CVE-2023-42941

The CVE-2023-42941 issue affects Bluetooth handling in iOS 17.2 and iPadOS 17.2. The root cause is insufficient checks in Bluetooth packet processing that allow an attacker in a privileged network position to trigger a denial-of-service condition. Affected software is Apple iOS 17.2 and iPadOS 17...

CVE-2024-23262

The CVE-2024-23262 issue affects Apple visionOS (and related iOS/iPadOS versions). Root cause: the vulnerability stems from insufficient entitlement checks that could allow an app to spoof system notifications and UI. Impact is described in Apple advisories as an ability to impersonate UI element...

CVE-2024-40785

CVE-2024-40785 is addressed in SUSE/openSUSE webkit2gtk3 updates. The vulnerability is fixed by upgrading webkit2gtk3 to version 2.44.3 (SUSE-SU-2024:3109-1 / SUSE-SU-2024:3091-1), with CVEs including 40776, 40779, 40780, 40782, 40785, 40789, 40794, 4558. The OSV entry confirms the fix in the web...

CVE-2024-40786

CVE-2024-40786 is an Apple vulnerability addressed by state-management improvements. The issue affects Apple devices and is fixed in iOS 16.7.9, iPadOS 16.7.9, iOS 17.6, iPadOS 17.6, and macOS Ventura 13.6.8. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low...

CVE-2024-40829

CVE-2024-40829 affects Apple platforms (watchOS, iOS/iPadOS, macOS) where an attacker may view restricted content from the lock screen. Root cause is described as the issue being addressed with improved checks. Remediations are available via patches: watchOS 10.6; iOS 17.6/iPadOS 17.6; iOS 16.7.9...

CVE-2025-24211

CVE-2025-24211 affects Apple media processing related to handling a crafted video file. The issue stems from memory management in video processing, which could lead to an app termination or memory corruption. Apple has addressed the vulnerability in multiple platforms and versions: visionOS 2.4, ...

CVE-2025-30425

CVE-2025-30425 affects Apple Safari and related OS components. A state-management issue in Safari’s handling of private browsing could allow a malicious website to track users in Private Browsing mode. The root cause is described as an issue with state management; no exploitation details are prov...

CVE-2025-30429

CVE-2025-30429 : A path handling issue with insufficient validation allowed an app to break out of its sandbox. The vulnerability is addressed in Apple platforms: visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. T...

CVE-2025-30467

CVE-2025-30467 affects Apple Safari (and related Apple platforms) with an address bar spoofing vulnerability. The available documents indicate the issue occurs when visiting a malicious website that can spoof the address bar, potentially confusing users about the site they are on. Apple’s patches...

CVE-2026-65340

CVE-2026-65340 is a WebKit state management vulnerability in Apple's Safari browser. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed through improved state management (WebKit Bugzilla: 316996). Affected products includ...

CVE-2019-8798

CVE-2019-8798 is a memory corruption vulnerability reported in Apple OS components that could allow an application to execute arbitrary code with system privileges. The NVD and Red Hat records mirror the Apple advisory, noting fixes in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, an...

CVE-2020-10016

CVE-2020-10016 is a memory corruption issue addressed via improved state management. It is fixed in macOS Big Sur 11.0.1, iOS 14.2 / iPadOS 14.2, tvOS 14.2, and watchOS 7.1, with potential for arbitrary code execution with kernel privileges as described by Apple advisories and related Red Hat enr...

CVE-2020-29610

CVE-2020-29610 is an out-of-bounds read vulnerability in Apple's media stack, specifically impacting AudioToolboxCore MP4 parsing. The issue could disclose restricted memory when processing a maliciously crafted audio file. Affected products include Apple platforms on macOS Big Sur 11.1, watchOS ...

CVE-2020-9797

CVE-2020-9797 is an information-disclosure issue in Apple OS components (notably kernel-related paths) that could allow a malicious app to determine another app’s memory layout. Public guidance across Connected Apple advisories shows the fix implemented by removing vulnerable code, with updates d...

CVE-2020-9950

CVE-2020-9950: A use-after-free issue addressed in WebKit that affects Apple platforms. According to the initial record, the vulnerability could be triggered by processing malicious web content and may lead to arbitrary code execution. Affected products/contexts include watchOS 7.0, tvOS 14.0, Sa...

CVE-2020-9962

CVE-2020-9962 is associated with Apple macOS FontParser. The vulnerability allowed a buffer overflow when processing a malicious font file, due to insufficient size validation in the FontParser component. This could enable arbitrary code execution. The issue is fixed in macOS Big Sur 11.0.1, with...

CVE-2020-9963

CVE-2020-9963 is fixed in macOS Big Sur 11.0.1, iOS 14.0, and iPadOS 14.0. The issue arises from icon-cache handling, where a malicious app could determine whether files exist on the host. The RedHat/Apple documentation attributes the fix to improved handling of icon caches. Practical impact is i...

CVE-2020-9975

CVE-2020-9975 is a use-after-free memory corruption issue that, if exploited, could allow an attacker to execute arbitrary code with kernel privileges. Public details in the initial description indicate this vulnerability affects macOS kernel (XNU) and related Apple OS components, with root cause...

CVE-2021-30752

The CVE-2021-30752 issue affects Apple platforms including macOS Big Sur 11.3, iOS 14.5 / iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Description indicates that Processing a maliciously crafted image could lead to arbitrary code execution, caused by an out-of-bounds read that was addressed with impr...

CVE-2021-30811

CVE-2021-30811 is an Apple security issue affecting iOS/iPadOS, watchOS with the AppleMobileFileIntegrity component. The underlying problem enabled a local attacker to read sensitive information. The CVE is fixed by Apple in iOS 15/iPadOS 15 and watchOS 8, addressing the issue through improved ch...

CVE-2021-31001

According to the sources, CVE-2021-31001 is an access issue in iOS/iPadOS Telephony that could allow an attacker in a privileged network position to leak sensitive user information. The vulnerability is addressed in iOS 15 and iPadOS 15. Connected documents (Red Hat, PT Security, CNNVD, etc.) con...

CVE-2022-22584

CVE-2022-22584 is a memory corruption vulnerability in Apple software where improved validation addresses the issue. The flaw could allow arbitrary code execution when processing a maliciously crafted file. Fixed in the following official updates: tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, an...

CVE-2022-42793

CVE-2022-42793 concerns a vulnerability where code signing validation could be bypassed due to inadequate checks. The issue affects Apple platforms and was addressed by improving code signing validation in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7, iPadOS 15.7, and macOS Monterey 12....

CVE-2023-27946

CVE-2023-27946 describes an out-of-bounds read fixed by Apple in macOS Ventura 13.3, iOS 15.7.4, iPadOS 15.7.4, macOS Monterey 12.6.4, and macOS Big Sur 11.7.5. The issue could cause unexpected termination or arbitrary code execution when processing a maliciously crafted file. Affected components...

CVE-2023-32352

CVE-2023-32352 is a logic issue in Apple's Gatekeeper checks that may allow an app to bypass Gatekeeper verification. The issue is fixed in: watchOS 9.5; macOS Ventura 13.4; macOS Big Sur 11.7.7; macOS Monterey 12.6.6; iOS 16.5; iPadOS 16.5. No exploitation status is provided in the supplied docu...

CVE-2023-40399

Apple CVE-2023-40399 affects multiple Apple platforms (tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14). The issue is described as a memory handling defect that may allow an app to disclose kernel memory. The fixed versions are explicitly listed in the NVD entry and Apple advisory content...

CVE-2023-42893

CVE-2023-42893 is a permissions issue on Apple platforms that could allow an app to access protected user data. The root cause involved vulnerable code and insufficient checks, which Apple fixed by removing the vulnerable code and adding additional checks. Affected and fixed versions (per provide...

CVE-2024-27811

CVE-2024-27811 affects Apple platforms and is described as a privilege-escalation issue resolved by Apple in versions: tvOS 17.5, visionOS 1.2, iOS 17.5 & iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. The description indicates the fix involved improved checks. Connected sources (Apple security co...

CVE-2024-44155

CVE-2024-44155 affects Apple Safari and related OS components via a custom URL scheme handling issue. The root cause is improved input validation, addressing a vulnerability that could allow malicious web content to violate the iframe sandboxing policy. Public details indicate the fix is applied ...

CVE-2025-24202

CVE-2025-24202 affects Apple operating systems (iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). Root cause: a logging issue with insufficient data redaction in the logging subsystem. Impact: an app may access sensitive user data due to improper logging handling. Remediation: fixed in the listed patch...

CVE-2026-28864

CVE-2026-28864 concerns a permissions-checking issue in Apple OS components that could allow a local attacker to access a user’s Keychain items. The CVE is addressed in iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, an...

CVE-2026-65329

CVE-2026-65329 affects the Telephony framework on iOS 26.6.1/iPadOS 26.6.1 (iPhone 11+), where an authentication issue in IPSec state management allowed a privileged-network-position attacker to bypass IPSec authentication and intercept network traffic; fixed via improved state management. No exp...

CVE-2026-65336

CVE-2026-65336 is a state management flaw in WebKit , the web engine used by Safari and other Apple products. Processing maliciously crafted web content can trigger an unexpected Safari crash , resulting in a denial-of-service condition. The issue was identified by Josef Korbel (WebKit Bugzilla 3...

CVE-2019-8799

CVE-2019-8799 affects Apple’s mDNSResponder across Apple platforms (iOS/iPadOS, macOS Catalina, watchOS, tvOS). Root cause: AWDL communications may disclose device names to nearby observers. Resolution: devices updated to replace device names with a random identifier; fixed in iOS 13.1/iPadOS 13....

CVE-2020-3828

CVE-2020-3828 is an Apple iOS/iPadOS vulnerability where physical access to a locked device could allow a user to access contacts due to a lock-screen state-management issue. The issue is resolved in iOS 13.3.1 and iPadOS 13.3.1, as documented by Apple (HT210918) and reflected in multiple CVE ind...

CVE-2020-9809

CVE-2020-9809 describes an information-disclosure issue in Apple systems where a malicious application could determine the kernel memory layout. The vulnerability is addressed by fixes in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, indicating a defense-in-dep...

CVE-2020-9885

CVE-2020-9885 concerns iMessage tapbacks handling. The issue allowed a removed user from an iMessage group to rejoin the group, and Apple fixed it by adding verification. Affected platforms include iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. Remediation is to...

CVE-2021-1785

CVE-2021-1785 describes an out-of-bounds read that was addressed by improved input validation in Apple platforms. The fix applies to macOS Big Sur 11.2, Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. The vulnerability could allow arbitrary cod...

CVE-2021-30914

CVE-2021-30914 affects Apple iOS/iPadOS GPU Drivers. The issue is a memory corruption vulnerability caused by improper input handling, with potential for an application to execute arbitrary code with kernel privileges. Apple confirms the fix in iOS 15.1 and iPadOS 15.1. In the available documents...

CVE-2022-22585

CVE-2022-22585 affects Apple platforms via a path validation/symlink handling issue. The root cause is inadequate path sanitization, allowing an application to access a user’s files. The vulnerability is fixed in iOS 15.3, iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, and macOS Big Su...

CVE-2022-42844

CVE-2022-42844 affects Apple iOS and iPadOS via a memory-handling issue that could allow an app to break out of its sandbox. The Red Hat and NVD entries corroborate the same description and indicate the fix is included in iOS 16.2 and iPadOS 16.2. Connected sources do not reveal additional exploi...

CVE-2023-28826

CVE-2023-28826 affects Apple platforms, where an application may access sensitive user data due to improved redaction of information. The issue is addressed in iOS/iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, and macOS Ventura 13.6.5. CVSSv3.1 vector: LOCAL access, LOW attack complexi...

CVE-2023-35990

CVE-2023-35990 affects Apple platforms (iOS, iPadOS, watchOS, macOS Sonoma) where an app could determine which other apps are installed on the device. The issue is mitigated by Apple’s fixes in iOS 17/iPadOS 17, watchOS 10, iOS 16.7/iPadOS 16.7, and macOS Sonoma 14. The root cause is linked to in...

CVE-2023-40452

CVE-2023-40452 affects multiple Apple platforms (macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS/iPadOS 17, tvOS 17, watchOS 10). The root cause is improved bounds checks, and the issue allows an app to overwrite arbitrary files. The vulnerability is fixed in the listed OS versions;...

CVE-2023-41070

CVE-2023-41070 is an Apple vulnerability: a logic issue in the sharing flow could allow an app to access sensitive data logged when a user shares a link. Affected products include macOS (Ventura 13.6 and Sonoma 14), iOS (16.7 and 17), iPadOS (16.7 and 17), and watchOS (10). The issue is fixed in ...

CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2023-42914

CVE-2023-42914 is an Apple sandbox-related issue addressed by improved memory handling. Affected platforms include macOS Ventura 13.6.3, macOS Monterey 12.7.2, macOS Sonoma 14.2, iOS 16.7.3 and 17.2 (and iPadOS 16.7.3 and 17.2), watchOS 10.2, and tvOS 17.2. The fixed versions indicate a sandbox e...

CVE-2024-44274

CVE-2024-44274 is an Apple OS vulnerability affecting the Accessibility component that could allow an attacker with physical access to a locked device to view sensitive user information. The issue is mitigated by improved authentication and is fixed in: iOS 17.7.1, iPadOS 17.7.1, watchOS 11.1, iO...

CVE-2025-43228

CVE-2025-43228 affects Apple WebKit components used by iOS 18.6, iPadOS 18.6, and Safari 18.6. The description indicates the issue was mitigated by an improved UI and is fixed in the listed Apple platforms. The primary impact stated is address bar spoofing when a user visits a malicious website, ...

CVE-2026-43742

CVE-2026-43742 describes a use-after-free vulnerability tied to processing malicious web content, addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected sources enumerate affected components including WebKit (and WebKit subareas like W...