CVE-2022-42852

Mode C: CVE-2022-42852 affects WebKitGTK (webkitgtk2/gtk3 WebKit) components used in Linux GTK-based deployments. The issue allows processing of malicious web content to disclose process memory. Public advisories confirm fixes in WebKitGTK-related packages (e.g., Debian webkit2gtk updates, Fedora...

CVE-2023-38598

CVE-2023-38598 is a use-after-free in Apple operating system components that was addressed via memory-management fixes. The vulnerability can lead to arbitrary code execution with kernel privileges and is fixed in multiple Apple OS versions: watchOS 9.6, macOS Big Sur 11.7.9, macOS Monterey 12.6....

CVE-2019-8821

CVE-2019-8821 is a WebKit/WebKitGTK+ related vulnerability referenced in Apple security content for Windows (iCloud for Windows) and tied to WebKit components. The connected Apple advisories attribute CVE-2019-8821 to WebKit processing of malicious web content and memory-corruption issues, with t...

CVE-2022-26981

Liblouis up to version 3.21.0 is affected by a buffer overflow in compilePassOpcode within compileTranslationTable.c (indirectly via tools/lou_checktable.c). The issue lies in Liblouis 3.21.0 and earlier, with the vulnerable code path being invoked during translation table compilation. The effect...

CVE-2023-38604

The CVE-2023-38604 issue is an out-of-bounds write addressed by input validation fixes. Affected Apple platforms include watchOS 9.6; macOS Big Sur 11.7.9; macOS Monterey 12.6.8; macOS Ventura 13.5; iOS 15.7.8 / 16.6; iPadOS 15.7.8 / 16.6; tvOS 16.6. The vulnerability could allow an app to execut...

CVE-2022-22590

CVE-2022-22590 is a use-after-free in WebKit/WebKitGTK (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Affected lines in connected docs indicate WebKitGTK/WebKit implementations and that Apple fixed the issue in iOS 15.3/iPadOS 15.3/watchOS 8.4/...

CVE-2021-30951

CVE-2021-30951 is a WebKit-family use-after-free vulnerability that may be triggered by processing malicious web content. Affected components include WebKit (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK variants. The root cause is described as a memory-management issue leading to po...

CVE-2022-32823

CVE-2022-32823 describes a memory initialization issue that could allow an app to leak sensitive user information. It is fixed in Apple OS updates: iOS/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update 2022-005 Catalina. The vulnerability is local...

CVE-2023-37285

CVE-2023-37285 is an out-of-bounds read vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges. It is fixed in iOS/iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. Exploitation status and in-the-wild detai...

CVE-2020-9947

CVE-2020-9947 is a use-after-free vulnerability in memory management related to WebKit/Safari on Apple platforms. The advisory states that processing malicious web content may lead to arbitrary code execution. Fixed in watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, Safari 14.0, and corresponding...

CVE-2022-42817

Summary of CVE-2022-42817 (Apple ecosystem) : A logic issue affecting Safari/WebKit on Apple systems could allow leakage of sensitive data when visiting a malicious website. Root cause described as improved state management. Fixed in software updates: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iP...

CVE-2025-24213

CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...

CVE-2022-22589

CVE-2022-22589 is a validation issue in WebKit/WebKitGTK where processing a maliciously crafted mail message could lead to running arbitrary JavaScript. The trusted component is WebKit/WebKitGTK in Apple platforms (iOS, iPadOS, watchOS, tvOS, macOS Monterey 12.2+; Safari 15.3) and WebKitGTK for L...

CVE-2021-30884

CVE-2021-30884 relates to WebKit-based rendering components (notably WebKitGTK/WebKit on embedded platforms) where an issue in CSS compositing could allow a malicious website to reveal browsing history. The root cause is described as limitations or restrictions on CSS compositing. The vulnerabili...

CVE-2022-26719

CVE-2022-26719 is a memory corruption vulnerability in WebKitGTK/WebKit. The Apple advisory states that processing malicious web content may lead to arbitrary code execution and that fixes are applied in macOS Monterey 12.4, iOS 15.5/iPadOS 15.5, tvOS 15.5, watchOS 8.6, and Safari 15.5. Related a...

CVE-2024-23286

CVE-2024-23286 concerns a buffer overflow fix tied to memory handling in Apple platforms. Affected components/versions (as stated): macOS Monterey 12.7.4; macOS Ventura 13.6.5; macOS Sonoma 14.4; visionOS 1.1; iOS 17.4 and iPadOS 17.4; watchOS 10.4; iOS 16.7.6 and iPadOS 16.7.6; tvOS 17.4. Underl...

CVE-2022-26716

CVE-2022-26716 is a memory corruption vulnerability in WebKitGTK/WebKit exposure that could allow arbitrary code execution when processing malicious web content. Public records in connected advisories (AlmaLinux ALAS2-2023-2088 and ALMA 2022:7704/8054) confirm fixes in WebKitGTK/WebKitGTK3/4 pack...

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2026-64747

CVE-2026-64747 is a buffer overflow vulnerability fixed by improved size validation. It affects Apple platforms including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue may allow an app to execute arbitrary code ...

CVE-2022-26762

CVE-2022-26762 is a memory corruption issue addressed by macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges via a local vector. Affected components are not explicitly enumerated in the provided documents beyond the ...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2022-46700

CVE-2022-46700 corresponds to a memory corruption issue in WebKitGTK/WebKit2GTK. The vulnerability arises from processing malicious web content, potentially allowing arbitrary code execution. Public advisories (Debian DSA-5308/5309, Fedora package update, AlmaLinux advisories) indicate that WebKi...

CVE-2025-24209

CVE-2025-24209 is a WebKitGTK/WebKit-related vulnerability where processing maliciously crafted web content could cause an unexpected process crash due to a buffer/ memory handling issue. The issue affects webkitgtk/webkit2gtk, and multiple Linux distributions have assigned advisories to fix it (...

CVE-2022-22677

CVE-2022-22677 describes a logic issue in the handling of concurrent media (WebKit/WebRTC) that could interrupt video self-preview when a phone call is answered. Affected software is Apple platforms implementing WebKit/WebRTC (notably macOS Monterey and iOS/iPadOS in the 12.4/15.5 family). The ro...

CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2020-11759

CVE-2020-11759 affects the OpenEXR open-source image library. The issue arises from integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, allowing an attacker to write to an out-of-bounds pointer in affected builds prior to 2.4.1. The OpenEXR pro...

CVE-2022-26765

CVE-2022-26765 is a kernel-level race condition that could let a local attacker with arbitrary read/write bypass Pointer Authentication. Apple security updates fix it across multiple OSes: watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The connected Apple advisories expli...

CVE-2025-24162

CVE-2025-24162 is linked to WebKitGTK/WebKit-derived components in multiple platforms. Connected sources indicate the root cause is improved state management, addressing processing maliciously crafted web content that previously could cause an unexpected process crash. Affected products include v...

CVE-2022-32792

CVE-2022-32792 is an out-of-bounds write in WebKitGTK/WebKit affecting the webkitgtk and wpewebkit engines. Exploitation by processing malicious web content may lead to arbitrary code execution. Public advisories confirm fixes in upstream WebKitGTK/WebKit: Arch Linux ASA-202207-1/ASA-202207-2 pat...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...

CVE-2023-23496

CVE-2023-23496 affects Apple Safari/WebKit components; exploitation arises from processing maliciously crafted web content, leading to arbitrary code execution. Publicly documented impact includes macOS Ventura 13.2, macOS Monterey Big Sur/Big Sur? /, iOS 15.7.2 / 16.3, iPadOS 15.7.2 / 16.3, watc...

CVE-2024-27834

CVE-2024-27834 is a WebKit-related vulnerability where an attacker with arbitrary read/write capability may bypass Pointer Authentication. The issue is identified across WebKitGTK/WebKit2GTK deployments and is addressed by updates across multiple ecosystems: Apple platforms: fixed in iOS 17.5/iPa...

CVE-2025-24264

CVE-2025-24264 affects WebKitGTK/WebKitGTK4: processing malicious web content may cause an unexpected crash in Safari; fixed in Apple platforms (visionOS 2.4, Safari 18.4, etc.) and in WebKitGTK packages across distros (Debian: webkit2gtk 2.48.x; Fedora/Amazon Linux advisories) by upgrading to pa...

CVE-2023-40403

CVE-2023-40403 involves libxslt and is described as an information disclosure through processing web content, mitigated by improved memory handling. The initial entry states fixes in macOS Ventura 13.6, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, macOS Monterey 12.7, macOS Sonoma 14, and wat...

CVE-2022-32784

CVE-2022-32784 affects Apple Safari/WebKit; the issue was addressed with improved UI handling and is fixed in Safari 15.6, iOS 15.6, and iPadOS 15.6. The description indicates that visiting a maliciously crafted website could leak sensitive data. The connected documents corroborate Safari/iOS/iPa...

CVE-2023-32393

CVE-2023-32393 is a WebKitGTK/WebKit family memory-handling issue where processing web content could lead to arbitrary code execution. The vulnerability is addressed by Apple (watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and is reflected in multiple advisories/NESUS plugins ...

CVE-2025-24216

CVE-2025-24216 is an Apple WebKit vulnerability: processing malicious web content may cause an unexpected Safari crash. Public records indicate fixes in visionOS 2.4, tvOS 18.4, iPadOS 18.4, iOS 18.4, macOS Sequoia 15.4, and Safari 18.4. The connected documents confirm this CVE within the WebKit/...

CVE-2022-26710

CVE-2022-26710 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK that could lead to arbitrary code execution when processing malicious web content. Connected advisories identify WebKitGTK/WebKit2GTK as affected, with fixed updates in downstream distributions (e.g., AL2/AL8 advisories and ...

CVE-2023-23524

The CVE-2023-23524 issue is a denial-of-service vulnerability caused by improper input validation when processing a certificate. Affected Apple platforms include tvOS 16.3.2, iOS 16.3.1 / iPadOS 16.3.1, watchOS 9.3.1, and macOS Ventura 13.2.1. The root cause is improved input validation in the so...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2026-43794

The vulnerability resides in WebKit on Apple platforms, triggered by processing malicious web content. It is fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 . No exploitation or exploit code is reported; CISA SSVC rates technical impact as total. Users shou...

CVE-2022-46699

CVE-2022-46699 is a WebKitGTK/WebKitGTK2/WebKitGTK4 memory-corruption vulnerability that can allow arbitrary code execution when processing malicious web content. Connected advisories confirm the issue and its fixes across multiple distros: Debian/Ubuntu Debian-LTS (webKit2GTK/WebKit2GTK), Fedora...

CVE-2022-46705

CVE-2022-46705 is a spoofing vulnerability in the handling of URLs that can enable address-bar spoofing when visiting a malicious site. The initial description notes improved input validation and lists affected platforms (Apple products) with fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, an...

CVE-2025-24189

CVE-2025-24189 is a memory corruption vulnerability in processing malicious web content that is fixed in Safari 18.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 and tvOS 18.3. Affected WebKit components are the WebKitGTK/WebKitGTK4 family in Linux distributions (per SUS...

CVE-2021-30955

CVE-2021-30955 describes a race condition in Apple's iOS/macOS kernel handling that could allow a malicious user-space app to gain kernel privileges. The initial entry notes a fix in macOS Monterey 12.1 and corresponding iOS/iPadOS/watchOS/tvOS updates (12.1/15.2), addressing a race-condition wit...

CVE-2024-54543

CVE-2024-54543 is a memory corruption flaw in WebKit when processing maliciously crafted web content. Apple’s advisories enumerate fixed products/versions: visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2. Connected sources (e.g., WebKit GTK deployment...

CVE-2022-42863

CVE-2022-42863 is a WebKit/WebKitGTK memory corruption issue addressed by improved state management. The CVE entry specifies that processing malicious web content may lead to arbitrary code execution and lists affected platforms/versions: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPad...

CVE-2022-46691

CVE-2022-46691 is a memory consumption issue in WebKitGTK / WebKit that may enable arbitrary code execution when processing malicious web content. Connected advisories confirm the issue affects WebKitGTK/WebKit, with fixes delivered in Safari 16.2 and corresponding WebKitGTK updates. The underlyi...

CVE-2025-24104

CVE-2025-24104 concerns Apple platforms (iPadOS 17.7.4, iOS 18.3, iPadOS 18.3) where the backup restore process could incorrectly handle symlinks, allowing a malicious backup to point system file reads/writes and potentially modify protected system files. Apple’s advisories indicate the issue is ...

CVE-2022-22642

CVE-2022-22642 affects FaceTime on Apple iOS/iPadOS. The vulnerability could allow a user to bypass the Emergency SOS passcode prompt. Apple fixed the issue in iOS 15.4 and iPadOS 15.4, addressing the bypass through enhanced checks/validation. The available connected documents consistently descri...