CVE-2024-54564

The CVE-2024-54564 issue concerns Apple platforms, where a file received over AirDrop may not have the quarantine flag applied due to an improved state-management approach. This affects visionOS 1.3, macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6, where the quarantine handling was addressed and fix...

CVE-2020-9780

CVE-2020-9780 affects Apple iOS/iPadOS Mail: a local attacker may view deleted content in the app switcher due to previews not being cleared when content is deleted. Root cause: previews weren’t cleared, allowing visibility of deleted mail content in the app switcher. Impact is limited to a local...

CVE-2020-9989

CVE-2020-9989 is a local information‑disclosure issue in Apple Messages where a local user may discover another user’s deleted messages. The CVE entry is represented in Apple advisories for macOS Big Sur 11.0.1 and relevant iOS/iPadOS/watchOS updates, with the issue described as fixed by improved...

CVE-2020-9993

CVE-2020-9993 describes an issue where Safari/iOS/watchOS/iPadOS UI handling could allow address bar spoofing when visiting a malicious site. The vulnerability is addressed by updates: watchOS 7.0, Safari 14.0, iOS 14.0, and iPadOS 14.0. The description does not specify exploit details beyond UI-...

CVE-2021-30763

CVE-2021-30763 involves an input-validation issue in ActionKit on Apple iOS/iPadOS. Affected: iOS 14.7 and iPadOS 14.7; impact described as a shortcut that may bypass Internet permission requirements. Root cause: improved input validation fixes address the issue. Mitigation: apply iOS 14.7 / iPad...

CVE-2021-30894

CVE-2021-30894 affects Apple devices (iOS/iPadOS/tvOS) in the Image Processing component. It describes a memory corruption issue that could allow an attacker to execute arbitrary code with kernel privileges. The exploitation is described as local, requiring authentication, with fixes delivered in...

CVE-2022-42846

CVE-2022-42846 concerns a memory handling issue in the Apple graphics driver exposed when parsing a maliciously crafted video file. Affected products include iOS and iPadOS versions prior to the fixed releases (Apple indicates fixes in iOS 16.2 and iPadOS 16.2, and iOS 15.7.2 and iPadOS 15.7.2). ...

CVE-2022-42849

CVE-2022-42849 is an Apple platform privilege-elevation issue where privileged API calls could allow a user to gain higher privileges. The record indicates an access issue in Apple’s software stack that is addressed by applying restrictions and updating to specific releases: iOS 16.2, iPadOS 16.2...

CVE-2023-32394

CVE-2023-32394 affects Apple devices and is fixed in iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, and macOS Ventura 13.4. The issue allowed viewing contact information from the lock screen when the device is physically accessed; Apple attributes this to improved checks in the security content. A...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2024-23214

CVE-2024-23214 involves multiple memory corruption issues in Web content handling. Root cause: improved memory handling fixed in macOS Sonoma 14.3, iOS 16.7.5/iPadOS 16.7.5, and iOS 17.3/iPadOS 17.3, with arbitrary code execution impact if exploited. Connected Nessus entry notes some Linux distri...

CVE-2024-23217

CVE-2024-23217 is a privacy issue affecting Apple platforms where improved handling of temporary files prevents bypassing certain Privacy preferences. The vulnerability is fixed in macOS Sonoma 14.3, watchOS 10.3, iOS 17.3 and iPadOS 17.3. The provided documents describe the issue as a privacy by...

CVE-2024-23291

CVE-2024-23291 describes a privacy issue where a malicious app could observe user data in log entries related to accessibility notifications. Apple devices affected include tvOS 17.4, iOS 17.4, iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4, which addressed this through improved private data re...

CVE-2024-23292

CVE-2024-23292 affects Apple platforms: macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The issue allows an app to access information about a user’s contacts due to inadequate data protection. The root cause is addressed in these updates with improved data protection, and Apple lists the fixed vers...

CVE-2024-27810

CVE-2024-27810 is a path handling issue fixed by improved validation. Affected platforms: iOS/iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Impact stated: an app may read sensitive location information. Remediation: upgrade to the fixed OS versions (iOS/iPadOS 17.5, tvOS 17.5, watchOS ...

CVE-2025-24129

CVE-2025-24129 is a type confusion vulnerability in Apple AirPlay that affects iOS 18.3/iPadOS 18.3, visionOS 2.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Root cause: type confusion in AirPlay code leading to potential application termination. Impact: a remote attacker on the local netwo...

CVE-2025-31213

Summary: CVE-2025-31213 describes a logging issue that could reveal associated usernames and websites from a user’s iCloud Keychain. Apple fixed the flaw in multiple Apple OS updates: iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. Affected software: Apple's iPad...

CVE-2019-8796

CVE-2019-8796 is a logic-issue vulnerability affecting Apple devices where AirDrop transfers could be unexpectedly accepted in Everyone mode. The public details confirm the root cause as flawed validation and indicate fixes in macOS Catalina 10.15.1, Security Update 2019-001 and 2019-006, iOS 12....

CVE-2019-8803

CVE-2019-8803 describes an authentication issue that allows a local attacker to log in to a previously authenticated user’s account without valid credentials. The vulnerability is attributed to improper state management in Apple's App Store account flow. Affected products include Apple platforms ...

CVE-2019-8836

CVE-2019-8836 is a memory corruption vulnerability reported by Apple, affecting Apple devices including iOS/iPadOS, watchOS, tvOS. The issue is fixed in iOS 13.3.1, iPadOS 13.3.1, watchOS 6.1.2, and tvOS 13.3.1. Apple’s security content lists CVE-2019-8836 under entries for components such as IOU...

CVE-2020-9811

CVE-2020-9811 is an information-disclosure issue on Apple platforms where a local user could read kernel memory due to a state-management flaw. Affected products include iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. The vulnerability is fixed in these releases,...

CVE-2020-9814

CVE-2020-9814 is a memory-corruption vulnerability in Apple’s kernel logic, fixed by improved state management. It affects multiple Apple platforms and is capable of allowing a malicious app to execute arbitrary code with kernel privileges. Affected versions are addressed in iOS 13.5/iPadOS 13.5,...

CVE-2020-9852

CVE-2020-9852 — A kernel integer overflow issue was addressed in Apple platforms. The vulnerability was triggered by improper input validation, allowing a malicious app to potentially execute arbitrary code with kernel privileges. The fix is included in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tv...

CVE-2020-9871

CVE-2020-9871: An out-of-bounds write in ImageIO (openEXR handling) may allow arbitrary code execution when processing a malicious image. Affected products include Apple OSes and related apps; Apple’s mitigations are in security updates. Remediation: patch in iOS 13.6/iPadOS 13.6, macOS Catalina ...

CVE-2021-1762

CVE-2021-1762 affects Apple platforms (notably iOS/iPadOS, macOS Big Sur, and related Security Updates) and is caused by an out-of-bounds write when processing malicious USD files. The issue could terminate the application or allow arbitrary code execution. It has been fixed in iOS 14.4 / iPadOS ...

CVE-2021-30966

CVE-2021-30966 is a logic issue in CFNetwork Proxies that could cause user traffic to be leaked to a proxy server despite PAC configurations. Public details in Apple security updates show the issue affects macOS Monterey 12.1 (and related updates for other Apple platforms) and was addressed in Mo...

CVE-2022-32944

CVE-2022-32944 is a memory corruption vulnerability that can allow an app to execute arbitrary code with kernel privileges. The issue is addressed by fixes across multiple Apple platforms: tvOS 16.1, iOS 15.7.1/iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1/iPadOS 16, macOS Monterey 12.6....

CVE-2022-42800

CVE-2022-42800 affects Apple platforms including iOS, iPadOS, macOS, watchOS and related OS updates. The issue is mitigated by Apple through updated builds: iOS/iPadOS 15.7.1, iOS 16.1, macOS Ventura 13 (and Monterey 12.6.1, Big Sur 11.7.1), watchOS 9.1, with the fix described as improved checks ...

CVE-2023-32384

CVE-2023-32384 affects Apple operating systems including watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and 16.5, and iPadOS 15.7.6 and 16.5. The issue is a buffer overflow triggered during image processing, with the root cause stated as improv...

CVE-2023-40392

The CVE-2023-40392 entry concerns a privacy issue in macOS where an app may be able to read sensitive location information due to inadequate redaction in log entries. The Red Hat/Apple/NVD entries align on: affected platform is macOS, specifically macOS Ventura 13.5 and earlier in the context of ...

CVE-2023-42969

CVE-2023-42969 describes a sandbox escape whereby an app may break out of its sandbox due to improper handling of caches. Affected platforms include iOS and iPadOS prior to 17, and macOS prior to the listed versions ( Sonoma 14, Ventura 13.6, Monterey 12.7). Apple fixed the issue in iOS 17/iPadOS...

CVE-2024-23211

CVE-2024-23211 concerns a privacy issue in Apple software where a user’s private browsing activity could be visible in Settings. The issue is addressed in updates across multiple Apple platforms: watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, and iOS 16.7.5 / iPadOS 16.7.5, Safari 17....

CVE-2025-24131

CVE-2025-24131 is an AirPlay vulnerability affecting Apple devices. A memory handling issue could allow a privileged attacker on the local network to cause a denial-of-service. The vulnerability is addressed in Apple security updates: iOS/iPadOS 18.3, visionOS 2.3, macOS Sonoma 14.7.5 (and relate...

CVE-2025-24243

CVE-2025-24243 is an Apple memory-management issue where processing a maliciously crafted file may lead to arbitrary code execution. It affects multiple platforms and is fixed in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, vision...

CVE-2025-30430

CVE-2025-30430 affects Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Description states password autofill may fill in passwords after a failed authentication, due to an issue in state management. The CVE’s matrix (CVSS v3.1) indicates a critical impact (base score ...

CVE-2025-31192

Summary: CVE-2025-31192 is an Apple Safari-related issue resolved by updated software. The vulnerability could allow a website to access sensor information without user consent. Affected/Root Cause (as per connected docs): Apple Safari and WebKit components exposed a sensor-access behavior that c...

CVE-2025-31202

CVE-2025-31202 affects Apple platforms via AirPlay components (e.g., AirPlay in Vision Pro, iOS/iPadOS, macOS, tvOS, visionOS). Root cause: a null pointer dereference fixed by input validation improvements. Impact: attacker on the local network can cause a denial-of-service. Affected versions inc...

CVE-2026-28940

CVE-2026-28940 affects Apple platforms via a memory-corruption flaw when processing maliciously crafted images. According to connected advisories, the vulnerability is addressed in: iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5; macOS Sequoia 15.7.7; macOS Tahoe 26.5; tvOS 26.5; and visi...

CVE-2026-64733

CVE-2026-64733 is an Apple platform vulnerability affecting the Accounts framework on iOS/iPadOS, with fingerprinting of the user possible prior to the 26.6 releases. The issue is addressed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected adviso...

CVE-2020-29615

CVE-2020-29615 affects Apple platforms (watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3) with an out-of-bounds read in image processing. The issue was addressed by improved input validation; processing a mali...

CVE-2020-3859

CVE-2020-3859 describes an inconsistent user interface issue in iOS that could allow a person with physical access to an iPhone or iPad to access contacts from the lock screen. The root cause is stated as ineffective state management; Apple fixed this in iOS 13.3.1 / iPadOS 13.3.1. The Apple advi...

CVE-2020-9880

CVE-2020-9880 describes a buffer overflow in Apple’s Model I/O handling of USD files. The root cause is an overflow that was addressed by improved bounds checking. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS: specifically iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6,...

CVE-2020-9980

CVE-2020-9980 is an out-of-bounds write vulnerability in FontParser that could allow arbitrary code execution when parsing a malicious font file. The connected Apple advisories show affected components across multiple Apple platforms (macOS, iOS/iPadOS, tvOS, watchOS) and specify the fix in iOS 1...

CVE-2021-30764

CVE-2021-30764 is an Apple ImageIO vulnerability that may allow arbitrary code execution when parsing a malicious image/file. The issue is described across Apple OS updates (iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5) with fixes implemented via improved input validation and checks. Connected do...

CVE-2021-30792

CVE-2021-30792 is an out-of-bounds write vulnerability in image processing that can cause arbitrary code execution when processing a specially crafted image. It is fixed in iOS 14.7 and macOS Big Sur 11.5. According to the provided sources, exploitation would require processing a malicious image,...

CVE-2022-22673

CVE-2022-22673 affects Apple iOS/iPadOS Notes input handling. The issue is an input-validation weakness that can cause a denial of service when processing a large input. Apple fixed it in iOS 15.5 / iPadOS 15.5. In public sources, the vulnerability is described as a processing of oversized input ...

CVE-2023-27940

CVE-2023-27940 affects Apple platforms (iOS 15.7.6 and iPadOS 15.7.6; macOS Monterey 12.6.6; macOS Ventura 13.4). The issue is due to insufficient permissions checks in a kernel component, allowing a sandboxed app to observe system-wide network connections. Apple’s bulletin states the vulnerabili...

CVE-2023-27956

The CVE-2023-27956 issue concerns the FontParser component on Apple platforms. It describes a memory handling flaw that, when processing a maliciously crafted image, could disclose process memory. Affected products/versions include macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPad...

CVE-2023-28194

The CVE-2023-28194 issue pertains to Apple iOS/iPadOS where an app may be able to unexpectedly create a bookmark on the Home Screen via Safari/WebKit handling. The connected documents indicate a vulnerability in Safari (CVE-2023-28194) with the root cause described as issues addressed by improved...

CVE-2023-42846

CVE-2023-42846 relates to a vulnerability in Apple devices where the mDNSResponder component could allow passive tracking of a device by its Wi-Fi MAC address. The issue was mitigated by removing the vulnerable code and is fixed in watchOS 10.1, iOS 16.7.2 / iPadOS 16.7.2, tvOS 17.1, and iOS 17.1...