CVE-2026-43742

CVE-2026-43742 describes a use-after-free vulnerability tied to processing malicious web content, addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected sources enumerate affected components including WebKit (and WebKit subareas like W...

CVE-2020-10010

CVE-2020-10010 describes a path handling issue that affects macOS and related Apple OS components, with a local attacker able to elevate privileges due to insufficient path validation. The issue is addressed by improved validation in the code paths involved, and is fixed in Apple platforms as fol...

CVE-2020-10017

CVE-2020-10017 is an out-of-bounds write in Apple's audio handling that could allow arbitrary code execution. Apple’s advisories (HT211929/HT211930) state the issue affects CoreAudio across macOS Big Sur 11.0.x and iOS/iPadOS 14.2 (also tvOS 14.2 and watchOS 7.1), with fixed patches in those OS u...

CVE-2020-9823

The CVE-2020-9823 issue affects Apple iOS/iPadOS Messages, where after being removed from an iMessage conversation an attacker may still alter the conversation state. Apple’s advisory indicates the root cause was addressed by improved checks, and the fix is delivered in iOS 13.5 and iPadOS 13.5. ...

CVE-2020-9826

CVE-2020-9826 is an input-validation related DoS in Apple platforms. Apple’s security entries (iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5) indicate a remote attacker can cause a denial of service by exploiting an input validation flaw. Root cause: improper input validation that leads to abnorm...

CVE-2020-9909

CVE-2020-9909 represents an Apple kernel vulnerability: an out-of-bounds read fixed in iOS 13.6 / iPadOS 13.6 / tvOS 13.4.8 / watchOS 6.2.8. Root cause: improved bounds checking in the Kernel component; impact: an attacker who already has kernel code execution could potentially bypass kernel memo...

CVE-2020-9960

CVE-2020-9960 affects Apple platforms (macOS Big Sur 11.x, macOS Catalina 10.15.x, tvOS 14.0, watchOS 7.0, iOS 14.0, iPadOS 14.0). The root cause is an out-of-bounds read in the audio processing path, addressed by improved input validation. The vulnerability could allow arbitrary code execution t...

CVE-2020-9965

CVE-2020-9965 is an out-of-bounds read in Disk Images that Apple fixes with improved input validation across macOS Big Sur 11.0.1 and related OS versions (watchOS 7.0, tvOS 14.0, iOS/iPadOS 14.0). The bulletin notes that an affected application may be able to execute arbitrary code with kernel pr...

CVE-2020-9984

CVE-2020-9984 concerns Apple ImageIO impacting processing of a malicious image that could lead to arbitrary code execution. The issue is an out-of-bounds read addressed by improved input validation and is fixed in macOS Catalina 10.15.6, iOS 13.6, iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 1...

CVE-2021-30771

The CVE-2021-30771 entry affects Apple’s FontParser component (macOS Big Sur 11.4, iOS 14.6/iPadOS 14.6, watchOS 7.5, tvOS 14.6). It is caused by an out-of-bounds write when processing a maliciously crafted font file, with the impact described as arbitrary code execution. Apple’s advisory indicat...

CVE-2021-30820

CVE-2021-30820 is a logic issue in Apple’s iOS/iPadOS Bluetooth stack that could allow a remote attacker to execute arbitrary code. Apple’s security content (iOS 14.8/iPadOS 14.8) states the flaw was fixed in these updates, with the issue described as a logic/state-management problem within Bluet...

CVE-2021-30840

This CVE (CVE-2021-30840) concerns Apple’s FontParser handling of dfont files. A maliciously crafted dfont could lead to arbitrary code execution due to a vulnerability in font processing. Apple indicates the issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Connected sources also align...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2021-30973

CVE-2021-30973 is an out-of-bounds read vulnerability addressed by improved input validation. The issue, which could disclose user information when processing a maliciously crafted file, is fixed in Apple platforms: macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, and Security...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2022-32949

CVE-2022-32949 : Apple lists this as an issue affecting iOS/iPadOS with the impact that an app may be able to execute arbitrary code with kernel privileges. The Apple security content for iOS 15.7.1 / iPadOS 15.7.1 (and tvOS 16) states the issue is fixed by updated checks and memory handling. The...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2024-23210

CVE-2024-23210 affects Apple platforms (macOS Sonoma 14.3, iOS/iPadOS 17.3, watchOS 10.3, tvOS 17.3). The issue, resolved by improved redaction of sensitive information, could allow an app to view a user’s phone number in system logs. Root cause details are not explicitly disclosed in the provide...

CVE-2024-23215

CVE-2024-23215 affects Apple platforms via an issue in the handling of temporary files that may allow an app to access user‑sensitive data. The affected products are macOS Sonoma 14.3; watchOS 10.3; tvOS 17.3; iOS 17.3; and iPadOS 17.3. Apple has addressed the vulnerability in these releases. The...

CVE-2024-27823

CVE-2024-27823 involves a race condition that Apple fixed by improved locking. It affects Apple platforms (macOS Sonoma 14.5; macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS/iPadOS 16.7.8 and 17.5; watchOS 10.5; visionOS 1.3; tvOS 17.5). An attacker in a privileged network position may be able t...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2025-24086

CVE-2025-24086 affects Apple image processing via the ImageIO component. The Apple advisory notes that processing an image may lead to a denial-of-service, caused by a memory handling issue, and lists affected platforms as iPadOS/iPadOS 17.x, macOS Ventura/ Sonoma, visionOS, iOS/iPadOS 18.x, macO...

CVE-2025-24192

CVE-2025-24192 pertains to a script-imports issue in Safari and related Apple platforms. The vulnerability was addressed with improved isolation and is fixed in Safari 18.4, visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The issue could allow leakage of sensitive data when visiting ...

CVE-2025-30432

Technical details about CVE-2025-30432 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories for confirmed impact, affected products, and remediation.

CVE-2025-31223

CVE-2025-31223 affects Apple platforms (watchOS, tvOS, iOS, iPadOS, macOS Sequoia, visionOS, Safari). The issue involves memory corruption triggered by processing maliciously crafted web content. It is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, and ...

CVE-2026-28931

CVE-2026-28931 involves a buffer overflow that was addressed through improved bounds checking. The vulnerability is fixed in Apple OS updates: iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The public description notes that connecting to a malicious NFS server may lead to k...

CVE-2020-27905

CVE-2020-27905 is a memory corruption issue addressed by Apple in iOS 14.2, iPadOS 14.2, tvOS 14.2, and watchOS 7.1. The vulnerability could allow a malicious application to execute arbitrary code with system privileges. The NVD entry notes a local attack vector with low attack complexity and use...

CVE-2020-27909

CVE-2020-27909 affects Apple CoreAudio across Apple platforms (iOS/iPadOS, macOS/iPadOS/tvOS/watchOS) via processing a maliciously crafted audio file. The issue is an out-of-bounds read that was addressed with improved input validation and is fixed in iOS 14.2 and iPadOS 14.2 (also reflected for ...

CVE-2020-27927

CVE-2020-27927 is an Apple font-parsing vulnerability. The issue is described as an out-of-bounds write in the FontParser component that processes malicious font files, leading to arbitrary code execution. Affected platforms include macOS Big Sur 11.0.1 and iOS 14.2 / iPadOS 14.2, tvOS 14.2, and ...

CVE-2020-9825

CVE-2020-9825 relates to an access issue in Apple’s Sandbox component where a malicious app could bypass Privacy preferences. Public details in the provided documents indicate the vulnerability is addressed by sandbox restrictions and fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5; Ap...

CVE-2020-9835

CVE-2020-9835 affects FaceTime in iOS/iPadOS; when a user exits the FaceTime app while the call is ringing, pausing the video may fail. Apple fixed this by improved logic in iOS 13.5 and iPadOS 13.5. The vulnerability is tied to the FaceTime component and is documented with the fix in Apple’s sec...

CVE-2020-9837

CVE-2020-9837 is an out-of-bounds read vulnerability that could allow a remote attacker to leak memory. The issue is fixed in Apple platforms: iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, and tvOS 13.4.5. The public description across connected sources confirms the root cause as an out-of-bo...

CVE-2020-9892

CVE-2020-9892 affects Apple platforms (iOS, iPadOS, macOS Catalina, tvOS, watchOS). Description: memory corruption issues addressed with improved state management, allowing arbitrary code execution with system/kernel privileges if exploited by a malicious app. Remediation: fixed in iOS 13.6/iPadO...

CVE-2021-1756

CVE-2021-1756 is an iOS/iPadOS vulnerability described as a lock screen issue that could allow access to private contacts on a device with physical access. The root cause relates to state management around contact handling on the lock screen; Apple fixed it in iOS 14.4 / iPadOS 14.4. The CVE is l...

CVE-2021-1763

CVE-2021-1763 – Apple USD processing buffer overflow : The issue affects macOS Big Sur 11.2, macOS Catalina 10.15.7 (Security Update 2021-001 Catalina), macOS Mojave 10.14.6 (Security Update 2021-001 Mojave), and iOS/iPadOS 14.4. Root cause: a buffer overflow in USD file processing, addressed by ...

CVE-2021-30837

CVE-2021-30837 is an Apple memory issue that allows a local attacker to potentially execute arbitrary code with kernel privileges. It affects iOS 15, iPadOS 15, watchOS 8, and tvOS 15, with the vulnerability addressed by memory-handling improvements and patches in the documented OS versions. Conn...

CVE-2021-30925

CVE-2021-30925 affects Apple platforms (watchOS, macOS Big Sur, iOS, iPadOS) via a sandbox/privacy logic issue where a malicious app could bypass Privacy preferences. Root cause described as improved permissions logic; impact is exposure of restricted data due to bypass. Fixes exist in watchOS 8,...

CVE-2022-32879

CVE-2022-32879 corresponds to a logic/state-management issue in Apple platforms that could allow a user with physical access to view contacts from the lock screen. Connected sources provide concrete details: affected modalities are macOS, iOS, iPadOS, watchOS, and tvOS; root cause stated as a log...

CVE-2023-32407

CVE-2023-32407 describes a logic issue in Apple platforms that could allow an app to bypass Privacy preferences. Affected components are not explicitly enumerated in the provided documents, but constants indicate multiple Apple OSes are impacted (watchOS, tvOS, macOS, iOS, iPadOS) with versions l...

CVE-2023-40434

CVE-2023-40434 describes a configuration issue in Apple platforms that could allow an app to access a user’s Photos Library. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Affected products include iPhone, iPad, and macOS devices running the listed versions. The underlying cause is...

CVE-2023-41980

CVE-2023-41980 describes a permissions issue that could allow an app to bypass Privacy preferences. Public details confirm impact on Apple platforms including iOS 17, iPadOS 17, and macOS Sonoma 14, with the issue fixed in those releases. The vulnerability is tracked across multiple Apple advisor...

CVE-2024-23218

CVE-2024-23218 : A timing side-channel in CoreCrypto could allow decrypting legacy RSA PKCS#1 v1.5 ciphertexts without the private key. Apple patched this in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, and iOS/iPadOS 17.3. The connected sources corroborate the vulnerability and the listed fixes; ...

CVE-2024-27830

CVE-2024-27830 is an Apple ecosystem issue resolved by improved state management. The vulnerability could let a malicious webpage fingerprint a user. Affected products include tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Exploitation details...

CVE-2024-27850

CVE-2024-27850 is specified as resolved by Apple with fixes in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. The issue arises from a flaw in the noise injection algorithm that potentially allows a malicious webpage to fingerprint a user. The connected documents corrobora...

CVE-2024-44242

CVE-2024-44242 affects Apple iOS and iPadOS with a DCP firmware issue due to insufficient bounds checks. Affected software: iOS before 18.1 and iPadOS before 18.1 (Apple states the fix is in iOS 18.1/iPadOS 18.1). Impact per documents: attacker could trigger unexpected system termination or arbit...

CVE-2025-24173

The CVE-2025-24173 issue involves insufficient entitlement checks that could allow an app to escape its sandbox. Affected products/versions include visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Impact is high (CVE-...

CVE-2025-30454

CVE-2025-30454 is a macOS/iOS/tvOS security issue: a path handling problem addressed by improved validation. Affected software includes macOS Sonoma 14.7.5, macOS Sequoia 15.4, and iOS/iPadOS 18.4, tvOS 18.4. Root cause involves path handling with insufficient validation, allowing a malicious app...

CVE-2025-31184

CVE-2025-31184 affects Apple platforms: Safari 18.4, visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Root cause: improved permissions checking that may allow an app to gain unauthorized access to the Local Network. Impact is high (CVE metrics: CVSS v3.1 base score 7.8, Confidentialit...

CVE-2025-31222

Technical details (affected component, root cause, impact, vulnerable versions, and fixes) are not publicly provided in the connected documents; monitor for official advisories for updates.