CVE-2021-30709

CVE-2021-30709 affects macOS and iOS platforms where processing a maliciously crafted USD file could disclose memory contents. The issue was addressed by Apple with fixes in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, and iOS/iPadOS 14.6. Root cause det...

CVE-2021-30940

CVE-2021-30940 is a memory handling vulnerability described as a buffer overflow when processing a malicious USD file, potentially disclosing memory contents. Affected products/versions (per provided documents): macOS Big Sur 11.6.2 and Security Update 2021-008 Catalina; macOS Monterey 12.1; iOS ...

CVE-2022-32795

CVE-2022-32795 corresponds to an Apple Safari/WebKit issue where visiting a malicious website could lead to address bar spoofing. The vulnerability is fixed in iOS 16, iOS 15.7, and iPadOS 15.7. Affected component: Safari/WebKit on Apple mobile platforms; root cause described as an issue in how t...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...

CVE-2023-23536

The CVE-2023-23536 issue is an Apple kernel privilege escalation fixed by improved bounds checks. Affected products include macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5, iOS 16.4 and 15.7.4/iPadOS 16.4 and 15.7.4, tvOS 16.4, and watchOS 9.4. It can allow an app to execute arbit...

CVE-2023-28178

CVE-2023-28178 is a logic-issue vulnerability in Apple platforms where an app may bypass Privacy preferences due to insufficient validation. The issue is addressed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, and watchOS 9.4. The CVSS-like metrics indicate Lo...

CVE-2024-27836

CVE-2024-27836 affects Apple’s ImageIO component in Apple Vision Pro stack, with the issue described as: processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions include visionOS 1.2, macOS Sonoma 14.5, iOS 17.5, and iPadOS 17.5. The Apple security c...

CVE-2025-30466

CVE-2025-30466 concerns a bypass of the Same Origin Policy in Apple web/OS components. The issue is addressed through improved state management and is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, visionOS 2.4, and macOS Sequoia 15.4. The CVE entry lists network as the attack vector, with no user ...

CVE-2025-31183

The CVE-2025-31183 issue affects Apple platforms as described in connected documents, with fixes in macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is improved restriction of data container access, and the vulnerability could allow an app to access se...

CVE-2025-31199

CVE-2025-31199 is a logging-data-redaction flaw addressed by Apple in macOS/macOS-derived OS updates (Sequoia 15.4, Sonoma 14.x line, iOS/iPadOS 18.4, visionOS 2.4). The issue allowed an app to access sensitive user data due to insufficient data redaction in log outputs. Apple’s advisories list t...

CVE-2026-28955

CVE-2026-28955 is an Apple memory-handling issue triggered by processing malicious web content that could cause an unexpected process crash. The connected sources confirm the root cause relates to memory management weaknesses and state that the vulnerability is fixed in the following updates: iOS...

CVE-2026-43723

CVE-2026-43723 describes a path handling issue fixed by improved input validation. The vulnerability affects Apple platforms and is mitigated by updates to iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be ...

CVE-2026-43731

The CVE-2026-43731 entry documents a use-after-free vulnerability in components used by WebKit/Web content handling that could allow memory corruption. Affected products include Safari, iOS, iPadOS, and macOS Tahoe, with the fix applied in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe...

CVE-2019-8795

CVE-2019-8795 is a memory corruption vulnerability affecting Apple AVE components (notably described as in Apple AVE drivers/AVEVideoEncoder family) that could allow arbitrary kernel code execution with system privileges. Apple attributes fixes to iOS 13.2 and iPadOS 13.2 (and tvOS 13.2) via impr...

CVE-2020-3860

CVE-2020-3860 is a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. Root cause: memory corruption due to improper input handling. Affected: Apple devices running iOS 13.x (fixed in iOS 13.3.1 and iPadOS 13.3.1) and watchOS 6....

CVE-2020-9838

CVE-2020-9838 is supported by connected Apple advisories: it is an out-of-bounds read in the Bluetooth component of iOS/iPadOS fixed in 13.5. The Apple bulletin notes a remote attacker could cause arbitrary code execution, and remediation is to update to iOS 13.5/iPadOS 13.5. Other sources corrob...

CVE-2020-9842

CVE-2020-9842 is an entitlement parsing issue in Apple's OS stack. The vulnerability arises when parsing entitlements, allowing a malicious application to interact with system processes and potentially access private information or perform privileged actions. The issue has concrete fixes across m...

CVE-2020-9874

CVE-2020-9874 is an out-of-bounds write issue affecting Apple's ImageIO/OpenEXR-related image processing paths. The description in the CVE notes that processing a maliciously crafted image may lead to arbitrary code execution, with fixed versions listed as iOS 13.6 / iPadOS 13.6, macOS Catalina 1...

CVE-2020-9937

CVE-2020-9937 is documented as an out-of-bounds write vulnerability that could allow arbitrary code execution when processing a malicious image. The connected Apple advisories specify affected products and fixed versions: iOS 13.6 and iPadOS 13.6; macOS Catalina 10.15.6; tvOS 13.4.8; watchOS 6.2....

CVE-2021-1738

CVE-2021-1738 is an out-of-bounds write vulnerability in macOS components that process images, enabling arbitrary code execution when handling a malicious image. Apple’s advisory (HT212147) attributes the issue to image processing paths and notes the root cause as an improper input validation/mem...

CVE-2021-1768

CVE-2021-1768 is an out-of-bounds read issue resolved by Apple with improved bounds checking. Fixed in macOS Big Sur 11.2, Catalina 2021-001, Mojave 2021-001, and iOS/iPadOS 14.4. Processing a malicious USD file may cause app termination or arbitrary code execution. No exploitation details are pr...

CVE-2021-1778

CVE-2021-1778 describes an out-of-bounds read in curl triggered while processing a malicious image. The issue is addressed by improved bounds checking and is fixed in Apple platforms: macOS Big Sur 11.2, Catalina Mojave/Big Sur security updates, and iOS/watchOS/tvOS updates (Security Update 2021-...

CVE-2021-30942

CVE-2021-30942 is a memory-corruption vulnerability in ICC profile processing. The entry notes that improved input validation fixes the issue, with the vulnerability affecting Apple OS releases including macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2/iPadOS...

CVE-2021-30957

CVE-2021-30957 is an Apple vulnerability describing a buffer overflow in CoreAudio that could allow arbitrary code execution when processing a malicious audio file. It affects macOS Monterey 12.1 and iOS/iPadOS/watchOS/tvOS releases listed for that fix (e.g., macOS Monterey 12.1, iOS 15.2, iPadOS...

CVE-2022-22622

CVE-2022-22622 concerns an information-disclosure vulnerability in Apple iOS/iPadOS where, on devices with physical access, sensitive information could be exposed via keyboard suggestions. The issue was fixed in iOS 15.4 and iPadOS 15.4 through improved checks/state management. Affected component...

CVE-2022-32926

CVE-2022-32926 affects Apple platforms and was remediated by improved bounds checks. The issue could allow an app with root privileges to execute arbitrary code with kernel privileges. Notable affected systems and fixed releases include: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1, iPadOS 16, tvOS 16....

CVE-2023-27955

CVE-2023-27955 : The issue is fixed in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, and macOS Big Sur 11.7.5. Description states that an app may be able to read arbitrary files; underlying cause is unspecified in the provided documents beyond that it was addressed ...

CVE-2023-32396

The CVE-2023-32396 issue affects Apple platforms and is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17, iPadOS 17, and macOS Sonoma 14. The description states that an app may be able to gain elevated privileges and that the fix involved improved checks. No additional attack vectors or exploit det...

CVE-2023-40395

The CVE-2023-40395 entry concerns multiple Apple platforms (tvOS, iOS, iPadOS, macOS Monterey/Sonoma, watchOS) where an issue in cache handling could allow an app to access contacts. The NVD description states the problem was addressed with improved cache handling and lists fixed versions: tvOS 1...

CVE-2023-41995

CVE-2023-41995 describes a use-after-free vulnerability in Apple kernel components surfaced as memory-management issue. Affected products include iOS 17, iPadOS 17, and macOS Sonoma 14. The flaw may allow an app to execute arbitrary code with kernel privileges, with a local attack vector and user...

CVE-2024-40812

CVE-2024-40812 is a logic issue in Apple software addressed by improved checks and fixed in multiple OS versions. The vulnerability could allow a shortcut to bypass Internet permission requirements, with the fixed versions including iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ve...

CVE-2024-54507

CVE-2024-54507 describes a type confusion in the Apple XNU kernel that could allow a user‑level attacker to read kernel memory. The issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2 through improved memory handling. Connected sources confirm the root cause as a type confusion in the ...

CVE-2025-24178

CVE-2025-24178 affects Apple platforms via a sandbox-escape issue addressed by updates across several OS versions: macOS Ventura 13.7.5; macOS Sequoia 15.4; macOS Sonoma 14.7.5; iOS 18.4; iPadOS 18.4; tvOS 18.4. The root cause is described as improved state management, enabling an app to break ou...

CVE-2025-30438

CVE-2025-30438 affects Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS) where an issue in access restrictions could allow a malicious app to dismiss the Lock Screen notification that a recording was started. The problem is addressed with fixes in iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, ...

CVE-2025-31191

CVE-2025-31191 is a macOS sandbox escape vulnerability fixed in Apple security updates (Ventura 13.7.5, Sequoia 15.4, Sonoma 14.7.5, iOS 18.4, etc.). The connected Microsoft threat research details a sandbox-escape chain abusing security-scoped bookmarks and the keychain. Attackers could leverage...

CVE-2019-8828

CVE-2019-8828 is a memory-corruption vulnerability in Apple’s kernel components. Affected products/versions (per provided docs): iOS 13.3/iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra, tvOS 13.3. Root cause: memory corrup...

CVE-2020-27931

CVE-2020-27931 affects Apple’s FontParser/CoreText stack on macOS/iOS/watchOS/tvOS, where a memory corruption issue in parsing font files can lead to arbitrary code execution. The root cause is an input-validation weakness while processing font data (TTF fonts), enabling maliciously crafted fonts...

CVE-2020-9785

CVE-2020-9785 affects Apple platforms including iOS 13.4, iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and watchOS 6.2. The issue is described as multiple memory corruption problems addressed with improved state management, enabling a malicious application to potentially execute arbitrary code...

CVE-2020-9872

CVE-2020-9872 is an out-of-bounds write in ImageIO that may permit arbitrary code execution when processing a maliciously crafted image. Affected products/versions and fixes are documented in Apple advisories: iOS 13.6 and iPadOS 13.6; macOS Catalina 10.15.6; tvOS 13.4.8; watchOS 6.2.8; iTunes 12...

CVE-2020-9873

CVE-2020-9873 describes an out-of-bounds read in the Apple ImageIO component that could lead to arbitrary code execution when processing a malicious image. The vulnerability is fixed in multiple Apple platform updates, including iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS...

CVE-2020-9926

CVE-2020-9926 describes a use-after-free in memory management when processing XML, addressed in Apple updates. Affected products include iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, and Security Update 2020-004 for Mojave and High Sierra. ...

CVE-2020-9936

CVE-2020-9936 is an out-of-bounds write issue addressed with improved bounds checking. Apple confirms fixes across multiple platforms: iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, and corresponding Windows updates (iTunes 12.10.8 for Windows, iCloud for Windows 11.3...

CVE-2020-9943

CVE-2020-9943 is an out-of-bounds read in Apple’s Audio stack (CoreAudio) that could allow a malicious app to read restricted memory. It was addressed by improved bounds checking and memory handling. The fixed versions include macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0, watchOS 7.0, and tvOS ...

CVE-2020-9967

CVE-2020-9967 affects the macOS kernel. The issue is described as multiple memory corruption problems that were addressed by improved input validation, with fixes in macOS Big Sur 11.0.1 and 11.1, tvOS 14.0, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0...

CVE-2021-1773

CVE-2021-1773 is an ImageIO-related logic issue in macOS/iOS/watchOS/tvOS where processing a maliciously crafted image can cause a denial of service. The root cause is improved state management. It is fixed in Apple updates: macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave,...

CVE-2021-1884

CVE-2021-1884 is a race condition reported in the Heimdal component. Public docs tie it to macOS security updates: Mojave Security Update 2021-004 and Catalina Security Update 2021-003, with potential for a remote attacker to cause a denial of service. The related Apple advisories confirm the aff...

CVE-2021-30924

CVE-2021-30924 is a denial-of-service in the Kernel that can cause a device to unexpectedly restart. The initial description notes a remote attacker can trigger this DoS via kernel state handling issues; the connected Apple advisories confirm the impact, list Kernel as affected, and state the fix...

CVE-2021-30946

CVE-2021-30946 is a logic issue in the macOS LaunchServices component that could allow a malicious app to bypass certain Privacy preferences. The vulnerability is fixed in macOS Monterey 12.1 and is listed as affecting LaunchServices on macOS Big Sur-era releases; related Apple advisories also re...

CVE-2022-22578

CVE-2022-22578 is an Apple platform logic issue related to insufficient validation that could allow a malicious app to gain root privileges. The vulnerability is addressed by patches in tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, and macOS Monterey 12.2. Technical sources (Apple security updat...

CVE-2022-22641

CVE-2022-22641 is a use-after-free issue resolved by memory management fixes in Apple OS updates. It affects tvOS 15.4, iOS 15.4, iPadOS 15.4, and macOS Monterey 12.3, where an app may gain elevated privileges. Remediation per provided documents: update systems to the listed fixed versions (tvOS ...