CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2024-44191

CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2020-3841

CVE-2020-3841 affects Safari Login AutoFill. The issue, tied to UI handling, allowed a local user to send a password unencrypted over the network. Apple fixed this with Safari 13.0.5 and iOS/iPadOS 13.3.1 (and related security content), addressing the vulnerability by improved input/UI handling. ...

CVE-2021-1815

CVE-2021-1815 is a path-traversal vulnerability in macOS Big Sur and related Apple platforms caused by a parsing issue in directory path handling. A local user could modify protected parts of the file system. The fixed versions include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4 and tv...

CVE-2021-1851

CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...

CVE-2021-1858

CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30687

CVE-2021-30687 is an out-of-bounds read vulnerability in Apple platforms triggered by processing a maliciously crafted image, leading to potential disclosure of user information. Affected software includes tvOS 14.6; Security Updates 2021-004 Mojave; iOS 14.6 and iPadOS 14.6; Security Update 2021...

CVE-2021-30857

CVE-2021-30857 is a local kernel race-condition vulnerability in Apple’s kernel. The description indicates it could allow a malicious app to execute arbitrary code with kernel privileges. The initial document notes a fix was included in multiple updates: macOS Big Sur 11.6, iOS 14.8 / iPadOS 14.8...

CVE-2022-32814

CVE-2022-32814 describes a type confusion issue that Apple fixed via updated state handling. The NVD entry states the vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms and versions for the fix are: watchOS 8.7, tvOS 15.6, iOS 15.6 and iPad...

CVE-2023-40391

CVE-2023-40391 affects Apple platforms with a memory handling issue that may allow an app to disclose kernel memory. Publicly documented fixes apply to tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14 (and Xcode 15). No exploitation status is stated in the provided sources. The vulnerability is ad...

CVE-2020-9961

CVE-2020-9961 is reported in Apple's ImageIO component. Affected platforms include macOS Catalina 10.15 (and Security Update 2020-005 for High Sierra and Mojave). The issue is described as an out-of-bounds read in ImageIO that could be triggered by processing a maliciously crafted image, leading ...

CVE-2021-30736

CVE-2021-30736 involves a buffer overflow that was mitigated by improved size validation. The advisory states that the issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, and iPadOS 14.6. The impact is that an application may be able to execute arbitrary code with kernel privi...

CVE-2022-26701

The CVE-2022-26701 issue is a race condition that was mitigated by improved locking in Apple software. It affects Apple platforms across multiple OS lines and versions, with the fixed versions/recipients listed as tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The documented impact st...

CVE-2022-26764

CVE-2022-26764 is a memory corruption issue in Apple platforms that is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. The root cause is improved validation reducing memory corruption; an attacker who already has kernel code execution could potentially bypass kerne...

CVE-2022-32845

CVE-2022-32845 is a signature-check bypass vulnerability in Apple’s Neural Engine model loading (model.hwx) that can enable sandbox escapes via manipulated HWX files. The issue arises in how ANE threads bind and process inputs, allowing an attacker to bypass Apple’s signature checks during aned m...

CVE-2023-42970

CVE-2023-42970 is a WebKitGTK/WebKitGTK3 use-after-free/memory-management issue that affects multiple Linux distributions. In the connected advisories, SUSE-SU-2025:01746-1 and SUSE-SU-2025:02033-1 list webkit2gtk3 updates to version 2.48.2 fixing CVE-2023-42970 (along with other CVEs). The advis...

CVE-2024-44258

CVE-2024-44258 affects Apple’s ManagedConfiguration framework and the profiled daemon. The issue arises during backup restoration when the destination path’s symlink status is not validated, potentially allowing written files to migrate into restricted, protected areas and modify system files. A ...

CVE-2025-31203

Apple fixed an integer overflow by improving input validation in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6/18.4, macOS Sonoma 14.7.5, watchOS 11.4, and visionOS 2.4. The issue could allow a local-network attacker to cause a denial-of-service. Affected products and versions are listed in the CV...

CVE-2025-43216

CVE-2025-43216 is a use-after-free in WebKitGTK/WebKit processing of malicious web content that can cause an unexpected Safari crash. The CVE is referenced in multiple advisories tied to WebKitGTK/WebKit, with fixes implemented in Safari 18.6 and corresponding WebKitGTK updates (e.g., WebKitGTK/W...

CVE-2021-1776

CVE-2021-1776 describes an out-of-bounds write vulnerability in the way a font file is processed. Apple documents that this could lead to arbitrary code execution and notes the issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, and correspond...

CVE-2021-1843

CVE-2021-1843 affects Apple systems; the issue arises from processing a maliciously crafted image and could lead to arbitrary code execution. It is addressed by iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3, and Security Update 2021-002 (Catalina) / 2021-003 (Mojave). Root caus...

CVE-2021-1868

CVE-2021-1868 describes a logic issue addressed by improved state management, enabling a local attacker to potentially elevate privileges on affected Apple platforms. The vulnerability is fixed via Security Update packages: Catalina 2021-002, Mojave 2021-003, and iOS 14.5 / iPadOS 14.5 / watchOS ...

CVE-2021-1885

CVE-2021-1885 affects Apple platforms: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. It is an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution. The issue was addressed by improved bounds checking and is fixed in the listed OS ...

CVE-2021-30727

CVE-2021-30727 involves a logic issue addressed by improved state management and is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, and iPadOS 14.6. A malicious app may be able to modify protected parts of the file system. No exploitation status or detailed root cause is provided b...

CVE-2021-31008

CVE-2021-31008 is a WebKit/type-confusion vulnerability addressed by Apple across multiple platforms. The RedHat/Apple entries confirm a type confusion issue in WebKit that could, when processing malicious web content, lead to code execution. Apple lists affected products as Safari, tvOS, iOS/iPa...

CVE-2022-32821

CVE-2022-32821 is a memory corruption vulnerability addressed by Apple in multiple OS updates. The issue involved memory corruption that was mitigated by improved validation and is fixed in: watchOS 8.7, tvOS 15.6, iOS 15.6 / iPadOS 15.6, and macOS Monterey 12.5. The impact stated in the CVE note...

CVE-2022-32830

CVE-2022-32830 is an out-of-bounds read vulnerability in ImageIO affecting tvOS/iOS/iPadOS up to version 15.6; exploitation through processing a malicious image could disclose user information. Other Apple components listed in tvOS 15.6/ iOS 15.6/ iPadOS 15.6 have separate CVEs. Remediation: upda...

CVE-2022-32945

CVE-2022-32945 affects macOS, with Apple noting an access issue that could allow an app to record audio via paired AirPods. The root cause is tied to sandbox restrictions on third‑party apps; Apple states the vulnerability is fixed in macOS Ventura 13. The CVE appears in multiple Apple advisories...

CVE-2022-46690

CVE-2022-46690 is an Apple family issue described as an out-of-bounds write that was addressed with improved input validation. The Apple security content lists multiple components affected across platforms (iOS, iPadOS, macOS, tvOS, watchOS), with the kernel and several subsystems (e.g., IOMobile...

CVE-2023-23494

CVE-2023-23494 affects Apple iOS and iPadOS 16.4 releases. The issue is described as a buffer overflow that was addressed by improved bounds checking, with the fix available in iOS 16.4 and iPadOS 16.4. The documented impact is that a user in a privileged network position may cause a denial-of-se...

CVE-2024-23257

Technical details about CVE-2024-23257 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-31214

CVE-2025-31214 is an Apple vulnerability affecting iOS 18.5 and iPadOS 18.5. The issue stems from improper state management and is fixed in the 18.5 releases. An attacker connected to a privileged network could intercept network traffic due to this flaw. The NVD description confirms the fix and s...

CVE-2019-8827

CVE-2019-8827 affects WebKit-based browsers used in Apple products (Safari, iCloud for Windows, iTunes, tvOS, iPadOS/iOS) and Windows iCloud/WebKit pages. Root cause: processing maliciously crafted web content allowed leakage of visited sites via the HTTP referrer header; Apple downgraded third-p...

CVE-2021-1882

CVE-2021-1882 is a memory corruption vulnerability in Apple software. Connected sources specify an issue that can allow an application to gain elevated privileges, with fixes in Security Update 2021-002 for Catalina, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The NVD/NC...

CVE-2021-30653

CVE-2021-30653 is an Apple image-processing vulnerability addressed by Apple in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The public description states that processing a maliciously crafted image may lead to arbitrary code execution due to improved checks, with the fi...

CVE-2021-30694

CVE-2021-30694 is an information-disclosure vulnerability in Apple platforms where processing a maliciously crafted USD file could disclose memory contents due to an issue with state management. Publicly affected software includes macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Up...

CVE-2022-22670

CVE-2022-22670 in Apple's MediaRemote module affects tvOS 15.4, iOS 15.4, iPadOS 15.4, and watchOS 8.5. The issue is described as an access control restriction problem that could allow a malicious app to identify which other applications a user has installed. Public details in the connected docs ...

CVE-2022-32793

CVE-2022-32793 refers to multiple out-of-bounds write issues in Apple GPU drivers that could lead to kernel memory disclosure. The connected Apple advisory notes these issues affect GPU Drivers and are fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The CVSS base s...

CVE-2022-32820

CVE-2022-32820 is an out-of-bounds write issue that Apple fixed by improved input validation. The vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected platforms include iOS/iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and S...

CVE-2023-28182

CVE-2023-28182 affects Apple devices where VPN servers configured with EAP-only authentication may be spoofed by a user in a privileged network position. The root issue is authentication weakness that could allow impersonation of a VPN server. Impact, as stated, is limited to integrity concerns f...

CVE-2023-42961

CVE-2023-42961 describes a path-handling issue in Apple OS components that could allow a sandboxed process to circumvent sandbox restrictions. The flaw is mitigated by updated validations and is fixed in iOS 17/iPadOS 17, iOS 16.7/iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, and macOS Monter...

CVE-2024-23212

CVE-2024-23212 is a memory handling issue that could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS 10.3, tvOS 17.3, iOS 17.3 / iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, macOS Monterey 12.7.3, and iOS/iPadOS 16.7.5 or 17.3 depen...

CVE-2024-27826

CVE-2024-27826 is an Apple macOS kernel‑level memory handling vulnerability. The issue could allow an app to execute arbitrary code with kernel privileges. Apple’s advisories indicate the fix was applied via memory handling improvements and are effective for macOS versions: Ventura 13.6.8, Sonoma...

CVE-2025-24230

An out-of-bounds read issue in Apple media handling (triggered by playing a malicious audio file) was fixed via input-validation improvements. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4/iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Exploitation status...

CVE-2025-31182

CVE-2025-31182 : Apple addresses an issue where an app could delete files it should not access due to improper handling of symlinks. The vulnerability affects multiple Apple OS versions and is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, and m...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2019-8830

CVE-2019-8830 involves an out-of-bounds read in FaceTime processing of malicious video, fixed by input validation improvements. Affected Apple platforms include tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra, iOS 13.3/iPadOS...

CVE-2019-8850

CVE-2019-8850 describes an out-of-bounds read in an audio processing component. Root cause: improper input validation leading to memory disclosure when processing a maliciously crafted audio file. Affected products include Apple platforms: macOS Catalina 10.15 (and 10.15.1), iOS 13.1 / iPadOS 13....