.8, macOS Big Sur...

CVE-2021-30849

CVE-2021-30849 is a WebKit/WebKitGTK family issue reporting multiple memory corruption defects that could allow arbitrary code execution when processing malicious web content. Publicly documented fixes cover WebKitGTK/WebKit in Apple platforms (iOS 14.8/iPadOS 14.8, watchOS 8, Safari 15, tvOS 15,...

CVE-2020-9843

CVE-2020-9843 is a WebKit/WebKitGTK issue described as an input validation weakness that may lead to cross-site scripting when processing malicious web content. The vulnerability is documented across multiple platforms: Apple: WebKit-related entries in iOS 13.5/iPadOS 13.5/watchOS 6.2.5/Safari 13...

CVE-2020-9915

CVE-2020-9915 is an access issue in WebKit related to Content Security Policy enforcement. The description notes that processing malicious web content may prevent CSP from being enforced. Public details in connected Apple advisories show the vulnerability affecting WebKit components and being mit...

CVE-2020-9951

CVE-2020-9951 is a WebKit use-after-free vulnerability in Safari (WebKit GTK also mirrors related WebKit issues). Exploitation requires a victim to visit a specially crafted web site, potentially enabling arbitrary code execution on affected Apple platforms. The issue is addressed in Safari/WebKi...

CVE-2019-8846

CVE-2019-8846 is a use-after-free vulnerability in WebKit-related components that can lead to arbitrary code execution when handling malicious web content. The issue was addressed with improved memory management and is fixed in several Apple platforms: tvOS 13.3, iOS/iPadOS 13.3, Safari 13.0.4, a...

CVE-2022-48618

CVE-2022-48618 affects Apple platforms (macOS, iOS/iPadOS, watchOS, tvOS) where an attacker with arbitrary read/write capability can bypass Pointer Authentication due to a TOCTOU/memory-corruption issue. Public details describe a memory-corruption risk that could be exploited locally to bypass se...

CVE-2020-3865

CVE-2020-3865 is a WebKit-related memory-corruption issue that affects WebKit and WebKitGTK/WebKitGTK4 components. The initial entry notes memory corruption issues addressed by improved memory handling and fixes in iOS 13.3.1/iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, and related Windows/macOS co...

CVE-2020-9895

CVE-2020-9895 is a use-after-free in memory management that Apple fixed across multiple platforms. Fixed in iOS 13.6, iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, and iCloud for Windows 11.3/7.20. The issue could allow remote code execution or cause arbitrar...

CVE-2025-24124

CVE-2025-24124 affects several Apple platforms. The vulnerability involves a parsing issue that may cause an unexpected app termination. Mitigation is available via updates: iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS ...

CVE-2020-3867

CVE-2020-3867 is a WebKitGTK/WebKit vulnerability categorized as a logic issue in state management that could enable universal cross-site scripting when processing malicious web content. According to the documents, the issue affects WebKitGTK/WebKit components (notably webkitgtk4) and was fixed i...

CVE-2020-9894

CVE-2020-9894 affects WebKit in Windows 10+ (via Microsoft Store) with an out-of-bounds read addressed by improved input validation. Impact: remote termination or arbitrary code execution. Remediation: apply the relevant Apple/Safari security updates (Safari 13.1.2; iOS 13.6/iPadOS 13.6; Safari m...

CVE-2019-15126

CVE-2019-15126 affects Broadcom Wi‑Fi client devices. Timed and handcrafted WLAN traffic can trigger state‑transition errors, causing improper layer‑2 Wi‑Fi encryption and potential information disclosure over the air for a discrete traffic set. Connected docs reference Broadcom/Keystroke‑style e...

CVE-2020-29623

CVE-2020-29623 affects WebKitGTK/WebKit2GTK. The issue: the “Clear History and Website Data” function could fail to fully delete browsing history. Affected products include WebKitGTK-based stacks; upstream fixes exist and are reflected in package updates (e.g., Debian security advisory DSA-4877-1...

CVE-2020-9862

The CVE-2020-9862 entry concerns a command injection vulnerability in Web Inspector (WebKit Web Inspector). The root cause is inadequate escaping when copying a URL from Web Inspector, enabling a potential command injection path. Affected components: Web Inspector/WebKit implementations used in A...

CVE-2021-30936

CVE-2021-30936 is a use-after-free in WebKitWebKitGTK/WebKit processing malicious web content, leading to arbitrary code execution. Public details in connected docs show the issue fixed in Safari 15.2, macOS Monterey 12.1, iOS 15.2, iPadOS 15.2 and tvOS 15.2 (WebKit). Debian and AlmaLinux advisor...

CVE-2023-38565

CVE-2023-38565 involves a path handling issue in Apple OS components where insufficient validation could allow a local attacker to gain root privileges. The NVD entry specifies that the underlying problem is a path handling issue that was addressed with improved validation. Affected versions incl...

CVE-2019-8815

CVE-2019-8815 is a WebKit memory-corruption issue affecting Apple’s WebKit-derived components. It could enable arbitrary code execution after processing malicious web content. Apple tied fixes to iOS 13.2/iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0 (...

CVE-2020-36329

CVE-2020-36329 is a libwebp use-after-free vulnerability present in versions before 1.0.1, caused by a thread being killed too early. The impact can affect data confidentiality, integrity, and system availability. Remediation is via updates/patches provided by distributions; notable fixes include...

CVE-2023-32433

CVE-2023-32433 is a use-after-free vulnerability in Apple system software. The issue allows an attacker to execute arbitrary code with kernel privileges and is fixed by Apple in specific OS updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 15.7.8 and 16.6, iPadOS 15.7....

CVE-2019-8812

CVE-2019-8812 involves multiple memory corruption issues that Apple fixed by addressing memory handling in WebKit-related components. The advisory states that these issues could allow arbitrary code execution when processing maliciously crafted web content. Affected software includes iOS 13.2 and...

CVE-2021-30744

CVE-2021-30744 describes a cross-origin issue with iframe elements that was addressed by improved tracking of security origins. The vulnerability can lead to universal cross-site scripting when processing malicious web content. The initial entries state fixes in multiple Apple platforms: tvOS 14....

CVE-2022-32844

CVE-2022-32844 describes a race condition (kernel-level logic issue) that could allow an app with arbitrary kernel read/write to bypass Pointer Authentication. Apple fixed this in tvOS 15.6, iOS 15.6, iPadOS 15.6 and watchOS 8.7 by enhancing state handling and memory checks. Connected sources con...

CVE-2019-8783

CVE-2019-8783 is a memory corruption issue in WebKit/WebKitGTK3 contexts that Apple docs attribute to multiple memory corruption vulnerabilities resolved in iOS 13.2 / iPadOS 13.2 / macOS Catalina 10.15.x / tvOS 13.2 and Safari 13.0.3. The connected materials also show WebKitGTK/WebKit entries li...

CVE-2019-8844

CVE-2019-8844 is a memory corruption issue reported across Apple/WebKit components. The connected advisory confirms the vulnerability was addressed in tvOS 13.3, iOS/iPadOS 13.3, watchOS 6.1.1, Safari 13.0.4, and related macOS/iCloud/iTunes releases, indicating improved memory handling fixed the ...

CVE-2019-8819

CVE-2019-8819 is a WebKit/WebKit-related memory corruption issue that could be triggered by processing malicious web content, potentially enabling arbitrary code execution. The initial entry notes a fix in iOS 13.2/iPadOS 13.2, tvOS 13.2, Safari 13.0.3, and related Apple components. Connected sou...

CVE-2023-32416

CVE-2023-32416 is a logic-issue vulnerability in Apple’s Find My framework where an app may read sensitive location information. The entry notes a fix in macOS Monterey 12.6.8, iOS 15.7.8 / iPadOS 15.7.8, iOS 16.6 / iPadOS 16.6, macOS Ventura 13.5, and watchOS 9.6, implying the impact and remedia...

CVE-2023-38410

CVE-2023-38410 is an Apple kernel privilege-elevation issue that Apple fixed via updated checks. Affected platforms include iOS 16.6/iPadOS 16.6 and macOS Ventura 13.5. The issue could allow a local attacker with low privileges to elevate to high/root privileges. The mitigation is to upgrade to t...

CVE-2023-32441

CVE-2023-32441 is an Apple kernel memory-management issue that could allow an app to execute arbitrary code with kernel privileges. The advisory fixes are in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, and wat...

CVE-2023-38424

CVE-2023-38424 affects Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Impact is described as local, with user interaction required for exploitation; CVSS notes high i...

CVE-2020-36331

CVE-2020-36331 affects libwebp prior to 1.0.1, with an out-of-bounds read in the ChunkAssignData path (mux/muxinternal.c). The vulnerability impacts data confidentiality and availability. Public documents confirm the root cause as out-of-bounds read in the specified function, and multiple advisor...

CVE-2023-38593

CVE-2023-38593 is a logic-issue vulnerability addressed by Apple in updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, and watchOS 9.6. The root cause is described as a logic issue with improved checks, and the impact noted is the potential for an app...

CVE-2021-30734

CVE-2021-30734 is a memory corruption vulnerability in WebKitGTK and WPE WebKit prior to version 2.32.3. Processing malicious web content could lead to arbitrary code execution. Advisories (ASA-202107-67/68 and Debian DSA-4945-1) note the fix to 2.32.3-1 and list the affected packages. Apple’s vu...

CVE-2022-22639

Technical details for CVE-2022-22639 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-8816

CVE-2019-8816 refers to multiple memory corruption issues in WebKit-related components that could lead to arbitrary code execution when processing malicious web content. Public details indicate fixes across Apple platforms: iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, and rele...

CVE-2020-11763

OpenEXR has a CVE-2020-11763 vulnerability affecting versions before 2.4.1 due to an std::vector out-of-bounds read and write, demonstrated in ImfTileOffsets.cpp. Amazon Linux 2 and Red Hat advisories confirm the issue and list related OpenEXR problems (11761, 11763, 11764). The fixed version is ...

CVE-2019-8769

CVE-2019-8769 concerns WebKit: an issue in the drawing of web page elements could allow leakage of browsing history when visiting a malicious site. Public fixes span multiple platforms and projects: Apple webkit (iOS 13.1/iPadOS 13.1 and macOS Catalina 10.15), WebKitGTK/WebKitGTK+ (e.g., webkitgt...

CVE-2023-32381

CVE-2023-32381 describes a use‑after‑free vulnerability that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in multiple Apple OS updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5; iOS 16.6 and iPadOS 16.6; tvOS 16.6; watchOS 9.6. Att...

CVE-2019-8835

CVE-2019-8835 involves multiple memory corruption issues in WebKit components. The public description states exploitation could occur by processing malicious web content, with fixed versions including tvOS 13.3, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windo...

CVE-2020-9807

CVE-2020-9807 is a memory corruption issue in WebKit components that can occur when processing maliciously crafted web content, potentially enabling arbitrary code execution. The vulnerability affects WebKitGTK and related WebKit builds prior to the fixed version, with upstream fix in WebKit 2.28...

CVE-2023-38261

CVE-2023-38261 affects Apple devices (iOS, iPadOS, macOS) with a kernel-privilege arbitrary code execution possibility. The description states the issue was mitigated by improved memory handling and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The available connected documents corro...

CVE-2019-8782

CVE-2019-8782 is a WebKit-related memory corruption issue addressed by Apple in iOS 13.2, iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, and iCloud for Windows 11.0. The advisory notes multiple memory corruption vulnerabilities fixed across WebKit with improved memory handling...

CVE-2019-8811

CVE-2019-8811 is a memory corruption vulnerability in WebKit that affected WebKit components used by Apple and related Windows apps (e.g., iCloud for Windows) and could be triggered by processing malicious web content to achieve arbitrary code execution. The vulnerability is addressed in the Appl...

CVE-2020-11761

CVE-2020-11761 involves an out-of-bounds read during Huffman uncompression in OpenEXR before 2.4.1 (CVE-2020-11761). Amazon Linux 2 advisory ALAS2-2020-1499 documents OpenEXR issues including CVE-2020-11761 and notes the fix in OpenEXR 1.7.1 packages for AL2 and provides upgrade guidance. Red Hat...

CVE-2023-23541

CVE-2023-23541 affects Apple iOS/iPadOS. A privacy issue could allow an app to access information about a user’s contacts due to insufficient private data redaction in log entries. The issue is fixed in iOS 15.7.4 / iPadOS 15.7.4 and in iOS 16.4 / iPadOS 16.4. Affected components are tied to log-...