CVE-2022-22612

CVE-2022-22612 involves a memory consumption issue that can lead to heap corruption when processing a maliciously crafted image. Affected products include Apple media frameworks across macOS Monterey 12.3, tvOS 15.4, iOS 15.4, iPadOS 15.4, watchOS 8.5, and iTunes 12.12.3 for Windows. The root cau...

CVE-2022-32847

CVE-2022-32847 affects Apple platforms and was fixed by updates: iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina. The issue, resolved by improved checks, could allow a remote attacker to cause an unexpected system ...

CVE-2022-32883

CVE-2022-32883 describes a logic issue that allowed an app to read sensitive location information. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The issue is mitigated by applying the listed Apple OS updates; no exploitation status is provided beyon...

CVE-2022-42806

CVE-2022-42806 is a race-condition vulnerability that Apple fixed in iOS 16.1, iPadOS 16, and macOS Ventura 13. The issue could allow an app to execute arbitrary code with kernel privileges, and the NVD assessment indicates a local attack with high impact, requiring user interaction. Mitigation i...

CVE-2023-23519

The CVE-2023-23519 entry describes a memory corruption issue that affects Apple operating systems when processing images, as stated in multiple sources. Affected components are not enumerated beyond general OS updates, but the vulnerability is addressed by fixes in watchOS 9.3, tvOS 16.3, macOS V...

CVE-2026-43818

CVE-2026-43818 affects Apple OS components where processing a maliciously crafted image can trigger an integer overflow due to insufficient input validation. Apple has fixed this issue in iOS/iPadOS 26.6 and macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The vulnerability’s root cause is an...

CVE-2020-3842

CVE-2020-3842 is a memory corruption vulnerability affecting Apple platforms (iOS, iPadOS, macOS, tvOS, watchOS) that can allow an application to execute arbitrary code with kernel privileges. The issue is fixed in iOS 13.3.1 / iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2...

CVE-2020-9999

CVE-2020-9999 is an Apple-specific memory corruption issue affecting multiple Apple platforms. Public documentation indicates that it can be triggered by processing a maliciously crafted text file, potentially leading to arbitrary code execution. The vulnerability is addressed in macOS Big Sur 11...

CVE-2021-30843

CVE-2021-30843 affects Apple FontParser; processing a maliciously crafted dfont file may lead to arbitrary code execution. Public documents consistently tie the issue to font parsing in macOS/iOS/watchOS/tvOS components and indicate root cause as memory/validation issues in font handling. Impact ...

CVE-2021-30937

CVE-2021-30937 is a memory-corruption vulnerability in Apple’s XNU kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The issue is addressed by updates across Apple platforms: macOS Big Sur 11.6.2, macOS Monterey 12.1, macOS Catalina Security Update 2021-008...

CVE-2022-22621

CVE-2022-22621 is an Apple issue affecting iOS/iPadOS/tvOS/watchOS/macOS where, with physical access to an iOS device, a user may see sensitive information via keyboard suggestions. The vulnerability stems from inadequate checks in the affected component (keyboard suggestions); it is mitigated by...

CVE-2022-26737

The CVE-2022-26737 entry concerns an out-of-bounds write issue that Apple fixed via improved bounds checking. Affected products include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The issue could allow an application to execute arbitrary code with kernel privileges. Remediation is ...

CVE-2022-32872

CVE-2022-32872 affects the Shortcuts component in iOS/iPadOS. A logic issue with restricted access allowed a person with physical access to an iOS device to view photos from the lock screen. Apple fixed this in iOS 16 and iOS 15.7 / iPadOS 15.7. The patch updates/restrictions close the gap; no ex...

CVE-2023-40414

CVE-2023-40414 affects the WebKitGTK4 web rendering stack (GTK port). The connected advisories confirm a use-after-free in processing web content that could lead to arbitrary code execution. Affected package: webkitgtk4 (and related JS/debug variants) with fixes released as webkitgtk4 2.42.5-1.am...

CVE-2024-1580

CVE-2024-1580: an integer overflow in the dav1d AV1 decoder can cause memory corruption when decoding large-frame videos. Upgrading past 1.4.0 is recommended. Debian reports fixes in bullseye 0.7.1-3+deb11u1 and bookworm 1.0.0-2+deb12u1. Apple advisories link CVE-2024-1580 to out-of-bounds write ...

CVE-2024-40789

CVE-2024-40789 is a WebKitGTK/WebKit-related out-of-bounds access issue. The initial CVE description notes an out-of-bounds access that could cause an unexpected process crash when processing malicious web content, with fixes across Apple platforms (iOS, iPadOS, macOS, Safari, watchOS, tvOS, visi...

CVE-2024-44244

CVE-2024-44244 is a memory corruption vulnerability in WebKitGTK/WebKit2GTK where processing maliciously crafted web content could cause an unexpected process crash. Public advisories across several distros confirm the issue and its fixed versions, including Debian webkit2gtk 2.46.3-1~deb11u2 and...

CVE-2026-43724

CVE-2026-43724 affects macOS Tahoe (kernel) and is described as an issue where an app may be able to cause unexpected system termination or write kernel memory. The fixed variant is addressed by improved input sanitization and is released in macOS Tahoe 26.5.2 (also reflected for iOS 26.5.2 and i...

CVE-2020-9789

CVE-2020-9789 is an out-of-bounds write issue in Apple image processing paths that was fixed by Apple in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and corresponding Windows/iCloud components. The vulnerability could allow arbitrary code execution when processing a ...

CVE-2021-30895

CVE-2021-30895 is a logic issue in Apple’s Game Center that could allow a malicious app to access a user’s contacts. The entry lists fixes across multiple Apple platforms: iOS 15.0.2, iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, and macOS Monterey 12.0.1. Connected documentation confirms the vulnerabil...

CVE-2022-22636

CVE-2022-22636 is an out-of-bounds write vulnerability in Apple’s AVEVideoEncoder component that could allow an application to execute arbitrary code with kernel privileges. The issue is fixed in Apple’s 15.4 updates for tvOS, iOS, and iPadOS (tvOS 15.4, iOS 15.4, iPadOS 15.4). The vulnerability ...

CVE-2023-23512

CVE-2023-23512 affects Apple operating systems and is fixed by updates to: watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. The issue stems from improper cache handling and can cause an application denial-of-service when visiting a website. Affected components are not detail...

CVE-2023-27937

CVE-2023-27937 describes an integer overflow that was mitigated using improved input validation. The issue affects multiple Apple platforms and versions, where parsing a maliciously crafted plist can cause an app to terminate or execute arbitrary code. Affected software includes macOS Ventura 13....

CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2020-9790

CVE-2020-9790 is an out-of-bounds write issue in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple’s advisories indicate the vulnerability was fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and related Wind...

CVE-2021-30704

CVE-2021-30704 is a logic issue related to improved state management that can allow an application to execute arbitrary code with kernel privileges. Affected software versions include tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Updates for Mojave/Catalina. T...

CVE-2022-32864

CVE-2022-32864 affects Apple platforms via a memory handling issue in the Kernel that could allow an app to disclose kernel memory. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The NVD entry lists a MEDIUM base score with LOCAL attack vector and HI...

CVE-2022-32908

CVE-2022-32908 is a memory corruption issue addressed by improved input validation in Apple software. It affects macOS Big Sur 11.x, macOS Monterey 12.6, iOS 15.7 and iOS 16, and iPadOS 15.7, with a local privilege escalation risk. A fix is provided in the listed macOS/iOS/iPadOS updates; exploit...

CVE-2023-32413

CVE-2023-32413 describes a race condition (TOCTOU) in Apple XNU logic that may allow an app to gain root privileges. Public details in the primary CVE entry state a fix in multiple Apple OS releases: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6/iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS...

CVE-2023-39434

CVE-2023-39434 is described in connected documents as a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. The issue is associated with WebKit/WebKitGTK ecosystem and is addressed in Apple platforms (iOS 17/iPadOS 17/watchOS 10/macOS Sonoma 14) per t...

CVE-2024-27820

CVE-2024-27820 describes a memory-handling issue in Apple’s WebKit/Web content processing that could lead to arbitrary code execution. The vulnerability affects multiple Apple platforms and components (e.g., tvOS, iOS, iPadOS, visionOS, Safari, macOS Sonoma) and is fixed in the listed latest rele...

CVE-2024-40779

CVE-2024-40779 corresponds to an out-of-bounds read in WebKitGTK/WebKit2GTK. The issue is described as being mitigated by improved bounds checking and is fixed in various Apple OS components (e.g., iOS, iPadOS, macOS Sonoma), and is also acknowledged in Linux distributions via webkit2gtk advisori...

CVE-2024-40780

CVE-2024-40780 is an out-of-bounds read in WebKitGTK/webkit2gtk. The issue may cause a crash when processing malicious web content. Concrete details in connected sources show affected packages across distributions (Debian webkit2gtk, Fedora webkit2gtk, Debian DSA/DLA advisories, and Amazon Linux ...

CVE-2025-24091

CVE-2025-24091 affects Apple iOS/iPadOS where an app could impersonate system notifications due to the Darwin notification system’s lack of sender verification. The issue could also enable a denial-of-service. Apple patches are in iOS 18.3 and iPadOS 18.3, with iPadOS 17.7.3 also addressing the f...

CVE-2026-64784

A WebKit out-of-bounds access flaw, credited to Janggoon Lee and Amy Burnett, affects Safari on iOS/iPadOS 18.7.10, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2; visiting malicious web content may crash Safari. CVSS 3.1 base score 4.3 (MEDIUM). No public exploit details provided.

CVE-2019-8848

CVE-2019-8848 is an elevation-of-privilege issue in Apple CFNetwork Proxies (and related components) that could allow a local attacker to gain higher privileges. It is fixed by updates across macOS/macOS Catalina 10.15.2, Mojave Security Update 2019-002, High Sierra Security Update 2019-007, tvOS...

CVE-2020-9844

CVE-2020-9844 is a double free vulnerability in the Wi-Fi component of Apple's operating systems. A remote attacker can exploit it to cause unexpected system termination or kernel memory corruption , rated CVSS 7.5 (High) with a network attack vector requiring no privileges or user interaction. T...

CVE-2020-9954

CVE-2020-9954 affects Apple media components across iOS/iPadOS 14, watchOS 7.0, tvOS 14 and macOS Catalina 10.15.7. The root cause is a buffer/memory handling issue in CoreAudio: Playing a malicious audio file may lead to arbitrary code execution. The vulnerability is addressed by updates on the ...

CVE-2021-1739

CVE-2021-1739 describes a parsing issue in handling directory paths that was mitigated by improved path validation. The vulnerability affects Apple platforms via local path handling and could allow a local user to modify protected parts of the filesystem. Fixed in Security Update 2021-002 (Catali...

CVE-2021-30705

CVE-2021-30705 describes a memory-disclosure issue when Processing a maliciously crafted ASTC file. Apple states this was fixed by improved checks and updates across multiple platforms: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, plus Security Updates Mojave 2021-004 and...

CVE-2021-30915

CVE-2021-30915 is a logic issue in iOS/iPadOS security text entry that could allow a person with physical access to determine characteristics of a user’s password in a secure text entry field. Root cause: flawed state management. Impact: potential partial disclosure of password characteristics. A...

CVE-2022-22632

CVE-2022-22632 involves a logic issue in state management that could allow privilege escalation. Apple fixed it in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, and macOS Monterey 12.3. A malicious application may be able to elevate privileges; the vulnerability is addre...

CVE-2022-22659

CVE-2022-22659 – Apple iOS/iPadOS NetworkExtension information disclosure Affected products: iPhone and iPad running iOS/iPadOS. The vulnerability is described as a logic issue in NetworkExtension causing potential leakage of sensitive user information when the device is in a privileged network p...

CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2025-31251

CVE-2025-31251 affects Apple platforms (watchOS, macOS Sonoma, tvOS, iPadOS, iOS, macOS Sequoia, visionOS, macOS Ventura) where maliciously crafted media processing could lead to unexpected app termination or memory corruption. The vulnerability is addressed with fixes in specific updates: watchO...

CVE-2026-65339

CVE-2026-65339 is a logic issue in the Audio component of Apple's operating systems, allowing a local app to leak sensitive user information . The vulnerability requires low privileges and user interaction, with a CVSS 3.1 score of 5.0 (MEDIUM) — high confidentiality impact but no integrity or av...

CVE-2020-29618

CVE-2020-29618 is an out-of-bounds read in ImageIO during processing of a malicious image, addressed by Apple with improved input validation. Vulnerable components include ImageIO across macOS Big Sur 11.1, tvOS 14.3, iOS 14.3 / iPadOS 14.3, watchOS 7.2, and iCloud for Windows 12.0. The issue can...

CVE-2021-1744

CVE-2021-1744 affects Apple platforms including macOS Big Sur 11.2, macOS Catalina/Mojave with Security Update 2021-001, iOS 14.4, iPadOS 14.4, watchOS 7.3 and tvOS 14.4. The issue is an out-of-bounds write in the ImageIO (and related image-processing) path triggered by processing a maliciously c...

CVE-2021-1811

CVE-2021-1811 is a logic/state-management issue in Apple software where processing a maliciously crafted font can disclose process memory. Connected sources specify the affected products and versions: iTunes 12.11.3 for Windows; Security Update 2021-002 for Catalina; Security Update 2021-003 for ...

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...