CVE-2024-23289

CVE-2024-23289 affects Apple devices (iOS, iPadOS, macOS, watchOS) with a lock-screen issue where Siri could reveal private calendar data when physical access is available. Technical details across connected docs show affected versions and fixed releases: iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 an...

CVE-2024-54523

CVE-2024-54523 affects Apple OS families (macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, iPadOS 18.2). The issue, described as a memory handling/bounds problem, could allow an app to corrupt coprocessor memory. The publicly documented fix is “improved bounds checks” implemented in the lis...

CVE-2025-24215

CVE-2025-24215 affects macOS/macOS components as acknowledged by Apple advisories. The issue is described as a vulnerability that could allow a malicious app to access private information. Mitigation is through updates: macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, and macOS Sonoma 14....

CVE-2026-43721

CVE-2026-43721 : A clipboard data hijack vulnerability addressed by Apple through improved state management. Remediated in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. No exploitation details are provided in the supplied documents. Users should apply the indicated updates to...

CVE-2026-43725

CVE-2026-43725 affects WebKit/Web content handling in Apple platforms prior to patch: Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2. Root cause is insufficient input validation that could allow a malicious website to process restricted web content outside the sandbox. Apple securit...

CVE-2026-64787

CVE-2026-64787 is a use-after-free vulnerability in WebKit (Bugzilla 313703), addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination . The issue is fixed in Safari 26.6.1 , iOS 26.6.1 , iPadOS 26.6.1 , and macOS Tahoe 26...

CVE-2019-8786

CVE-2019-8786 is a memory corruption issue fixed by Apple in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1. The vulnerability could allow an application to execute arbitrary code with kernel privileges. Affected components include the system kernel and related subsyst...

CVE-2020-9827

CVE-2020-9827 is an input-validation–related denial-of-service issue fixed across Apple platforms: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. A remote attacker may trigger a DoS by exploiting improper input handling. Affected components and root cause are described i...

CVE-2020-9941

CVE-2020-9941 pertains to Apple Mail on macOS. A remote attacker could potentially cause an unintended change of the application state. Apple fixed this in macOS Catalina 10.15.7 and Security Update 2020-005 for High Sierra and Mojave. No exploitation details or in-the-wild status are provided in...

CVE-2020-9971

CVE-2020-9971 affects Apple systems (watchOS 7.0; tvOS 14.0; iOS 14.0/iPadOS 14.0; macOS Big Sur 11.0.1). Description documents a logic issue that was fixed via improved input/validation logic, enabling a malicious application to potentially elevate privileges. Affected components are tied to mul...

CVE-2021-1737

CVE-2021-1737 affects Apple macOS ImageIO parsing of PIC files. The issue is an out-of-bounds write caused by insufficient input validation in ImageIO’s PIC file handling, allowing arbitrary code execution when processing a maliciously crafted image. Vendors patched this in macOS Big Sur 11.2 and...

CVE-2021-1759

CVE-2021-1759 is an Apple macOS/iOS/tvOS vulnerability described as an out-of-bounds read in CoreMedia/ImageIO that could lead to arbitrary code execution when processing a malicious image. The root cause is improper input validation, and Apple fixed it in macOS Big Sur 11.2 and Security Updates ...

CVE-2021-30681

CVE-2021-30681 involves a validation issue in the handling of symlinks. Apple advisories note the fix in Security Update 2021-004 Mojave, iOS 14.6/iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may gain root privileges. NVD CVSSv3.1: L...

CVE-2021-30960

CVE-2021-30960 concerns a buffer overflow in the Audio handling path of macOS. Public documentation indicates the issue is fixed in macOS Big Sur 11.6.3 and is also addressed in macOS Monterey 12.1 across the Audio stack. The vulnerability could be triggered by parsing a maliciously crafted audio...

CVE-2022-32790

CVE-2022-32790 affects Apple OSes including tvOS, watchOS, iOS 15.5 / iPadOS 15.5, macOS Monterey 12.4 and macOS Big Sur 11.6.6, plus Security Update 2022-004 Catalina. A remote attacker could cause a denial-of-service. The issue was fixed in the listed versions (and related security updates).

CVE-2023-32368

The CVE-2023-32368 issue is an out-of-bounds read in 3D model processing that may disclose process memory. Root cause: improved input validation addressed the vulnerability. Affected Apple platforms include macOS Monterey 12.6.6, macOS Ventura 13.4, iOS 16.5, iPadOS 16.5, watchOS 9.5, and tvOS 16...

CVE-2024-23207

CVE-2024-23207 affects Apple platforms and is associated with an issue where an app may access sensitive user data due to improved redaction of sensitive information. Remediation is provided by updates: watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, and macOS Mon...

CVE-2025-43211

CVE-2025-43211 is corroborated across multiple advisories (Debian DSA-5978-1, DEBIAN:DSA-5978-1, Fedora package advisories, AlmaLinux ALSA notes) as a WebKitGTK/webkit2gtk vulnerability where processing web content may lead to a denial-of-service. Connected documents identify the affected compone...

CVE-2025-43343

CVE-2025-43343 involves a memory-handling issue in WebKitGTK/WebKit2GTK where processing malicious web content may crash the process. The initial advisory states the flaw is fixed in Safari 26, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26; Debian/AlmaLinux advisories confirm WebK...

CVE-2026-43795

A WebKit memory-handling flaw (CVE-2026-43795) causes Safari crashes when processing malicious web content. CVSS 4.3 (Medium). Patched in Safari 26.6.1, iOS/iPadOS 18.7.10 & 26.6.1, macOS Tahoe 26.6.2. No known exploitation; CISA assesses partial technical impact.

CVE-2026-64781

CVE-2026-64781 is a vulnerability in WebKit , Apple's browser engine, where insufficient input validation allows processing of maliciously crafted web content to cause an unexpected Safari crash . The issue was addressed with improved input validation (WebKit Bugzilla: 321484, reported by Thomas ...

CVE-2020-9848

CVE-2020-9848 affects Apple iOS/iPadOS notifications: an authorization issue fixed in iOS 13.5 / iPadOS 13.5 due to improved state management. A person with physical access to an iOS device could potentially view notification contents from the lockscreen. The issue is documented across multiple s...

CVE-2020-9889

The CVE-2020-9889 entry concerns an out-of-bounds write issue in Apple audio processing that could allow arbitrary code execution when parsing a maliciously crafted audio file. Technical details from connected sources specify this affects multiple Apple platforms (iOS, iPadOS, macOS, tvOS, watchO...

CVE-2021-1742

The CVE-2021-1742 entry is confirmed as a real vulnerability affecting Apple platforms where processing a maliciously crafted image could lead to arbitrary code execution. Publicly documented fixes reside in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvO...

CVE-2021-1745

CVE-2021-1745 is an Apple macOS/iOS/ iPadOS issue where processing a malicious USD file could trigger an out-of-bounds read, potentially causing termination or arbitrary code execution. The root cause is an input validation issue; Apple fixes were released in macOS Big Sur 11.2, Catalina 11.2 Sec...

CVE-2021-1786

CVE-2021-1786 describes a logic issue addressed with improved state management that could allow a local user to create or modify system files. Affected products/versions include macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, as well as watchOS 7.3, tvOS 14.4, iOS 14.4, a...

CVE-2021-30759

CVE-2021-30759 describes a stack overflow triggered by processing a maliciously crafted font file. The vulnerability affects Apple platforms (iOS, macOS Big Sur, watchOS, tvOS) and is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, and Security Upda...

CVE-2021-30808

CVE-2021-30808 is an Apple sandbox vulnerability. A malicious application could modify protected parts of the file system. Patched in tvOS 15, watchOS 8, iOS 15, and iPadOS 15; root cause described as an issue in Sandbox with improved checks. Exploitation status is not provided in the supplied do...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2022-26703

The CVE-2022-26703 entry concerns an authorization issue on iOS/iPadOS that could allow a person with physical access to an iPhone/iPad to view photos from the lock screen. The connected sources indicate this is addressed in iOS 15.5 and iPadOS 15.5 through improved state management. Affected com...

CVE-2022-26771

CVE-2022-26771 describes a memory corruption issue that could allow a malicious app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS (fixed in 8.6), tvOS (fixed in 15.5), iOS (fixed in 15.5), and iPadOS (fixed in 15.5). The description notes improved stat...

CVE-2022-32860

CVE-2022-32860 is a local kernel‑level vulnerability described as an out‑of‑bounds write caused by improved input validation. Root cause: a faulty input path allows arbitrary code execution with kernel privileges. Affected platforms/versions per the sources: iOS 15.6, iPadOS 15.6, macOS Monterey ...

CVE-2022-32940

CVE-2022-32940 affects Apple platforms (tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, watchOS 9.1). The issue enables an app to potentially execute arbitrary code with kernel privileges due to a bounds-checking flaw; Apple notes this is fixed in the listed OS versions. The CVE entry provides ...

CVE-2022-46694

CVE-2022-46694 affects Apple devices via an out-of-bounds write triggered by parsing a malicious video file. Public documents consistently describe the root cause as improper input validation in the video parsing path, leading to potential kernel code execution. Affected software/hardware are App...

CVE-2022-46716

CVE-2022-46716 describes a logic issue in Apple’s Private Relay state management where Private Relay functionality did not match system settings. Affected products include macOS Ventura (fixed in 13.1) and iOS/iPadOS (fixed in 16.2). The Connected documents confirm this mismatch and provide the r...

CVE-2023-27931

CVE-2023-27931 affects Apple OS family components where an app may access user-sensitive data. The issue was mitigated by removing the vulnerable code and is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, macOS Big Sur 11.7.3, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Connected sour...

CVE-2023-40384

CVE-2023-40384 describes a permissions issue where an app may read sensitive location information. Apple fixed it by improving redaction of sensitive data. The fix courses include tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14. The Connected documents confirm the vulnerability and the affected O...

CVE-2024-23231

CVE-2024-23231 concerns a privacy issue where private data in log entries could be exposed. Affected products include iOS and iPadOS (versions prior to 16.7.6 and 17.4), macOS Sonoma 14.4 and macOS Ventura 13.6.5, and watchOS 10.4. The root cause is insufficient redaction of sensitive user data i...

CVE-2024-23290

CVE-2024-23290 is a logic issue fixed by platform updates: tvOS 17.4, iOS 17.4, and iPadOS 17.4; macOS Sonoma 14.4; watchOS 10.4. The issue could allow an app to access user‑sensitive data due to improved restrictions. No exploitation details are provided beyond the remediation versions.

CVE-2025-30463

The CVE-2025-30463 entry concerns Apple platforms (iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). It describes an issue where an app may access sensitive user data, mitigated by an improved restriction of data container access. The vulnerability is addressed in the published security content for the...

CVE-2019-8775

CVE-2019-8775 affects Apple iOS/iPadOS VoiceOver. The root issue allowed a user with physical access to read contacts from the lock screen. Apple addressed this by restricting options on a locked device, with fixes in iOS 13.1 and iPadOS 13.1. Connected sources (Red Hat advisory, Apple HT210603, ...

CVE-2019-8831

The CVE-2019-8831 entry describes a memory corruption vulnerability mitigated by improved memory handling. Affected products span Apple operating systems and devices: macOS Catalina 10.15 and 10.15.1, iOS 13.1, iPadOS 13.1, tvOS 13, and watchOS 6, with fixes delivered via Security Updates (2019-0...

CVE-2020-27946

CVE-2020-27946 is an information-disclosure vulnerability tied to FontParser in Apple platforms. The issue arises when processing a maliciously crafted font, potentially allowing disclosure of process memory. Apple’s advisories indicate this affects watchOS 7.2 and various macOS/iOS/iPadOS/tvOS u...

CVE-2020-27951

CVE-2020-27951 affects Apple platforms (watchOS, iOS, iPadOS) and is described by multiple sources as an issue that allowed unauthorized code execution leading to an authentication policy violation. Apple’s security updates indicate fixes in watchOS 6.3, watchOS 7.2, iOS 12.5, and iOS/iPadOS 14.3...

CVE-2020-29608

CVE-2020-29608 is an out-of-bounds read in FontParser that could allow a remote attacker to leak memory. Public descriptions tie this to macOS Big Sur (11.x) and macOS Catalina 10.15.x, with fixes delivered in macOS Big Sur 11.2 and Security Update 2021-001 (Catalina), as well as related iOS/tvOS...

CVE-2021-1766

CVE-2021-1766 affects Apple platforms and is triggered by processing a maliciously crafted image, leading to a denial of service. The entry confirms fixes in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4, ...

CVE-2021-1769

CVE-2021-1769 describes a logic issue in macOS/iOS/watchOS/tvOS/iPadOS components where improved validation fixes allow bypassing Pointer Authentication. The vulnerability is triggered by a malicious attacker with arbitrary read/write capabilities and results in potential bypass of Pointer Authen...

CVE-2021-30695

The CVE-2021-30695 issue is an out-of-bounds read that was addressed by improved bounds checking. Affected products include macOS Big Sur 11.4 and iOS/iPadOS 14.6, with older macOS releases receiving Security Update 2021-003 (Catalina) and 2021-004 (Mojave). The vulnerability arises from processi...

CVE-2021-30979

CVE-2021-30979 affects Apple platforms via the ModelIO ABC file parsing path. The ZDI advisory documents a heap-based buffer overflow in ModelIO that can lead to remote code execution when a crafted ABC file is processed. Public references align this with the USD/ModelIO data pathway vulnerabilit...

CVE-2021-30980

CVE-2021-30980 describes a use-after-free vulnerability that affects Apple OS stack. The issue, fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, tvOS 15.2, iOS 15.2, iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Catalina, can allow an application to execute arbitrary code with kernel ...