CVE-2026-64775

Technical details for CVE-2026-64775 are not publicly provided in the supplied documents; the memory initialization issue and affected Apple OS versions are mentioned, but no exact product/version specifics or remediation are confirmed here. Monitor for updates.

CVE-2021-1831

CVE-2021-1831 relates to an Apple Shortcuts permission issue where shortcuts could access restricted files due to insufficient permission checks. The vulnerability was addressed with improved permissions logic and fixed in iOS 14.5 / iPadOS 14.5 . Public documents in the connected set confirm the...

CVE-2021-1874

CVE-2021-1874 affects Apple devices (Kernel component) and is described as a logic issue related to state management that could allow an application to execute arbitrary code with kernel privileges. Technical details across connected sources consistently indicate the root cause is a state-managem...

CVE-2021-30921

CVE-2021-30921 affects Apple iOS 14.5 and iPadOS 14.5. A logic/state-management issue allowed a user's password to be visible onscreen (notably tied to UIKit/UI handling). The vulnerability stems from improved state management; Apple patched in iOS 14.5/iPadOS 14.5. No exploitation details are pr...

CVE-2024-27819

CVE-2024-27819 describes a vulnerability in iOS/iPadOS where a local attacker with physical access could access contacts from the lock screen via Siri. Apple’s remediation is in iOS 17.5 / iPadOS 17.5, where options on a locked device are restricted to mitigate this exposure. Connected sources co...

CVE-2024-40824

CVE-2024-40824 affects Apple platforms (watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, tvOS 17.6). The issue allows an app to bypass Privacy preferences and was addressed via improved state management; fixes are in the listed OS versions. The CPE/context is supported by Apple security up...

CVE-2024-44144

The CVE-2024-44144 issue is a buffer overflow vulnerability in Apple platforms where insufficient size validation could be triggered by processing a malicious file. Root cause: improved size validation fixes the overflow. Affected products/versions are explicit in the sources: iOS 17.7.1 and iPad...

CVE-2024-44245

CVE-2024-44245 affects Apple systems where a memory handling weakness could allow an app to cause unexpected system termination or corrupt kernel memory. The issue has been addressed in updates: iPadOS 17.7.3, iPadOS 18.2, iOS 18.2, visionOS 2.2, macOS Sequoia 15.2, and macOS Sonoma 14.7.2. Affec...

CVE-2024-44282

CVE-2024-44282 is an out-of-bounds read vulnerability that Apple addressed by improving input validation. The issue may allow disclosure of user information when parsing a file. Affected products/versions disclosed in supplied sources include tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iP...

CVE-2025-31239

CVE-2025-31239 is a use-after-free issue related to parsing a file that caused an unexpected app termination. Apple fixed it across multiple platforms and versions: watchOS 11.5; macOS Sonoma 14.7.6; tvOS 18.5; iPadOS 18.5 and iOS 18.5; macOS Sequoia 15.5; visionOS 2.5; macOS Ventura 13.7.6. The ...

CVE-2025-43432

CVE-2025-43432 is a use-after-free in WebKitGTK/WebKit affecting webkitgtk4, leading to process crashes when processing malicious web content. The AL2 advisory confirms fixes in webkitgtk4 package (and related components) across AL2 with versions 2.50.4-1.amzn2.*, and Debian/Fedora advisories ind...

CVE-2025-43441

The CVE-2025-43441 vulnerability is addressed by improved memory handling, with fixes in Safari 26.1, iOS 18.7.2 / iPadOS 18.7.2, iOS 26.1 / iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1. Affected products are Apple platforms where processing maliciously crafted web content could le...

CVE-2026-28992

CVE-2026-28992 is a memory-corruption vulnerability in Apple IOHIDFamily components (and related OS subsystems) addressed by improved locking. Affected platforms include macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5, iOS/iPadOS 18.7.9 and 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The is...

CVE-2026-43713

CVE-2026-43713 concerns a permissions issue in Safari/WebKit that could allow leakage of sensitive data when visiting a website. The public advisories indicate the fix is in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected documents explicitly describe the vulnerability...

CVE-2026-64700

CVE-2026-64700 describes a use-after-free vulnerability that Apple addressed via improved memory management. The issue affects multiple Apple platforms and is fixed in: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6. T...

CVE-2020-3858

CVE-2020-3858 involves a memory corruption issue in Apple iOS/iPadOS components that could allow an application to execute arbitrary code with kernel privileges. Apple’s advisory (HT210918) lists affected areas including Kernel, IOAcceleratorFamily, and IOUSBDeviceFamily, with fixes applied in iO...

CVE-2020-9781

CVE-2020-9781 affects Safari on iOS/iPadOS. Issue: a user may grant website permissions to a site they didn’t intend due to prompt handling; root cause relates to permission prompts not being cleared properly after navigation. Impact stated as potential unintended permission grants; exploits not ...

CVE-2021-1837

The CVE-2021-1837 entry corresponds to a certificate validation issue fixed in iOS 14.5 / iPadOS 14.5. Affected products are Apple iOS/iPadOS; vulnerability arises from improper certificate validation, enabling an attacker in a privileged network position to alter network traffic. Mitigation/repa...

CVE-2021-30699

CVE-2021-30699 concerns a window management issue in Apple iOS/iPadOS that could allow a user to view restricted content from the lock screen. The vulnerability is stated as fixed in iOS 14.6 and iPadOS 14.6, addressing improper state/window management. Public sources in the connected documents c...

CVE-2021-31009

CVE-2021-31009 : The issue is resolved by removing HDF5 in Apple software. Public details indicate multiple issues in HDF5 and fixes are applied in iOS 15.2 and iPadOS 15.2, and macOS Monterey 12.1. The Red Hat and Nessus entries corroborate the same CVE as part of their vulnerability sets, listi...

CVE-2023-32432

CVE-2023-32432 affects Apple platforms (macOS Ventura 13.4; tvOS 16.5; iOS 16.5; iPadOS 16.5; watchOS 9.5). Description: a privacy issue was addressed by improving handling of temporary files, reducing the risk that an app could access user-sensitive data. Affected component/area is how temporary...

CVE-2023-38614

CVE-2023-38614 concerns a permissions issue in Apple platforms. The vulnerability could allow an app to access sensitive user data but is mitigated by the fixes in Apple iOS 17 / iPadOS 17 and macOS Sonoma 14. Connected documents confirm the affected products and that the issue has been addressed...

CVE-2023-40520

The CVE-2023-40520 issue concerns Apple platforms where an app could access edited photos saved in a temporary directory due to insufficient access control in Photos Storage. Affected products include tvOS, iOS, iPadOS (all before 17) and watchOS before 10. The underlying problem is improper acce...

CVE-2024-27873

CVE-2024-27873 is an out-of-bounds write vulnerability in Apple software where processing a maliciously crafted video file may cause an app to terminate. The vulnerability is addressed by input validation improvements and is fixed in multiple Apple OS updates: iOS 16.7.9 and iPadOS 16.7.9, macOS ...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

CVE-2024-44218

CVE-2024-44218 affects Apple platforms. The issue, resolved by improved checks, can lead to heap corruption when processing a maliciously crafted file. It is fixed in iOS 17.7.1, iPadOS 17.7.1, iOS 18.1, iPadOS 18.1, and macOS Sonoma 14.7.1. Remediation is upgrading to these versions.

CVE-2024-44229

CVE-2024-44229 affects Apple Safari and several Apple OSes. The issue is an information leakage in Private Browsing, mitigated by additional validation and fixed in Safari 18.1, iOS 18.1, iPadOS 18.1, visionOS 2.1, and macOS Sequoia 15.1. Affected components include Private Browsing behavior that...

CVE-2024-54518

CVE-2024-54518: Root cause is an insufficient bounds-check in a component that can affect coprocessor memory. The issue is fixed by Apple in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. Affected products scope is Apple OS family; no exploit details are provided in the so...

CVE-2025-30436

CVE-2025-30436 (Apple iOS/iPadOS) : On a locked device, an attacker may exploit Siri to enable Auto-Answer Calls due to insufficient restriction of options. The issue is fixed in iOS 18.4 and iPadOS 18.4. Affected user devices should update to 18.4 or later to remediate. The published description...

CVE-2025-31242

CVE-2025-31242 relates to a privacy issue addressed by improved private data redaction for log entries. Affected platforms and fixes: iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. The issue could let an app access sensitive user data. CVSS 3.1 base score: 5.5 (Loca...

CVE-2026-20676

CVE-2026-20676 is a WebKit/WebKitGTK tracking vulnerability where a website may track users via Safari web extensions. The connected documents indicate fixes in Safari 26.3 and corresponding OS versions (iOS/iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3) and related package updates (e.g., webkitgt...

CVE-2026-20690

CVE-2026-20690 affects Apple CoreMedia: processing an audio stream in a malicious media file may trigger an out-of-bounds access, fixed by improved bounds checking in iOS 18.7.7/iPadOS 18.7.7, macOS Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. Affected pr...

CVE-2026-43707

CVE-2026-43707 is a memory corruption vulnerability in WebKit that could cause an unexpected process crash when processing maliciously crafted web content. Apple fixed it in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerability is tied to memory handling in WebKit co...

CVE-2026-43712

CVE-2026-43712 concerns a memory handling issue that could cause an unexpected process crash when processing maliciously crafted web content. According to the provided sources, Apple platforms fix this with Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The CVE is tied to impro...

CVE-2026-64713

CVE-2026-64713 affects WebKit in Apple platforms (Safari/WebKit stack on macOS Sonoma/Sequoia and related OS versions). The issue allowed websites to determine if a user had visited a specific link. Apple fixed this in Safari 26.6 and OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visi...

CVE-2021-1838

CVE-2021-1838 affects Apple iOS 14.4 / iPadOS 14.4 and is tied to the ImageIO component. A vulnerability in processing a maliciously crafted image may allow arbitrary code execution. Apple states the issue was fixed in 14.4 via improved checks. Connected sources corroborate this CVE entry and its...

CVE-2021-1852

CVE-2021-1852 relates to an out-of-bounds read in the Apple kernel exposed on iOS and iPadOS. The underlying issue was addressed by improved input validation, and patches were released in iOS 14.5 and iPadOS 14.5. A local user could potentially read kernel memory. Public documents from Apple and ...

CVE-2021-30956

CVE-2021-30956 affects Apple iOS and iPadOS: a lock-screen vulnerability allows access to contacts when a device is locked, due to insufficient state management. The issue enables viewing private contact information by someone with physical access. Apple’s security content confirms the fix in iOS...

CVE-2023-32403

CVE-2023-32403 affects Apple platforms and is fixed in multiple OS updates (watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and iPadOS 15.7.6, iOS 16.5 and iPadOS 16.5). The issue involved improved redaction of sensitive information, and an app ...

CVE-2023-40438

CVE-2023-40438 concerns improper handling of temporary files that may allow an app to access edited photos saved in a temporary directory. Reported for Apple platforms, the issue is fixed in macOS Sonoma 14, iOS 16.7, and iPadOS 16.7. The Red Hat entry reiterates the same description. Public expl...

CVE-2023-42830

CVE-2023-42830 describes a privacy issue where an application may read sensitive location information due to insufficient redaction in log entries. The vulnerability was addressed by improved private data redaction and is fixed in: macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4. The public documen...

CVE-2023-42862

The CVE-2023-42862 entry describes an out-of-bounds read in image processing that could disclose process memory. Affected products include Apple platforms where ImageIO handles images; fixes are in macOS Ventura 13.3, tvOS 16.4, iOS 16.4, and iPadOS 16.4, with related Apple Security content entri...

CVE-2024-27869

The CVE-2024-27869 issue affects Apple platforms and is described as a vulnerability where an app may be able to record the screen without an indicator. The connected sources indicate the root cause is addressed by improved checks, with fixes implemented in iOS 18, iPadOS 18, and macOS Sequoia 15...

CVE-2024-44171

CVE-2024-44171 affects Apple platforms (iOS 17.7/iPadOS 17.7, iOS 18/iPadOS 18, watchOS 11). Description and Red Hat/NVD entries indicate the issue stems from improved state management that enables an attacker with physical access to a locked device to Control Nearby Devices via accessibility fea...

CVE-2024-44198

CVE-2024-44198 : An integer overflow was mitigated via improved input validation. Affected products include visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18; iPadOS 18; tvOS 18. Processing maliciously crafted web content may crash the process. Remediation is to upgrade to the fixed versions liste...

CVE-2024-44206

An issue in the handling of URL protocols (CVE-2024-44206) may allow bypassing some web content restrictions. It is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6, iPadOS 17.6, and macOS Sonoma 14.6. Affected products include Apple ecosystem components; remediation is to up...

CVE-2025-31241

The CVE-2025-31241 entry describes a memory-management vulnerability (double free) in Apple platforms that could cause an app to terminate. Affected products include iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and w...

CVE-2025-31245

The CVE-2025-31245 issue affects Apple platforms including iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, and visionOS 2.5. It is described as caused by insufficient checks, with the public description stating that an app may be ...

CVE-2026-20660

CVE-2026-20660 is a path handling vulnerability in Apple software that enables a remote user to write arbitrary files through a path handling issue exposed in CFNetwork’s NSGZipDecoder flow. The issue is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS Sequoia 15.7....

CVE-2026-20687

CVE-2026-20687 is a use-after-free memory issue that Apple fixed in multiple platforms: iOS 18.7.7 and iPadOS 18.7.7; iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5; macOS Tahoe 26.4; tvOS 26.4; and watchOS 26.4. The root cause is a memory-management defect that can lead to an app causing unexpec...