CVE-2020-29618

CVE-2020-29618 is an out-of-bounds read in ImageIO during processing of a malicious image, addressed by Apple with improved input validation. Vulnerable components include ImageIO across macOS Big Sur 11.1, tvOS 14.3, iOS 14.3 / iPadOS 14.3, watchOS 7.2, and iCloud for Windows 12.0. The issue can...

CVE-2020-9794

CVE-2020-9794 is an out-of-bounds read that Apple fixed across multiple platforms. The advisory notes a malicious app could cause a denial of service or disclose memory contents. Affected/affected versions include iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and rela...

CVE-2021-1857

CVE-2021-1857 describes a memory initialization issue that Apple fixed via multiple platform updates. Affected components include memory handling across iTunes for Windows (12.11.3), Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, w...

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2023-42961

CVE-2023-42961 describes a path-handling issue in Apple OS components that could allow a sandboxed process to circumvent sandbox restrictions. The flaw is mitigated by updated validations and is fixed in iOS 17/iPadOS 17, iOS 16.7/iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, and macOS Monter...

CVE-2024-40813

The CVE-2024-40813 entry concerns a lock-screen issue on Apple devices. Affected products are watchOS 10.6, iOS 17.6, and iPadOS 17.6, where an attacker with physical access could use Siri to access sensitive user data. The root cause is described as improved state management. The vulnerability i...

CVE-2024-44296

CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...

CVE-2026-65334

CVE-2026-65334 is a memory corruption vulnerability in WebKit , addressed with improved state management (WebKit Bugzilla 316791). Processing maliciously crafted web content may lead to an unexpected Safari crash . The flaw is fixed in Safari 26.6.1 , iOS 18.7.10 / iPadOS 18.7.10 , iOS 26.6.1 / i...

CVE-2020-3870

CVE-2020-3870 relates to an out-of-bounds read in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple fixed this via input-validation improvements and OS updates including iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6...

CVE-2020-9839

CVE-2020-9839 is a race-condition vulnerability across Apple platforms that was fixed by state-handling improvements. Public details show impact as potential privilege escalation. Fixes were released in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, with System Preferenc...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30835

CVE-2021-30835 is referenced in multiple sources and is disclosed in the Apple iCloud for Windows 13 advisory as part of a set of vulnerabilities affecting ImageIO (memory corruption), WebKit, Foundation, and CoreGraphics with variant CVEs. Apple notes that processing maliciously crafted images o...

CVE-2022-22613

CVE-2022-22613 describes an out-of-bounds write that, if triggered, could allow an attacker to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3....

CVE-2022-32787

CVE-2022-32787 is an out-of-bounds write vulnerability in how maliciously crafted web content is processed. Root cause: improved bounds checking fixes an out-of-bounds write that could lead to arbitrary code execution. Affected products/versions per the initial description are Apple platforms inc...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2022-42840

Technical details are not provided in the provided documents. The initial entry notes a memory handling fix affecting macOS/iOS versions but does not specify component, root cause, or remediation.

CVE-2023-23532

CVE-2023-23532 is an Apple vulnerability where a sandbox escape was addressed by Apple with improved checks. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS updates: iOS 16.4 and iPadOS 16.4, as well as iOS 15.7.6 and iPadOS 15.7.6. The description notes the fix involves enhanced valid...

CVE-2023-41981

CVE-2023-41981 affects Apple platforms (macOS/macOS Sonoma 14; Ventura 13.6; iOS 16.7/17; iPadOS 16.7/17; tvOS 17; watchOS 10). Root cause: a memory handling issue in the kernel that may allow bypass of kernel memory mitigations after kernel code execution. Impact per sources: attacker with kerne...

CVE-2024-27796

CVE-2024-27796 is a local privilege-escalation vulnerability in Apple operating systems. The NVD entry notes that the issue was addressed with improved checks and is fixed in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. CVSS vectors indicate LOCAL access with required user interaction (NVD: AV:L...

CVE-2024-27840

CVE-2024-27840 affects Apple platforms including macOS (Ventura 13.x, Monterey 12.x), iOS/iPadOS, tvOS, visionOS, and watchOS. The issue is described as a memory handling problem where an attacker who already has kernel code execution may bypass kernel memory protections. The vulnerability is fix...

CVE-2024-44191

CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...

CVE-2025-24113

CVE-2025-24113: A UI spoofing vulnerability in Safari/WebKit is fixed in Safari 18.4 and related OS updates (macOS Ventura/ Sonoma, iOS/iPadOS 18.3–18.4, visionOS, watchOS). Exploitation status is not detailed in the provided documents.

CVE-2025-24206

CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...

CVE-2021-1754

CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2022-26738

CVE-2022-26738 describes an out-of-bounds write vulnerability that was addressed by Apple through bounds checking improvements. The issue could allow an affected application to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and ...

CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2024-54542

CVE-2024-54542 affects Apple Safari Private Browsing in iOS 18.2/iPadOS 18.2 (and related Safari 18.2) where Private Browsing tabs could be accessed without authentication. The NVD/Red Hat-Reddit Apple entries confirm an authentication issue fixed by the 18.2 rollups across iOS/macOS/watchOS/tvOS...

CVE-2020-9876

CVE-2020-9876 is an out-of-bounds write in Apple's ImageIO component that can be triggered by processing a malicious PDF. Affected products include macOS/iOSwatch/tvOS/watchOS families via ImageIO, and Windows (iCloud for Windows, iTunes for Windows) and tvOS updates. Public details in connected ...

CVE-2021-30847

CVE-2021-30847 affects Apple ImageIO on Windows (via iCloud for Windows 13). The vulnerability is a memory corruption issue triggered by processing a malicious image, leading to arbitrary code execution. Apple’s advisory lists the fix as part of iCloud for Windows 13 security content (HT212953) w...

CVE-2021-30881

CVE-2021-30881 is an Apple vulnerability where unpacking a maliciously crafted archive could lead to arbitrary code execution due to an input validation/memory handling issue. Publicly disclosed remediation lists fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Securi...

CVE-2021-30911

CVE-2021-30911 describes an out-of-bounds read caused by insufficient bounds checking when processing a maliciously crafted USD file. Impact: potentially disclosing memory contents. Affected platforms and fixed versions include macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an...

CVE-2022-22593

Technical details about CVE-2022-22593 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes beyond the initial description are disclosed. Monitor for updates.

CVE-2022-22640

CVE-2022-22640 is a memory corruption in Apple’s kernel that was mitigated by improved validation. The vulnerability is fixed in tvOS 15.4, iOS 15.4/iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The affected component is the Kernel, with the explicit impact described as arbitrary code execut...

CVE-2022-22667

CVE-2022-22667 (Apple GPU Drivers) is a use-after-free memory corruption issue that could allow arbitrary code execution with kernel privileges. The vulnerability is fixed in iOS 15.4 / iPadOS 15.4; exploitation requires authenticated access. Affected component: GPU Drivers. Remediation: update t...

CVE-2022-26740

CVE-2022-26740 describes an out-of-bounds write issue that may allow an app to execute arbitrary code with kernel privileges. Affected products/versions: tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Remediation is applying the fixed updates (Apple-supplied 15.5/12.4 releases). The c...

CVE-2022-26768

CVE-2022-26768 is a memory corruption issue that could allow an app to execute arbitrary code with kernel privileges on Apple platforms. The NVD entry notes it is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6, watchOS 8.6, and tvOS 15.5, with the underlying cause described as improved state ...

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2025-24257

CVE-2025-24257 is an out-of-bounds write issue addressed by Apple in visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The vulnerability can cause unexpected system termination or write to kernel memory. The description and connected references confirm affected platforms and that patch...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2020-9991

CVE-2020-9991 is an Apple vulnerability addressed across multiple Apple platforms. The issue was fixed by "improved checks" and affects macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, and tvOS 14.0. A remote attacker may be able to cause a denial of service. ...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2021-30859

CVE-2021-30859 is a Kernel-type confusion vulnerability in Apple products. According to Apple advisories, it could allow a malicious application to execute arbitrary code with kernel/system privileges. The issue was addressed by Apple in macOS Big Sur 11.6 and Security Update 2021-005 Catalina, a...

CVE-2022-22599

CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...

CVE-2022-22635

CVE-2022-22635 is an out-of-bounds write in AVEVideoEncoder. Apple fixes it in tvOS 15.4, iOS 15.4, and iPadOS 15.4, with the impact described as an app potentially gaining elevated privileges. Affected product/component: AVEVideoEncoder (Apple TV/iOS/iPadOS stack). Root cause: out-of-bounds writ...

CVE-2023-23535

CVE-2023-23535 affects Apple operating systems, with the vulnerability in ImageIO-related memory handling that may cause disclosure of process memory when processing a malicious image. Affected products/versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 15.7.4/i...

CVE-2023-23537

CVE-2023-23537 affects Apple platforms via a privacy issue where log entries could reveal sensitive location data. The vulnerability is fixed by Apple in: macOS Ventura 13.3, iOS 16.4/iPadOS 16.4, iOS 15.7.4/iPadOS 15.7.4, watchOS 9.4, and macOS Big Sur 11.7.5. Root cause (as described) is improv...