CVE-2023-38610

CVE-2023-38610 is a memory corruption vulnerability associated with Apple's Wi‑Fi component that could allow a local attacker to cause a crash or write kernel memory. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Connected sources ...

CVE-2023-41069

CVE-2023-41069 pertains to Apple Face ID anti-spoofing. A 3D model constructed to resemble the enrolled user could authenticate, exposing biometric security. Apple states this was addressed by improving Face ID anti-spoofing models and it is fixed in iOS 17 and iPadOS 17. The vulnerability affect...

CVE-2023-43010

CVE-2023-43010 stems from a WebKit/Web content memory handling issue that could lead to memory corruption. Affected products include Apple WebKit/WebKit-based components in iOS, iPadOS, and macOS (e.g., Safari) with reported impact when processing malicious web content. The issue is mitigated by ...

CVE-2024-40833

CVE-2024-40833 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8, and iOS/iPadOS 16.7.9. The issue allows a Shortcut to access sensitive data from certain actions without user prompts. The description notes improved checks as the fix. ...

CVE-2024-44158

Apple CVE-2024-44158 concerns a flaw where a shortcut could output sensitive user data without consent. The public description cites fixes in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue appears to be addressed by improved redaction of sensitive...

CVE-2024-44227

CVE-2024-44227 affects Apple platforms and is tied to memory handling implementations. The description indicates that an app may cause unexpected system termination or kernel memory corruption, with the root cause described as improved memory handling in the fix. The vulnerability is addressed in...

CVE-2024-44239

The CVE-2024-44239 entry describes an information-disclosure issue where private data in log entries could leak sensitive kernel state. It affects multiple Apple platforms and is fixed in specific versions: tvOS 18.1, iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; macOS Ventura 13.7.1 an...

CVE-2024-54522

CVE-2024-54522 affects Apple platforms (macOS Sequoia 15.2; watchOS 11.2; tvOS 18.2; iOS 18.2; iPadOS 18.2). The issue is described as an out-of-bounds/bounds-check problem that could allow an app to corrupt coprocessor memory. Apple lists the fix as part of the 18.2/Sequoia 15.2 security updates...

CVE-2024-54560

CVE-2024-54560 is a logic issue addressed by Apple across multiple platforms. According to connected sources, the vulnerability could allow a malicious application to modify other apps without the App Management permission. The fix is included in macOS Sequoia 15, iOS 18, iPadOS 18, watchOS 11, a...

CVE-2025-31185

CVE-2025-31185 affects iOS and iPadOS prior to 18.3, where a logic issue allowed viewing photos in the Hidden Photos Album without authentication. The issue is resolved in iOS 18.3 and iPadOS 18.3 via improved checks. Affected software is Apple’s mobile OS family; root cause is a logic flaw in ac...

CVE-2025-31234

CVE-2025-31234: The issue is fixed by OS updates (visionOS 2.5, iOS 18.5 / iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5) after improved input sanitization. The effect could be unexpected system termination or kernel memory corruption. Connected sources confirm updated platforms and published adviso...

CVE-2026-43699

CVE-2026-43699 is a use-after-free vulnerability in WebKit-related components that could be triggered by processing malicious web content, potentially causing an unexpected process crash. The issue is addressed with memory-management fixes and is fixed in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2...

CVE-2026-64732

CVE-2026-64732 affects Apple iOS/iPadOS where an attacker with physical access could access sensitive user data during iPhone Mirroring. The issue was resolved by improved state management and is fixed in iOS 26.6 and iPadOS 26.6. Connected advisories corroborate that core Apple components addres...

CVE-2019-8779

This CVE (CVE-2019-8779) affects Apple iOS/iPadOS sandbox components, specifically third-party app extensions where incorrect sandbox restrictions were applied due to a logic issue. The issue is addressed in iOS 13.1.1 and iPadOS 13.1.1, which update the logic to enforce the correct restrictions....

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-40529

CVE-2023-40529: Apple iOS/iPadOS 17 fixed; the issue allowed a person with physical access to use VoiceOver to view private calendar information. The root cause is described as insufficient redaction of sensitive calendar data, addressed by improved redaction in the update. Affected: iOS 17 and i...

CVE-2024-27879

CVE-2024-27879 concerns an input/bounds-check vulnerability in iOS/iPadOS UIKit components that could let an attacker trigger an unexpected application termination. Public sources confirm the issue is fixed in iOS 17.7 and iPadOS 17.7, and in iOS 18 / iPadOS 18. The NVD/NCSC/NVD-affiliates consis...

CVE-2024-40852

CVE-2024-40852 affects Apple iOS 18 and iPadOS 18. The issue arises in Assistive Access where an attacker could view recent photos without authentication. Apple’s security content indicates this was addressed by restricting options on a locked device, with the patch shipped in iOS 18/iPadOS 18. C...

CVE-2024-44126

CVE-2024-44126 affects Apple ARKit components on macOS and iOS family. The vulnerability allows processing a maliciously crafted file to trigger a heap corruption, with potential impact across confidentiality, integrity, and availability as described in the CVE metrics. Apple’s advisories indicat...

CVE-2024-44217

CVE-2024-44217 concerns a permissions issue related to password autofill that could occur after a failed authentication attempt. Apple has addressed this vulnerability by removing vulnerable code and adding additional checks, with fixes published in iOS 18 and iPadOS 18. Related Red Hat and other...

CVE-2024-54488

CVE-2024-54488 is an Apple logic-issue vulnerability in file handling that allows viewing photos in the Hidden Photos Album without authentication. Affected products include macOS Ventura 13.7.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2 (also iPadOS 17.7.3). Root cause p...

CVE-2025-24111

CVE-2025-24111 is a memory corruption issue addressed by Apple. Apple’s advisories indicate the fix is included in macOS Sequoia 15.3, visionOS 2.3, iPadOS 17.7.7, watchOS 11.3, macOS Sonoma 14.7.5, iOS 18.3, iPadOS 18.3, tvOS 18.3 and macOS Ventura 13.7.5. The description notes an improved state...

CVE-2025-31212

CVE-2025-31212 is fixed in Apple platforms: watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The underlying issue is described as improved state management, with an app potentially accessing sensitive user data. The CVSS v3.1 vector indicates a Local attack wi...

CVE-2026-28883

CVE-2026-28883 affects Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) prior to 26.5. A use-after-free issue in processing web content led to an unexpected process crash. The root cause is described as memory management flaws addressed by the vendor’s update to version 26.5 ac...

CVE-2026-64713

CVE-2026-64713 affects WebKit in Apple platforms (Safari/WebKit stack on macOS Sonoma/Sequoia and related OS versions). The issue allowed websites to determine if a user had visited a specific link. Apple fixed this in Safari 26.6 and OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visi...

CVE-2026-64720

CVE-2026-64720 is a race-condition vulnerability in Apple platforms addressed by updates. The NVD entry states a race condition with improved state handling that can cause an app to terminate the system. Affected products include iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS ...

CVE-2026-64728

CVE-2026-64728 describes a permissions issue in WebKit/Safari where malicious web content could violate iframe sandboxing policy. The initial description states the issue was addressed with improved validation and is fixed in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, vision...

CVE-2023-40456

CVE-2023-40456 affects Apple platforms (tvOS, iOS, iPadOS, watchOS) where an app may access edited photos saved to a temporary directory due to inadequate access checks. Root cause: insufficient checks in Photos Storage. Impact: potential exposure of edited photos in a temp directory. Mitigation:...

CVE-2024-40867

The CVE-2024-40867 issue is an Apple-specific Web content sandbox breakout risk caused by a custom URL scheme handling flaw. Affected products are iOS 18.1 and iPadOS 18.1; Apple fixed the issue in these releases through improved input validation. The vulnerability affects the WebKit/Web content ...

CVE-2024-44212

CVE-2024-44212 is a WebKit cookie management vulnerability affecting Safari/WebKit on Apple platforms. The issue allows cookies belonging to one origin to be sent to another origin due to flawed state management. It is fixed in Safari 18.1 and OS updates: visionOS 2.1, tvOS 18.1, iOS 18.1, iPadOS...

CVE-2025-31196

CVE-2025-31196 describes an out-of-bounds read mitigated by improved input validation. The issue can be triggered by processing a maliciously crafted file, potentially causing a denial-of-service or memory contents disclosure. Affected products: Apple iPadOS, macOS (Ventura 13.7.6, Sonoma 14.7.6)...

CVE-2025-31208

CVE-2025-31208 affects multiple Apple operating systems. The issue, triggered during file parsing, may cause an unexpected app termination. It is fixed in iOS 18.5, iPadOS 18.5/17.7.7, macOS Sequoia 15.5, Sonoma 14.7.6, Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and watchOS 11.5. CVSS indicates a h...

CVE-2025-31226

CVE-2025-31226 describes a logic issue fixed by Apple in specific OS updates. Processing a maliciously crafted image could lead to a denial-of-service. Affected products/versions include watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5; remedi...

CVE-2026-20673

CVE-2026-20673 is a logic-issue vulnerability in Apple Mail that is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4, and iOS/iPadOS 18.7.5. The issue centers on improved checks in the Mail component; turning off “Load remote content in messages” may not apply to all mail prev...

CVE-2026-20687

CVE-2026-20687 is a use-after-free memory issue that Apple fixed in multiple platforms: iOS 18.7.7 and iPadOS 18.7.7; iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5; macOS Tahoe 26.4; tvOS 26.4; and watchOS 26.4. The root cause is a memory-management defect that can lead to an app causing unexpec...

CVE-2026-28901

CVE-2026-28901 affects Apple’s WebKit-based Safari stack; issue rooted in memory handling leading to an

CVE-2026-28979

Summary: CVE-2026-28979 describes an out-of-bounds access issue fixed by enhanced bounds checking. The vulnerability affects web content processing in Apple platforms and is addressed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Affected components (from provided docs): Sa...

CVE-2026-43706

CVE-2026-43706 is a memory-management defect (double free) in libxslt affecting macOS Tahoe 26.5.2, iOS 26.5.2, and iPadOS 26.5.2. The root cause is a double-free in processing malicious web content, which may cause an unexpected process crash. Apple lists libxslt as the vulnerable component with...

CVE-2026-43712

CVE-2026-43712 concerns a memory handling issue that could cause an unexpected process crash when processing maliciously crafted web content. According to the provided sources, Apple platforms fix this with Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The CVE is tied to impro...

CVE-2026-64751

The CVE-2026-64751 entry describes a use-after-free vulnerability that affected Apple platforms and was mitigated in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue can lead to unexpected system termination or kernel memory writes. The associated CVSSv3.1 ...

CVE-2026-64754

CVE-2026-64754 is an out-of-bounds write vulnerability in Apple OS components that is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises from processing a maliciously crafted file and can lead to a de...

CVE-2021-1812

Apple CVE-2021-1812 is an Apple CoreMotion logic issue fixed in iOS 14.5/iPadOS 14.5 that could allow a malicious app to execute arbitrary code with system privileges. Affected product: Apple iOS/iPadOS devices; root cause described as improved validation. Exploitation details are not provided in...

CVE-2021-1833

CVE-2021-1833 affects Apple iOS/iPadOS. The issue stems from permission checking/filtering that could allow an application to gain elevated privileges. Apple patched this in iOS 14.5 and iPadOS 14.5; update to these versions or later to mitigate. Public exploit details are not provided in the sup...

CVE-2024-44277

CVE-2024-44277 affects Apple iOS family components where memory handling vulnerability may allow an app to trigger unexpected system termination or corrupt kernel memory. According to connected sources, the issue is addressed in iOS 18.1, iPadOS 18.1, visionOS 2.1, and tvOS 18.1, with fixed memor...

CVE-2025-43346

CVE-2025-43346 is an out-of-bounds access vulnerability addressed by improved bounds checking. It affects Apple platforms as specified in the sources: tvOS 26, watchOS 26, iOS 26, iPadOS 26, visionOS 26, and iOS 18.7 / iPadOS 18.7. The underlying cause is insufficient boundary checking when proce...

CVE-2026-28956

CVE-2026-28956 is a memory corruption issue addressed with improved input validation; fixed in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Processing a malicious media file may cause an app to terminate or memory corrup...

CVE-2026-43668

CVE-2026-43668 is a use-after-free vulnerability in Apple software that was fixed by memory-management improvements. It affects multiple Apple platforms (iOS, iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) across several versions, including iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPa...

CVE-2026-43822

CVE-2026-43822 describes a use-after-free issue that Apple fixed across multiple OS versions. Affected components involve memory management in the Apple stack, with the impact described as potential unexpected termination of apps or system components. The fixed versions reported are iOS 26.6 and ...

CVE-2021-30662

CVE-2021-30662 affects Apple iOS/iPadOS; processing a maliciously crafted file may lead to arbitrary code execution. Apple fixed this with iOS 14.5 and iPadOS 14.5. Public references note associated updates in Apple’s security content. Other connected records reiterate the same remediation date a...

CVE-2023-28208

CVE-2023-28208 describes a logic issue in Apple platforms where a user could send a text from a secondary eSIM even when a contact was configured to use the primary eSIM. Affected: macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. Impact: potential unauthorized text sending within Messages; CVSS v3....