CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

CVE-2025-24190

The CVE-2025-24190 issue is a memory-handling vulnerability in Apple platforms triggered during processing of a maliciously crafted video file, leading to possible app termination or corrupt memory. Affected products/versions include iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, ma...

CVE-2025-24244

CVE-2025-24244 concerns a memory disclosure when processing a maliciously crafted font. Apple states the issue is addressed by memory handling improvements and is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, and watchO...

CVE-2025-24270

CVE-2025-24270 affects Apple devices via AirPlay. The issue could allow an attacker on the local network to leak sensitive user information. Apple addresses this by removing the vulnerable code, with fixes shipped in macOS Sonoma 14.7.5 and earlier macOS versions, macOS Sequoia 15.4, tvOS 18.4, i...

CVE-2026-43821

CVE-2026-43821 pertains to an access issue in Apple Safari/WebKit where an app may read files outside its sandbox. The vulnerability is addressed in Safari 26.6 and corresponding OS updates (iOS/iPadOS/macOS Tahoe 26.6, tvOS, visionOS, watchOS 26.6). The NVD/NCSC entries describe improved access ...

CVE-2020-9830

CVE-2020-9830 is a memory corruption vulnerability in Apple OS components that could allow a local attacker to execute arbitrary code with kernel privileges. It is fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5. Affected products include macOS Catalina (and related Apple OS versions l...

CVE-2020-9920

CVE-2020-9920 describes a path handling issue in Apple Mail that could allow a malicious mail server to overwrite arbitrary mail files. The issue is fixed by Apple in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8, addressing improper validation of mail file handling. NVD metada...

CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...

CVE-2021-1822

CVE-2021-1822 is described by Apple/security advisories as a logic issue in MobileInstallation that could allow a local user to modify protected parts of the file system. The vulnerability is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Connected sources corroborate that MobileI...

CVE-2021-30753

CVE-2021-30753 affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). Root cause: out-of-bounds read in font handling (FontParser/CoreText) due to malformed font input. Impact: potential disclosure of process memory. Fix: addressed in the listed OS updates wi...

CVE-2021-30867

The CVE-2021-30867 issue affects Apple iOS/iPadOS and was addressed in iOS 15 / iPadOS 15. A malicious application could access photo metadata without requiring permission to access photos due to an authentication flaw. Apple states the vulnerability was fixed by improved authentication. Public r...

CVE-2022-32927

CVE-2022-32927 affects Apple iOS/iPadOS devices and relates to a memory handling weakness in the Wi‑Fi path that can cause a denial-of-service of the Settings app when joining a malicious Wi‑Fi network. The issue is fixed in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16.0+. Affected components ...

CVE-2022-32939

CVE-2022-32939 is Apple iOS/iPadOS graphics driver kernel‑level vulnerability. The issue allowed an app to execute arbitrary code with kernel privileges due to bounds checking improvements. Apple patched it in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16. The Nessus/NVD entries corroborate the...

CVE-2023-28202

CVE-2023-28202 relates to Apple systems where a firewall setting may fail to take effect after exiting Settings due to a state-management flaw. Affected products include iOS/iPadOS 16.x, watchOS 9.x, tvOS 16.x, and macOS Ventura 13.x. The issue is described as a state-management fix and is noted ...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2023-41071

CVE-2023-41071 is a use-after-free vulnerability in Apple’s kernel-related components that can allow an app to execute arbitrary code with kernel privileges. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Ventura 13.6. The issue is addressed through improved memory...

CVE-2024-27828

CVE-2024-27828 describes a memory-handling issue in Apple OS components that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed with patches in visionOS 1.2, watchOS 10.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. The available description indicates a l...

CVE-2024-27855

CVE-2024-27855 describes a vulnerability in Apple platforms where a shortcut could access sensitive data via certain actions without prompting user consent. Affected products/versions (as publicly documented): macOS Sonoma 14.5; macOS Ventura 13.6.7; iOS 17.5 and iPadOS 17.5; iOS 16.7.8 and iPadO...

CVE-2024-40787

CVE-2024-40787 is a local, low-privilege impact issue in Apple platforms where an attacker could bypass internet permission prompts. The root cause involves the handling of user consent prompts, allowing a Shortcut to circumvent Internet permission requirements. Affected products/versions include...

CVE-2024-40798

CVE-2024-40798 affects Apple platforms where an app may read Safari browsing history due to an issue addressed by improved redaction of sensitive information. Fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The provided documents do not s...

CVE-2024-44234

CVE-2024-44234 affects multiple Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS). The issue stems from improper bounds checks when parsing a maliciously crafted video file, which may lead to an unexpected system termination (crash). The vulnerability is fixed in: iOS 17.7.1 / iPadOS 17.7....

CVE-2024-44269

CVE-2024-44269 involves a logic issue in Apple platforms where a malicious app could use Shortcuts to access restricted files. The issue is addressed by improved checks and is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1,...

CVE-2024-54486

CVE-2024-54486 involves memory disclosure triggered by processing a maliciously crafted font in Apple platforms. Connected sources confirm the issue affects Apple operating systems and fonts handling, with remediation in updates: iPadOS 17.7.3, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, Ventura 1...

CVE-2024-54514

The CVE-2024-54514 issue affects Apple platforms where an app may break out of its sandbox. According to the records, mitigation is via updates: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The underlying cause is described as ...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2025-30448

CVE-2025-30448 affects Apple platforms including macOS Ventura 13.7.6, macOS Sonoma 14.7.6, macOS Sequoia 15.4, iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, and visionOS 2.5. The issue stems from insufficient entitlement checks, which could allow an attacker to enable iCloud folder sharing without authe...

CVE-2025-31209

The CVE-2025-31209 issue is an out-of-bounds read that could lead to disclosure of user information during file parsing. Affected products include watchOS 11.5; macOS Sonoma 14.7.6; tvOS 18.5; iPadOS 17.7.7; iOS 18.5 and iPadOS 18.5; macOS Sequoia 15.5; visionOS 2.5; macOS Ventura 13.7.6. Mitigat...

CVE-2026-43727

CVE-2026-43727 describes a use-after-free in Safari related to processing web content, addressed by improved memory management. The issue is fixed in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2, and may cause an unexpected Safari crash when handling maliciously crafted web c...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2026-65349

An out-of-bounds read in Apple's Kernel component allows a local app to crash the system or read kernel memory. Fixed in iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. CVSS 6.6 (Medium). No in-the-wild exploitation reported. Affected devices: iPhone 11+, iPad Pro 3rd gen+, iPad Air 3rd gen+, ...

CVE-2020-10011

CVE-2020-10011: An out-of-bounds read vulnerability was fixed by improved bounds checking when processing a maliciously crafted USD file. Affected platforms include iOS 14.2, iPadOS 14.2, macOS Catalina 10.15.7, and Security Update 2020-005 for High Sierra and Mojave. Exploitation could lead to u...

CVE-2020-27923

CVE-2020-27923 is an out-of-bounds write that Apple fixed through input-validation improvements in multiple macOS security updates. The vulnerability, triggered by processing a malicious image, could lead to arbitrary code execution. Public updates address this issue across macOS Big Sur (11.1), ...

CVE-2020-3844

CVE-2020-3844 affects Apple iOS/iPadOS Messages: after a user is removed from an iMessage conversation, an attacker may still alter the state of that conversation. This is tied to the Messages component and was fixed by Apple in iOS 13.3.1 / iPadOS 13.3.1 through improved checks and state handlin...

CVE-2020-3869

CVE-2020-3869 describes an issue in the handling of the local user’s self-view in FaceTime on Apple devices. The root cause is a logic flaw that could cause the local user’s camera self-view to show an incorrect camera when a remote FaceTime user is involved. Impact stated by sources: a remote Fa...

CVE-2020-9865

The CVE-2020-9865 issue is an Apple memory-corruption vulnerability that was mitigated by removing the vulnerable code. It affects multiple Apple platforms and versions: iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The risk described is that a malicious applic...

CVE-2020-9888

CVE-2020-9888 affects Apple OS components handling audio on iOS/iPadOS, macOS, tvOS, and watchOS. The root cause is an out-of-bounds read vulnerability in audio processing, mitigated by improved bounds checking. Impact described as potential arbitrary code execution when processing a maliciously ...

CVE-2021-1854

CVE-2021-1854 describes a call-termination issue in iOS/iPadOS where a legacy cellular network could automatically answer an incoming call when a current call ended or dropped. The root cause is described as a logic flaw in call termination that was addressed with improved logic. Affected product...

CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30932

CVE-2021-30932 is fixed in iOS 15.2 and iPadOS 15.2. The issue allowed a person with physical access to an iOS device to access contacts from the lock screen due to improved permissions logic. The vulnerability affects iPhone and iPad platforms covered by the Apple security content. The connected...

CVE-2021-30964

CVE-2021-30964 describes an inherited permissions issue that could allow a malicious application to bypass Privacy preferences. The issue is fixed in Apple OS updates: macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. The CVE is categorized under privacy controls (TCC) and involves bypa...

CVE-2021-30992

CVE-2021-30992 affects Apple iOS and iPadOS FaceTime in which a user in a FaceTime call may leak sensitive information via Live Photos metadata. Root cause: improper handling of file metadata; fix: Apple addressed in iOS 15.2 and iPadOS 15.2. Practical impact is limited to information disclosure ...

CVE-2022-42811

Apple fixed CVE-2022-42811 as a sandbox-related access issue in tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vulnerability could allow an app to access user‑sensitive data; no exploitation status is provided in the sources. Remediation is available via updating to the li...

CVE-2022-42830

CVE-2022-42830 affects Apple devices and components where a root-privileged app could execute arbitrary code in the kernel due to a memory handling issue. Apple fixes in iOS 16.1, iPadOS 16 and macOS Ventura 13; apply the corresponding updates (HT213488/HT213489 references) to mitigate. The vulne...

CVE-2023-32385

CVE-2023-32385 affects Apple’s PDFKit on iOS 16.5/iPadOS 16.5 and macOS Ventura 13.4. The issue is described as a denial-of-service caused by a PDF file opening that may lead to the application terminating unexpectedly, with the underlying fix being improved memory handling. Connected sources con...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2023-40454

CVE-2023-40454 affects Apple platforms and is tied to a permissions issue that could allow an app to delete files it should not access. The linked sources (NVD entry) specify mitigations in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, ...

CVE-2024-40777

CVE-2024-40777 describes an out-of-bounds access issue that Apple fixed by improving bounds checking. The vulnerability is addressed in multiple Apple platforms: iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS Sonoma 14.6. Technical detail in the description indicates t...

CVE-2024-40818

This CVE (CVE-2024-40818) affects Apple devices and is fixed by software updates: iOS 16.7.9/iPadOS 16.7.9, iOS 17.6/iPadOS 17.6, macOS Ventura 13.6.8, macOS Sonoma 14.6, and watchOS 10.6. The vulnerability involves restricting options on a locked device, with an attacker having physical access p...

CVE-2024-44165

CVE-2024-44165 is a logic-issue vulnerability fixed by Apple in multiple OS updates. It allows network traffic to leak outside a VPN tunnel. Affected are macOS: Ventura 13.7; Sonoma 14.7; Sequoia 15; iOS/iPadOS: 17.7, 18; and visionOS 2. Root cause described as a logic issue addressed with improv...

CVE-2024-44276

CVE-2024-44276 affects Apple's Passwords feature in iOS/iPadOS. A privileged network position could leak sensitive information due to sending information over HTTP instead of HTTPS. The issue is fixed in iOS 18.2 and iPadOS 18.2. Root cause: unencrypted network requests (logos/icons and password-...