CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2024-40813

The CVE-2024-40813 entry concerns a lock-screen issue on Apple devices. Affected products are watchOS 10.6, iOS 17.6, and iPadOS 17.6, where an attacker with physical access could use Siri to access sensitive user data. The root cause is described as improved state management. The vulnerability i...

CVE-2019-8848

CVE-2019-8848 is an elevation-of-privilege issue in Apple CFNetwork Proxies (and related components) that could allow a local attacker to gain higher privileges. It is fixed by updates across macOS/macOS Catalina 10.15.2, Mojave Security Update 2019-002, High Sierra Security Update 2019-007, tvOS...

CVE-2020-29618

CVE-2020-29618 is an out-of-bounds read in ImageIO during processing of a malicious image, addressed by Apple with improved input validation. Vulnerable components include ImageIO across macOS Big Sur 11.1, tvOS 14.3, iOS 14.3 / iPadOS 14.3, watchOS 7.2, and iCloud for Windows 12.0. The issue can...

CVE-2020-9794

CVE-2020-9794 is an out-of-bounds read that Apple fixed across multiple platforms. The advisory notes a malicious app could cause a denial of service or disclose memory contents. Affected/affected versions include iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and rela...

CVE-2021-1857

CVE-2021-1857 describes a memory initialization issue that Apple fixed via multiple platform updates. Affected components include memory handling across iTunes for Windows (12.11.3), Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, w...

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2022-32787

CVE-2022-32787 is an out-of-bounds write vulnerability in how maliciously crafted web content is processed. Root cause: improved bounds checking fixes an out-of-bounds write that could lead to arbitrary code execution. Affected products/versions per the initial description are Apple platforms inc...

CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2024-44296

CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...

CVE-2024-54542

CVE-2024-54542 affects Apple Safari Private Browsing in iOS 18.2/iPadOS 18.2 (and related Safari 18.2) where Private Browsing tabs could be accessed without authentication. The NVD/Red Hat-Reddit Apple entries confirm an authentication issue fixed by the 18.2 rollups across iOS/macOS/watchOS/tvOS...

CVE-2025-24113

CVE-2025-24113: A UI spoofing vulnerability in Safari/WebKit is fixed in Safari 18.4 and related OS updates (macOS Ventura/ Sonoma, iOS/iPadOS 18.3–18.4, visionOS, watchOS). Exploitation status is not detailed in the provided documents.

CVE-2020-9839

CVE-2020-9839 is a race-condition vulnerability across Apple platforms that was fixed by state-handling improvements. Public details show impact as potential privilege escalation. Fixes were released in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, with System Preferenc...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2021-30859

CVE-2021-30859 is a Kernel-type confusion vulnerability in Apple products. According to Apple advisories, it could allow a malicious application to execute arbitrary code with kernel/system privileges. The issue was addressed by Apple in macOS Big Sur 11.6 and Security Update 2021-005 Catalina, a...

CVE-2022-22613

CVE-2022-22613 describes an out-of-bounds write that, if triggered, could allow an attacker to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3....

CVE-2022-42840

Technical details are not provided in the provided documents. The initial entry notes a memory handling fix affecting macOS/iOS versions but does not specify component, root cause, or remediation.

CVE-2023-23532

CVE-2023-23532 is an Apple vulnerability where a sandbox escape was addressed by Apple with improved checks. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS updates: iOS 16.4 and iPadOS 16.4, as well as iOS 15.7.6 and iPadOS 15.7.6. The description notes the fix involves enhanced valid...

CVE-2023-42961

CVE-2023-42961 describes a path-handling issue in Apple OS components that could allow a sandboxed process to circumvent sandbox restrictions. The flaw is mitigated by updated validations and is fixed in iOS 17/iPadOS 17, iOS 16.7/iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, and macOS Monter...

CVE-2024-27796

CVE-2024-27796 is a local privilege-escalation vulnerability in Apple operating systems. The NVD entry notes that the issue was addressed with improved checks and is fixed in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. CVSS vectors indicate LOCAL access with required user interaction (NVD: AV:L...

CVE-2024-27840

CVE-2024-27840 affects Apple platforms including macOS (Ventura 13.x, Monterey 12.x), iOS/iPadOS, tvOS, visionOS, and watchOS. The issue is described as a memory handling problem where an attacker who already has kernel code execution may bypass kernel memory protections. The vulnerability is fix...

CVE-2025-24206

CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...

CVE-2025-24257

CVE-2025-24257 is an out-of-bounds write issue addressed by Apple in visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The vulnerability can cause unexpected system termination or write to kernel memory. The description and connected references confirm affected platforms and that patch...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2020-3870

CVE-2020-3870 relates to an out-of-bounds read in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple fixed this via input-validation improvements and OS updates including iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6...

CVE-2021-1754

CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...

CVE-2021-30835

CVE-2021-30835 is referenced in multiple sources and is disclosed in the Apple iCloud for Windows 13 advisory as part of a set of vulnerabilities affecting ImageIO (memory corruption), WebKit, Foundation, and CoreGraphics with variant CVEs. Apple notes that processing maliciously crafted images o...

CVE-2021-30847

CVE-2021-30847 affects Apple ImageIO on Windows (via iCloud for Windows 13). The vulnerability is a memory corruption issue triggered by processing a malicious image, leading to arbitrary code execution. Apple’s advisory lists the fix as part of iCloud for Windows 13 security content (HT212953) w...

CVE-2022-26738

CVE-2022-26738 describes an out-of-bounds write vulnerability that was addressed by Apple through bounds checking improvements. The issue could allow an affected application to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and ...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2023-41981

CVE-2023-41981 affects Apple platforms (macOS/macOS Sonoma 14; Ventura 13.6; iOS 16.7/17; iPadOS 16.7/17; tvOS 17; watchOS 10). Root cause: a memory handling issue in the kernel that may allow bypass of kernel memory mitigations after kernel code execution. Impact per sources: attacker with kerne...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2021-30911

CVE-2021-30911 describes an out-of-bounds read caused by insufficient bounds checking when processing a maliciously crafted USD file. Impact: potentially disclosing memory contents. Affected platforms and fixed versions include macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an...

CVE-2022-22593

Technical details about CVE-2022-22593 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes beyond the initial description are disclosed. Monitor for updates.

CVE-2022-22667

CVE-2022-22667 (Apple GPU Drivers) is a use-after-free memory corruption issue that could allow arbitrary code execution with kernel privileges. The vulnerability is fixed in iOS 15.4 / iPadOS 15.4; exploitation requires authenticated access. Affected component: GPU Drivers. Remediation: update t...

CVE-2022-26740

CVE-2022-26740 describes an out-of-bounds write issue that may allow an app to execute arbitrary code with kernel privileges. Affected products/versions: tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Remediation is applying the fixed updates (Apple-supplied 15.5/12.4 releases). The c...

CVE-2022-42805

CVE-2022-42805 is an Apple-related vulnerability where an integer overflow occurred due to insufficient input validation. The issue could allow an app to execute arbitrary code with kernel privileges. Public references indicate fixes in iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The Red Hat ...

CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2020-9876

CVE-2020-9876 is an out-of-bounds write in Apple's ImageIO component that can be triggered by processing a malicious PDF. Affected products include macOS/iOSwatch/tvOS/watchOS families via ImageIO, and Windows (iCloud for Windows, iTunes for Windows) and tvOS updates. Public details in connected ...

CVE-2021-1815

CVE-2021-1815 is a path-traversal vulnerability in macOS Big Sur and related Apple platforms caused by a parsing issue in directory path handling. A local user could modify protected parts of the file system. The fixed versions include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4 and tv...

CVE-2021-30881

CVE-2021-30881 is an Apple vulnerability where unpacking a maliciously crafted archive could lead to arbitrary code execution due to an input validation/memory handling issue. Publicly disclosed remediation lists fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Securi...

CVE-2022-22640

CVE-2022-22640 is a memory corruption in Apple’s kernel that was mitigated by improved validation. The vulnerability is fixed in tvOS 15.4, iOS 15.4/iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The affected component is the Kernel, with the explicit impact described as arbitrary code execut...

CVE-2022-26768

CVE-2022-26768 is a memory corruption issue that could allow an app to execute arbitrary code with kernel privileges on Apple platforms. The NVD entry notes it is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6, watchOS 8.6, and tvOS 15.5, with the underlying cause described as improved state ...

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2024-23212

CVE-2024-23212 is a memory handling issue that could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS 10.3, tvOS 17.3, iOS 17.3 / iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, macOS Monterey 12.7.3, and iOS/iPadOS 16.7.5 or 17.3 depen...

CVE-2025-31214

CVE-2025-31214 is an Apple vulnerability affecting iOS 18.5 and iPadOS 18.5. The issue stems from improper state management and is fixed in the 18.5 releases. An attacker connected to a privileged network could intercept network traffic due to this flaw. The NVD description confirms the fix and s...

CVE-2019-8834

The CVE-2019-8834 entry affects Apple’s CFNetwork (and related iCloud/WebKit contexts in Apple OS releases). Description: a configuration issue may allow an attacker in a privileged network position to bypass HSTS for a limited set of top‑level domains not previously in the HSTS preload list. Aff...

CVE-2020-3841

CVE-2020-3841 affects Safari Login AutoFill. The issue, tied to UI handling, allowed a local user to send a password unencrypted over the network. Apple fixed this with Safari 13.0.5 and iOS/iPadOS 13.3.1 (and related security content), addressing the vulnerability by improved input/UI handling. ...

CVE-2020-9815

CVE-2020-9815 affects multiple Apple platforms (iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). Description: Processing a maliciously crafted audio file may lead to arbitrary code execution due to an out-of-bounds read, addressed by improved bounds checking. Affected co...