CVE-2022-42811

Apple fixed CVE-2022-42811 as a sandbox-related access issue in tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vulnerability could allow an app to access user‑sensitive data; no exploitation status is provided in the sources. Remediation is available via updating to the li...

CVE-2023-38612

CVE-2023-38612 affects Apple platforms where an app may access protected user data due to insufficient checks. The vulnerability is addressed by updates: macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14, iOS 16.7/iPadOS 16.7, and iOS 17/iPadOS 17. The issue was mitigated by improved check...

CVE-2023-41065

CVE-2023-41065 describes a privacy issue where private data redaction in log entries could allow an app to read sensitive location information. The issue is fixed in multiple Apple platforms: tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The NVD entry rates it as Low risk (CVSS v3....

CVE-2024-40787

CVE-2024-40787 is a local, low-privilege impact issue in Apple platforms where an attacker could bypass internet permission prompts. The root cause involves the handling of user consent prompts, allowing a Shortcut to circumvent Internet permission requirements. Affected products/versions include...

CVE-2024-40795

CVE-2024-40795 affects Apple platforms where an app may be able to read sensitive location information. The issue was addressed with improved data protection and is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and tvOS 17.6. The NVD entry shows a low 3.3 CVSS due to local acce...

CVE-2024-40818

This CVE (CVE-2024-40818) affects Apple devices and is fixed by software updates: iOS 16.7.9/iPadOS 16.7.9, iOS 17.6/iPadOS 17.6, macOS Ventura 13.6.8, macOS Sonoma 14.6, and watchOS 10.6. The vulnerability involves restricting options on a locked device, with an attacker having physical access p...

CVE-2024-40844

CVE-2024-40844 describes a privacy issue where an app may observe data displayed to the user by Shortcuts due to improved handling of temporary files. The issue affects Apple platforms and is fixed in iOS 17.7, iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The underlyi...

CVE-2024-40857

CVE-2024-40857 affects Apple platforms using WebKit: a web content processing flaw that could lead to universal cross-site scripting. The issue was addressed through improved state management and is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, and tvOS 18 per t...

CVE-2024-54492

CVE-2024-54492 concerns an issue where information sent over the network could be at risk due to lack of HTTPS in prior code paths. The vulnerability is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, and visionOS 2.2. Affected products include macOS and Apple mobile platfor...

CVE-2024-54514

The CVE-2024-54514 issue affects Apple platforms where an app may break out of its sandbox. According to the records, mitigation is via updates: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The underlying cause is described as ...

CVE-2024-54517

CVE-2024-54517 affects Apple platforms and is resolved by macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, and iPadOS 18.2. The issue involves an out-of-bounds/bounds-check related memory issue that could allow an app to corrupt coprocessor memory. Technical details from the connected docum...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

CVE-2025-43213

CVE-2025-43213 affects WebKitGTK/WebKitGTK4 in multiple Linux distributions (AlmaLinux, Red Hat family, Fedora, Amazon Linux) and is tied to memory handling issues that can be exploited by processing malicious web content to cause an unexpected Safari/WebKit crash (and related process crashes in ...

CVE-2025-43272

CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...

CVE-2025-43520

CVE-2025-43520 is a kernel-level race-condition vulnerability in XNU’s VFS that can enable kernel memory read/write after exploitation, as detailed in the DarkSword full-chain exploit (Stage 5: Privilege Escalation). The connected exploit analysis describes a multi-stage chain culminating in a ke...

CVE-2026-43740

CVE-2026-43740 affects Safari/WebKit components used on macOS Tahoe and iOS/iPadOS, with memory-handling issues in processing malicious web content that may disclose process memory. The public records indicate fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Remediation ...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2019-8901

CVE-2019-8901 affects iOS/iPadOS via the Shortcuts “Run script over SSH” flow. The root cause is improper host-key verification when connecting to a previously known SSH server, enabling an attacker in a privileged network position to intercept SSH traffic. Apple fixes are in iOS 13.1 and iPadOS ...

CVE-2020-10003

CVE-2020-10003 affects Apple platforms via a vulnerability in the path validation logic for symlinks, enabling a local privilege escalation. It is fixed in macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, tvOS 14.2, and watchOS 7.1 through improved path sanitization. Affected components are tied to Cr...

CVE-2020-10004

CVE-2020-10004 is a logic-issue vulnerability fixed in Apple OS updates: macOS Big Sur 11.0.1, iOS 14.2, and iPadOS 14.2. The issue arises from improved state management and may allow an attacker to cause an application to terminate unexpectedly or execute arbitrary code when a maliciously crafte...

CVE-2020-27922

CVE-2020-27922 is a logic issue in Apple’s font processing pathway (CoreText/FontParser) that could allow arbitrary code execution when parsing a maliciously crafted font file. The issue is fixed in macOS Big Sur 11.1 and corresponding security updates: Catalina 10.15.7 (Security Update 2020-001)...

CVE-2020-9793

CVE-2020-9793 is a memory corruption vulnerability in Apple platforms that was fixed with improved input validation. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS (specific fixes in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). The issue coul...

CVE-2020-9902

CVE-2020-9902 is an out-of-bounds read vulnerability in Apple’s kernel component that could allow a malicious app to determine the kernel memory layout. The issue is fixed in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. Connected Apple advisories cite kernel memo...

CVE-2020-9923

CVE-2020-9923 affects Apple devices (iOS, iPadOS, watchOS) via a kernel memory‑corruption vulnerability in the kernel components. The issue could allow a local attacker to execute arbitrary code with system/kernel privileges. Apple fixed it in iOS 13.6, iPadOS 13.6, and watchOS 6.2.8 by improving...

CVE-2021-1770

CVE-2021-1770 describes a buffer overflow exposure in Apple systems. Affected products include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5, where the issue is mitigated by the Big Sur 11.3/iOS 14.5/iPadOS 14.5/watchOS 7.4/tvOS 14.5 updates that address the overflow and a...

CVE-2021-1836

CVE-2021-1836 is an Apple iOS/iPadOS/tvOS issue described as a logic issue that could allow a local user to create or modify privileged files. Connected sources confirm this CVE affects Apple platforms and was fixed in iOS 14.5 / iPadOS 14.5 / tvOS 14.5. The security content entry for CVE-2021-18...

CVE-2021-30742

The CVE-2021-30742 issue affects Apple iOS/iPadOS Audio components. A memory consumption vulnerability in AudioToolboxCore during processing of maliciously crafted audio (notably LOAS) could enable arbitrary code execution. Multiple connected advisories corroborate that Apple fixed this with upda...

CVE-2022-42810

CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...

CVE-2022-42831

CVE-2022-42831 describes a race condition in Apple devices that could allow an app with root privileges to execute arbitrary code with kernel privileges. Apple fixes are noted in iOS 16.1 and iPadOS 16, and macOS Ventura 13. The initial description states kernel-level impact but does not provide ...

CVE-2023-32361

CVE-2023-32361 affects Apple operating systems (tvOS 17, iOS 17/iPadOS 17, watchOS 10, macOS Sonoma 14). The vulnerability stems from improved handling of caches, enabling an app to access user-sensitive data. Apple lists fixed versions: tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14. Th...

CVE-2023-32425

CVE-2023-32425 corresponds to a memory‑handling issue in Apple’s operating systems (iOS, iPadOS, watchOS) that may allow an app to gain elevated privileges. Public documents: Apple fixed the issue in iOS 16.5, iPadOS 16.5, and watchOS 9.5 by addressing memory management weaknesses. Related entrie...

CVE-2023-32428

CVE-2023-32428 is an Apple macOS/iOS/watchOS/tvOS vulnerability resolved by macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5. The issue could allow an app to gain root privileges due to an underlying file-handling weakness. The NVD entry lists a LOCAL attack vector with no us...

CVE-2023-40410

CVE-2023-40410 concerns an out-of-bounds read in macOS/iOS/watchOS/tvOS kernel-related handling, disclosed via improved input validation. The issue allows an app to disclose kernel memory and is addressed by updates across Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14,...

CVE-2024-23219

Apple CVE-2024-23219 is an authentication flaw affecting Stolen Device Protection that could be unexpectedly disabled. Connected sources confirm the issue is addressed with improved authentication and fixed in iOS 17.3 and iPadOS 17.3. Affected versions are prior to 17.3. Remediation: update to i...

CVE-2024-40793

CVE-2024-40793 is an Apple vulnerability where vulnerable code was removed. It affects multiple Apple platforms and is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. The issue could allow an app to acc...

CVE-2024-40854

CVE-2024-40854 describes a memory initialization issue addressed by Apple in macOS/OS updates. Affected components are iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1. The vulnerability may allow an app to cause an unexpected system terminatio...

CVE-2024-44225

CVE-2024-44225 describes a logic issue in Apple OS components that could allow an app to gain elevated privileges. The fixed versions include iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 / iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The root cause is stated...

CVE-2024-44269

CVE-2024-44269 involves a logic issue in Apple platforms where a malicious app could use Shortcuts to access restricted files. The issue is addressed by improved checks and is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1,...

CVE-2025-24220

CVE-2025-24220 concerns a permissions issue in iOS/iPadOS that could allow an app to read a persistent device identifier. The connected sources consistently describe the vulnerable surface as a permissions-related flaw and confirm that Apple addressed it in iOS 18.4 and iPadOS 18.4. The CVE entry...

CVE-2025-30426

CVE-2025-30426 affects Apple platforms and stems from insufficient entitlement checks that can allow an app to enumerate a user’s installed apps. The issue is fixed by Apple in multiple OS updates: visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, and macOS Sequoia 15.4. The CVSS ...

CVE-2025-30469

CVE-2025-30469 concerns a lock-screen photo exposure on iOS devices. The public description states that the issue was addressed through improved state management and is fixed in iOS 18.4 and iPadOS 18.4 . The vulnerability allows a person with physical access to an iOS device to potentially view ...

CVE-2025-31235

CVE-2025-31235 is a local, memory‑corruption issue in Apple’s coreaudiod where a double‑free leads to an out‑of‑bounds or invalid dereference chain. The connected Google Project Zero write‑up explicates exploitation context for CVE-2025-31235 in coreaudiod alongside CVE-2024-54529, detailing how ...

CVE-2026-43727

CVE-2026-43727 describes a use-after-free in Safari related to processing web content, addressed by improved memory management. The issue is fixed in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2, and may cause an unexpected Safari crash when handling maliciously crafted web c...

CVE-2020-9898

CVE-2020-9898 affects Apple platforms and is a sandbox bypass issue. According to Apple and Red Hat entries, the vulnerability could allow a sandboxed process to circumvent sandbox restrictions. The CVE is fixed in macOS Catalina 10.15.6 and iOS/iPadOS 13.6, with corresponding Apple advisories (H...

CVE-2020-9911

CVE-2020-9911 is a logic issue in Safari Reader mode that could allow a remote attacker to bypass the Same Origin Policy. Apple fixes indicate the issue is addressed in iOS 13.6, iPadOS 13.6, and Safari 13.1.2. The initial description confirms a Same Origin bypass risk in Safari Reader; connected...

CVE-2020-9985

CVE-2020-9985 is a buffer overflow in Apple’s USD file processing that could cause an application to terminate or execute arbitrary code. It affects multiple Apple platforms and was addressed by memory-management improvements. The fixed versions are iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, a...

CVE-2021-1865

CVE-2021-1865 concerns a log-in credential leak where passwords could be visible in screenshots on iOS devices. The issue is described as a rendering/validation problem that allowed a user’s password to appear onscreen. Affected software is iOS and iPadOS, with fixed behavior implemented in iOS 1...

CVE-2021-30756

The CVE-2021-30756 issue concerns a privacy-related information disclosure on Apple devices where a local attacker could view Now Playing information from the lock screen. Affected components are Apple's Now Playing/MediaRemote functionality across macOS Big Sur and iOS/iPadOS. Root cause is a pe...

CVE-2021-30854

The CVE-2021-30854 issue is described by Apple as a logic error in state management that could allow a sandboxed process to circumvent sandbox restrictions. It is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. The connected Apple security pages enumerate the affected platforms and list patch ...