CVE-2022-42790

CVE-2022-42790 is a logic/state-management issue in Apple platforms that could allow a user to view restricted content from the lock screen. Affected products/versions include macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, iOS 15.7, and iPadOS 15.7. The patch guidance in the p...

CVE-2023-32397

CVE-2023-32397 involves a logic issue addressed by Apple through state-management fixes. Affected components include iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4. The vulnerability could allow an app to modify protected parts of the filesystem....

CVE-2023-40412

CVE-2023-40412 affects Apple platforms and was fixed by memory-handling improvements. The issue could allow an app to execute arbitrary code with kernel privileges. Affected items include macOS Ventura 13.6, macOS Monterey 12.7, iOS 17, iPadOS 17, tvOS 17, and watchOS 10. The connected documents ...

CVE-2023-40441

CVE-2023-40441 describes a resource-exhaustion (DoS) issue caused by processing web content, mitigated by improved input validation. The fixed versions are: iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability affects Apple devices when handling web content (GPU/WebGL contexts) and can lead ...

CVE-2024-40774

CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...

CVE-2024-40799

CVE-2024-40799 is an out-of-bounds read vulnerability fixed by Apple in multiple OS updates. Affected platforms include iOS 16.7.9 / 17.6, iPadOS 16.7.9 / 17.6, macOS Ventura 13.6.8, Monterey 12.7.6, macOS Sonoma 14.6, and the watchOS 10.6, tvOS 17.6, visionOS 1.3 lineups. The issue occurs when p...

CVE-2024-54525

CVE-2024-54525 describes a logic issue in file handling where restoring a maliciously crafted backup file could modify protected system files. The issue affects Apple platforms across multiple OS lines via the MobileBackup stack, with fixes in: visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia...

CVE-2025-24182

An out-of-bounds read in font processing was fixed across Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. Root cause: input validation flaw in font handling leading to potential memory disclosure. Practical impact: confidential memory exposure if a malicio...

CVE-2025-24190

The CVE-2025-24190 issue is a memory-handling vulnerability in Apple platforms triggered during processing of a maliciously crafted video file, leading to possible app termination or corrupt memory. Affected products/versions include iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, ma...

CVE-2025-24198

CVE-2025-24198 is documented with concrete exploit chains in connected materials. The primary entry is a WebKit RCE (CVE-2025-24198) used to escape the Safari sandbox and reach a kernel R/W primitive via CVE-2025-24203 (VM_BEHAVIOR_ZERO_WIRED_PAGES). The Aether PoC describes Stage 1 as remote cod...

CVE-2025-24210

From the connected advisories, CVE-2025-24210 maps to a logic error fixed by Apple in multiple platform updates. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4; iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Issue: image parsing may disclose user informati...

CVE-2026-28995

CVE-2026-28995 describes a logic issue that could allow a malicious app to break out of its sandbox. It affects Apple platforms including iOS/iPadOS versions 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Apple states the fix is in these versions; no public exploit...

CVE-2026-43704

Summary of CVE-2026-43704 : A use-after-free vulnerability in Web Extensions for Safari/WebKit allowed an attacker-controlled extension to trigger an unexpected process crash. The issue is addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Af...

CVE-2026-64774

CVE-2026-64774 is an integer overflow vulnerability addressed through improved input validation, fixed in Apple OS releases: iOS/iPadOS 26.6; macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6; tvOS 26.6; visionOS 26.6. The issue could allow a remote attacker to cause unexpected application terminat...

CVE-2026-64780

In WebKit, CVE-2026-64780 stems from improper input validation (WebKit Bugzilla 316918) allowing crafted web content to crash Safari. Fixed in Safari 26.6.1, iOS/iPadOS 18.7.10 and 26.6.1, macOS Tahoe 26.6.2. No in-the-wild exploitation reported; CVSS 4.3 (Medium) reflects availability-only impact.

CVE-2020-27910

CVE-2020-27910 affects Apple audio handling across macOS Big Sur 11.0.1 and iOS 14.2/iPadOS 14.2 (also tvOS 14.2, watchOS 7.1). The issue is described as an out-of-bounds read in audio processing, mitigated by improved input validation and addressed in the listed updates. Impact per document: pro...

CVE-2020-27926

CVE-2020-27926 relates to a use-after-free in processing malicious web content, with Apple confirming a memory-management fix in iOS 14.2 and iPadOS 14.2. The Apple-HT211929 entry lists affected areas (Audio/CoreAudio/FontParser/WebKit/XNU) and notes that exploitation could lead to arbitrary code...

CVE-2020-3869

CVE-2020-3869 describes an issue in the handling of the local user’s self-view in FaceTime on Apple devices. The root cause is a logic flaw that could cause the local user’s camera self-view to show an incorrect camera when a remote FaceTime user is involved. Impact stated by sources: a remote Fa...

CVE-2020-9795

CVE-2020-9795 is a kernel-use-after-free vulnerability in Apple OS components causing potential arbitrary code execution with kernel privileges. Affected: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Root cause: use-after-free leading to memory corruption; fixes were relea...

CVE-2020-9865

The CVE-2020-9865 issue is an Apple memory-corruption vulnerability that was mitigated by removing the vulnerable code. It affects multiple Apple platforms and versions: iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The risk described is that a malicious applic...

CVE-2020-9888

CVE-2020-9888 affects Apple OS components handling audio on iOS/iPadOS, macOS, tvOS, and watchOS. The root cause is an out-of-bounds read vulnerability in audio processing, mitigated by improved bounds checking. Impact described as potential arbitrary code execution when processing a maliciously ...

CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...

CVE-2021-1867

CVE-2021-1867 is an out-of-bounds read that was mitigated by improved input validation. Affected: iOS 14.5, iPadOS 14.5, macOS Big Sur 11.3. Impact described as potential arbitrary code execution with kernel privileges by a malicious app. Mitigation: upgrade to iOS/iPadOS 14.5 or later, macOS Big...

CVE-2021-30753

CVE-2021-30753 affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). Root cause: out-of-bounds read in font handling (FontParser/CoreText) due to malformed font input. Impact: potential disclosure of process memory. Fix: addressed in the listed OS updates wi...

CVE-2021-30867

The CVE-2021-30867 issue affects Apple iOS/iPadOS and was addressed in iOS 15 / iPadOS 15. A malicious application could access photo metadata without requiring permission to access photos due to an authentication flaw. Apple states the vulnerability was fixed by improved authentication. Public r...

CVE-2021-30874

CVE-2021-30874 affects Apple iOS/iPadOS 15 where an authorization issue in NetworkExtension could allow a VPN configuration to be installed by an app without user permission. Root cause cited as improved state management; fix implemented in iOS 15 / iPadOS 15. Implication: local apps may cause VP...

CVE-2021-30992

CVE-2021-30992 affects Apple iOS and iPadOS FaceTime in which a user in a FaceTime call may leak sensitive information via Live Photos metadata. Root cause: improper handling of file metadata; fix: Apple addressed in iOS 15.2 and iPadOS 15.2. Practical impact is limited to information disclosure ...

CVE-2022-46717

Apple CVE-2022-46717 affects iOS 16.2 and iPadOS 16.2. A logic issue in accessibility features could allow a user with physical access to a locked Apple Watch to view photos. Root cause described as a logic issue with improved restrictions; remediation is patching in iOS 16.2 and iPadOS 16.2. Con...

CVE-2023-28202

CVE-2023-28202 relates to Apple systems where a firewall setting may fail to take effect after exiting Settings due to a state-management flaw. Affected products include iOS/iPadOS 16.x, watchOS 9.x, tvOS 16.x, and macOS Ventura 13.x. The issue is described as a state-management fix and is noted ...

CVE-2024-44164

This CVE (CVE-2024-44164) affects Apple platforms and describes a potential bypass of Privacy preferences. Public references indicate fixes in iOS 17.7 / iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The provided documents do not specify the affected product families, ...

CVE-2025-24107

CVE-2025-24107 describes a local permissions issue in the Apple kernel that could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3, and iPadOS 18.3. CVSS v3.1 metrics indicate a local attack vector, low privileges r...

CVE-2025-24237

Vulnerability: CVE-2025-24237 is a buffer overflow in Apple’s OS stack that has been mitigated by improved bounds checking. Affected products and versions are listed in connected sources: visionOS 2.4; macOS Ventura 13.7.5; iOS 18.4 and iPadOS 18.4; iPadOS 17.7.6; macOS Sequoia 15.4; macOS Sonoma...

CVE-2025-30470

The CVE-2025-30470 entry corresponds to a path-handling issue in Apple Maps that could allow an app to read sensitive location information. Concrete details from connected sources show this flaw affecting Maps functionality on Apple Watch (watchOS 11.4 security content lists CVE-2025-30470 under ...

CVE-2025-43342

CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...

CVE-2025-43392

CVE-2025-43392 is a cross-origin image data exfiltration vulnerability in WebKitGTK/WebKitGTK-based components. Connected advisories confirm the issue affects webkitgtk4 and related WebKitGTK/WPE WebKit deployments, with fixes in downstream package updates. The vulnerability description states th...

CVE-2026-43701

CVE-2026-43701 affects Apple's WebKit/Safari stack. The vulnerability allows a malicious website to process restricted web content outside the sandbox, with a network attack vector and no user interaction required per CVSS. Root cause involves checks in web content handling that could bypass sand...

CVE-2020-27923

CVE-2020-27923 is an out-of-bounds write that Apple fixed through input-validation improvements in multiple macOS security updates. The vulnerability, triggered by processing a malicious image, could lead to arbitrary code execution. Public updates address this issue across macOS Big Sur (11.1), ...

CVE-2020-3844

CVE-2020-3844 affects Apple iOS/iPadOS Messages: after a user is removed from an iMessage conversation, an attacker may still alter the state of that conversation. This is tied to the Messages component and was fixed by Apple in iOS 13.3.1 / iPadOS 13.3.1 through improved checks and state handlin...

CVE-2020-3875

CVE-2020-3875Fixes a validation issue addressed by improved input sanitization. Affects Apple platforms including iOS/iPadOS, macOS Catalina, tvOS, watchOS, and kernel components where an application may read restricted memory. Public details indicate the vulnerability is mitigated by updates to ...

CVE-2020-9830

CVE-2020-9830 is a memory corruption vulnerability in Apple OS components that could allow a local attacker to execute arbitrary code with kernel privileges. It is fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5. Affected products include macOS Catalina (and related Apple OS versions l...

CVE-2020-9920

CVE-2020-9920 describes a path handling issue in Apple Mail that could allow a malicious mail server to overwrite arbitrary mail files. The issue is fixed by Apple in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8, addressing improper validation of mail file handling. NVD metada...

CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30674

CVE-2021-30674 is an Apple kernel memory-disclosure issue disclosed by Apple as fixed in iOS 14.6 / iPadOS 14.6. The CVE entry states that a malicious application may disclose restricted memory, and Apple’s advisory confirms the fix was implemented via improved checks. Connected sources corrobora...

CVE-2022-32939

CVE-2022-32939 is Apple iOS/iPadOS graphics driver kernel‑level vulnerability. The issue allowed an app to execute arbitrary code with kernel privileges due to bounds checking improvements. Apple patched it in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16. The Nessus/NVD entries corroborate the...

CVE-2023-32372

CVE-2023-32372 is an Apple vulnerability: an out-of-bounds read in ImageIO was addressed by improved input validation. Affected software includes iOS 16.5 and iPadOS 16.5 (and related Apple OSes such as watchOS 9.5, tvOS 16.5, macOS Ventura 13.4). The root cause is an out-of-bounds read while pro...

CVE-2023-32385

CVE-2023-32385 affects Apple’s PDFKit on iOS 16.5/iPadOS 16.5 and macOS Ventura 13.4. The issue is described as a denial-of-service caused by a PDF file opening that may lead to the application terminating unexpectedly, with the underlying fix being improved memory handling. Connected sources con...

CVE-2023-32408

CVE-2023-32408 is an Apple vulnerability where an app may read sensitive location information due to improved handling of caches. Affected: watchOS 9.5; tvOS 16.5; macOS Ventura 13.4; macOS Monterey 12.6.6; iOS 15.7.6 and 16.5; iPadOS 15.7.6 and 16.5. Root cause: improper cache handling leading t...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2023-40454

CVE-2023-40454 affects Apple platforms and is tied to a permissions issue that could allow an app to delete files it should not access. The linked sources (NVD entry) specify mitigations in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, ...