CVE-2022-32938

CVE-2022-32938 affects Apple Shortcuts handling of directory paths. A parsing issue allowed a shortcut to check for the existence of an arbitrary path on the file system. Affected products/versions: iOS 16.1 and iPadOS 16; macOS Ventura 13. The issue is mitigated by the vendor’s fix through impro...

CVE-2023-42922

The CVE-2023-42922 issue affects Apple platforms (macOS and iOS/iPadOS) and involves an app potentially reading sensitive location information due to insufficient redaction. The vulnerability is addressed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2, and iOS/iPadOS 17.2 and 1...

CVE-2024-23283

CVE-2024-23283 describes a privacy issue where private data was not properly redacted in log entries. The NVD entry states the issue is fixed in iOS 16.7.6, iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, and macOS Ventura 13.6.5, addressing a potential exposure of user‑sensitive data. T...

CVE-2024-27847

CVE-2024-27847 affects Apple platforms (iOS/iPadOS/macOS) with a Privacy Preferences bypass due to insufficient checks. The issue is addressed in iOS/iPadOS 17.5 and macOS Sonoma 14.5; update to these or newer releases to mitigate. The NVD score indicates a medium to high impact depending on vect...

CVE-2025-24180

CVE-2025-24180 affects Apple Safari (and related Apple OS components: visionOS 2.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). The issue arises from insufficient input validation that could allow a malicious website to claim WebAuthn credentials from another site sharing a registrable suffix. Th...

CVE-2025-30447

CVE-2025-30447 affects multiple Apple platforms (visionOS, macOS Ventura, tvOS, iPadOS, iOS, macOS Sequoia, macOS Sonoma). The issue stems from inadequate handling in logging that could allow an app to access sensitive user data; the root cause is described as improper sanitization of logging. It...

CVE-2025-31191

CVE-2025-31191 is a macOS sandbox escape vulnerability fixed in Apple security updates (Ventura 13.7.5, Sequoia 15.4, Sonoma 14.7.5, iOS 18.4, etc.). The connected Microsoft threat research details a sandbox-escape chain abusing security-scoped bookmarks and the keychain. Attackers could leverage...

CVE-2025-43433

The CVE-2025-43433 issue affects Apple software where processing maliciously crafted web content may lead to memory corruption. Apple published fixes across multiple platforms (tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, Safari 26.1, and iOS/iPadOS 18.7.2) with the underlyin...

CVE-2026-64782

The vulnerability resides in the WebKit component of Apple platforms. A memory corruption issue was addressed with improved locking. Processing maliciously crafted web content may cause an unexpected Safari crash. Fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26...

CVE-2026-65332

CVE-2026-65332 is a state management vulnerability in WebKit , the browser engine powering Safari . Processing maliciously crafted web content can lead to an unexpected Safari crash (denial of service). The issue was reported by OpenAI Codex Security (Amy Burnett) and tracked under WebKit Bugzill...

CVE-2019-8797

CVE-2019-8797 is a memory corruption vulnerability that Apple fixed in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1. The issue could allow an application to execute arbitrary code with system privileges as a result of memory handling problems. The NVD entry provides ...

CVE-2020-27948

The CVE-2020-27948 entry concerns an out-of-bounds write vulnerability in CoreAudio that could allow arbitrary code execution when processing a malicious audio file. Affected Apple platforms and releases include watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2...

CVE-2020-3836

CVE-2020-3836 is an Apple kernel memory-management issue disclosed as an access problem that could allow a malicious, local app to determine the kernel memory layout. The vulnerability affects multiple Apple OSes: iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. ...

CVE-2020-3911

CVE-2020-3911 is a buffer overflow in libxml2 that was addressed by improved bounds checking and size validation. The issue affects multiple Apple platforms and components, with fixes shipped in iOS 13.4/iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, and related Apple updates for Wi...

CVE-2020-9791

CVE-2020-9791 affects Apple devices (iOS/iPadOS 13.5; macOS Catalina 10.15.5; tvOS 13.4.5; watchOS 6.2.5) and concerns processing of a maliciously crafted audio file. The underlying issue is an out-of-bounds read that was addressed by improved input validation. The vulnerability could lead to arb...

CVE-2020-9979

CVE-2020-9979 affects Apple platforms (iOS, iPadOS, tvOS) where a trust issue was addressed by removing a legacy API. The Apple advisories indicate the issue could allow an attacker to misuse a trust relationship to download malicious content. Remediation provided in the public disclosures is upg...

CVE-2021-30733

CVE-2021-30733 affects Apple devices and platforms via a vulnerability in font processing that can cause an out-of-bounds read and disclose process memory. The issue is mitigated by input validation improvements and is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, an...

CVE-2022-46720

CVE-2022-46720 affects Apple platforms (iOS 16.2, iPadOS 16.2, macOS Ventura 13.1). Root cause: integer overflow mitigated by improved input validation in dyld, with the issue described as allowing an app to break out of its sandbox. Impact: sandbox escape if exploited. Exploitation details are n...

CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2023-42899

CVE-2023-42899 concerns an issue in Apple software where processing an image may lead to arbitrary code execution due to improved memory handling. The fixed products/versions include macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2, iOS 16.7.3 and iOS 17.2, iPadOS 16.7.3 and iPadOS ...

CVE-2024-23203

CVE-2024-23203 affects Apple Shortcuts on macOS Sonoma 14.3, iOS 17.3, and iPadOS 17.3. A shortcut may access sensitive data via certain actions without prompting the user. Root cause: insufficient permissions checks; fixed by additional permissions checks. Remediation: update to macOS Sonoma 14....

CVE-2024-23204

CVE-2024-23204 affects macOS Shortcuts (and related OSes) with a root cause of insufficient permissions checks that could allow a shortcut to access sensitive data via certain actions without prompting the user. The issue is fixed in macOS Sonoma 14.3 and across watchOS 10.3, iOS 17.3 and iPadOS ...

CVE-2024-27815

The CVE-2024-27815 entry describes an out-of-bounds write vulnerability that was addressed by Apple with improved input validation. Affected platforms and fixed versions include tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. The issue could allow an app to...

CVE-2024-27841

CVE-2024-27841 describes a memory handling issue in Apple platforms that may allow an app to disclose kernel memory. The vulnerability is addressed in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. Impact is described as potential kernel memory disclosure; no exploitation details are provided in t...

CVE-2024-44207

CVE-2024-44207 affects Apple iOS/iPadOS where Audio messages in Messages could capture a few seconds of audio before the microphone indicator activates. The issue is attributed to the Media Session component and was addressed with improved checks; Apple fixes it in iOS 18.0.1 and iPadOS 18.0.1 fo...

CVE-2025-24097

The CVE-2025-24097 entry concerns a permissions issue that could allow an app to read arbitrary file metadata. Affected products include macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is a permissions restriction flaw described as “additional rest...

CVE-2025-30456

CVE-2025-30456 involves a parsing issue in how directory paths are handled. Apple fixed it with improved path validation in macOS Ventura 13.7.5, macOS Sonoma 14.7.5, macOS Sequoia 15.4, and iOS/iPadOS 18.4. The issue could allow an app to gain root privileges. Affected component/firmware version...

CVE-2026-65337

WebKit in Safari, iOS/iPadOS, and macOS Tahoe had a state management flaw exploitable by malicious web content, causing an unexpected Safari crash. CVSS 4.3 (Medium) reflects network access with user interaction required and low availability impact. No in-the-wild exploitation is reported. Fixes ...

CVE-2020-9884

CVE-2020-9884 affects Apple platforms and is tied to an out-of-bounds write in audio processing. The issue could allow arbitrary code execution when parsing a maliciously crafted audio file. Apple patched it in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8 by impro...

CVE-2020-9890

CVE-2020-9890 is an out-of-bounds read in the Apple Audio stack that could allow code execution when processing a maliciously crafted audio file. It is fixed in iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The linked Apple and NVD entries confirm the vulnerabili...

CVE-2020-9891

CVE-2020-9891 corresponds to an out-of-bounds read in audio processing that could lead to arbitrary code execution when processing a maliciously crafted audio file. Apple fixed this issue in iOS/iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8 by improving bounds checking. The ...

CVE-2020-9919

CVE-2020-9919 describes a buffer overflow in image processing surfaces across Apple platforms. The issue affects components such as ImageIO and CoreGraphics (and related image-processing paths) and is triggered by processing maliciously crafted images, potentially allowing arbitrary code executio...

CVE-2020-9938

CVE-2020-9938: An out-of-bounds read was addressed with improved input validation. Affects Apple platforms and apps processing images: iOS/iPadOS 13.6, macOS Catalina 10.15.x, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3/7.20. Processing a maliciously crafted im...

CVE-2020-9969

CVE-2020-9969 affects macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. Description from Apple Security Advisories shows an access issue that allowed a local user to view sensitive information, addressed by applying additional sandbox restrictions. The remediation is upgradi...

CVE-2021-1781

CVE-2021-1781 is a privacy issue in how Apple devices handle Contact cards. The flaw could allow a malicious application to leak sensitive user information. The vulnerability is mitigated by state-management improvements and is fixed in macOS Big Sur 11.2, Security Update 2021-001 for Catalina an...

CVE-2021-1787

CVE-2021-1787 corresponds to multiple Apple macOS/iOS/watchOS/tvOS/iPadOS vulnerabilities addressed by Apple in Security Update 2021-001 and related patches. The Initial description notes a set of issues fixed in macOS Big Sur 11.2, Catalina 11.2, Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4, an...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2021-30926

CVE-2021-30926 is a memory corruption issue in ICC profile processing that could lead to arbitrary code execution when handling a malicious image. Apple attributes the root cause to improper input validation during ICC profile processing, and fixes were released in macOS Monterey 12.1 and corresp...

CVE-2022-22672

CVE-2022-22672 : A memory corruption issue was addressed with improved memory handling. It affects Apple platforms and is fixed in iOS 15.4, iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, and macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code...

CVE-2022-32855

CVE-2022-32855 is an Apple vulnerability affecting the iOS/iPadOS Home component, caused by a logic issue in state management that could allow a user to view restricted content from the lock screen. Apple fixed this with iOS 15.6 and iPadOS 15.6. The CVE is documented across multiple feeds (NVD, ...

CVE-2022-42820

CVE-2022-42820 is a memory corruption issue affecting Apple IOHIDFamily components, addressed by Apple in the macOS Ventura 13 security updates and iOS 16.1 / iPadOS 16. The issue could lead to an app termination or arbitrary code execution. The official Apple advisory references IOHIDFamily and ...

CVE-2022-42851

CVE-2022-42851 involves an information disclosure vulnerability in Apple's ImageIO/TIFF handling that is fixed in iOS 16.2, iPadOS 16.2, and tvOS 16.2. The root cause is described as improved memory handling during parsing of maliciously crafted TIFF files, which may lead to disclosure of user in...

CVE-2023-23528

CVE-2023-23528 corresponds to an out-of-bounds read in Core Bluetooth that could disclose process memory when processing a malicious Bluetooth packet. The vulnerability affects Apple devices running tvOS, iOS, and iPadOS and is addressed with improved bounds checking in the 16.4 updates. Affected...

CVE-2023-27936

CVE-2023-27936 is an out-of-bounds write vulnerability in Apple OS components where insufficient input validation can lead to an app causing unexpected system termination or writes to kernel memory. Affected: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, and iOS/iPadOS 15.7.4. ...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2023-27949

CVE-2023-27949 describes an out-of-bounds read that was mitigated by improved input validation. Affected platforms include macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4; processing a maliciously crafted file may terminate the app or execute arbitrary code. The connected ...

CVE-2023-32420

CVE-2023-32420 is an out-of-bounds read vulnerability reported in Apple’s IOSurfaceAccelerator (noted within watchOS/WebKit-related advisories) that can allow an app to cause unexpected system termination or read kernel memory. The issue is mitigated by improved input validation and is fixed in i...

CVE-2023-41968

The CVE-2023-41968 issue affects Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, watchOS 10, iOS 17 and iPadOS 17. Root cause is improved validation of symlinks, enabling an app to read arbitrary files. Remediations are included in the listed OS versions; no ex...

CVE-2023-42962

CVE-2023-42962 is a denial-of-service issue affecting Apple iOS/iPadOS involving the CallKit component. Public sources indicate the vulnerability can be triggered remotely (no user interaction) and is fixed in iOS 17.2/iPadOS 17.2 and in iOS 16.7.3/iPadOS 16.7.3. Practical impact is DoS; no explo...

CVE-2024-27821

CVE-2024-27821 is a path-handling vulnerability affecting Apple Shortcuts on macOS Sonoma 14.5 and iOS/iPadOS 17.5 (and related watchOS/macOS versions). The issue allowed a shortcut to output sensitive user data without user consent due to insufficient validation. Apple’s security content indicat...