CVE-2021-1812

Apple CVE-2021-1812 is an Apple CoreMotion logic issue fixed in iOS 14.5/iPadOS 14.5 that could allow a malicious app to execute arbitrary code with system privileges. Affected product: Apple iOS/iPadOS devices; root cause described as improved validation. Exploitation details are not provided in...

CVE-2021-1833

CVE-2021-1833 affects Apple iOS/iPadOS. The issue stems from permission checking/filtering that could allow an application to gain elevated privileges. Apple patched this in iOS 14.5 and iPadOS 14.5; update to these versions or later to mitigate. Public exploit details are not provided in the sup...

CVE-2024-44277

CVE-2024-44277 affects Apple iOS family components where memory handling vulnerability may allow an app to trigger unexpected system termination or corrupt kernel memory. According to connected sources, the issue is addressed in iOS 18.1, iPadOS 18.1, visionOS 2.1, and tvOS 18.1, with fixed memor...

CVE-2025-31220

CVE-2025-31220 concerns a privacy issue that allowed a malicious app with local access to read sensitive location information. It is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, and macOS Ventura 13.7.6. Affected component/behavior: privacy-related data handling; root cause de...

CVE-2025-43421

CVE-2025-43421 affects WebKitGTK/WebKit2GTK (webkitgtk2/webkitgtk4) and is caused by issues around processing maliciously crafted web content that can lead to an unexpected process crash due to memory handling/array allocation sinking. Multiple advisories confirm the flaw and reference fixes in W...

CVE-2025-43429

CVE-2025-43429 is a buffer overflow in processing malicious web content, addressed by improved bounds checking. Public advisories and records confirm the issue affects WebKit-derived engines (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK deployments. Affected and fixed details includ...

CVE-2026-20615

CVE-2026-20615 is a path-handling vulnerability described across multiple sources as fixed by Apple in iOS 26.3/iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. The issue, reported in CoreServices (path validation), could allow an app to gain root privileges due to improper ...

CVE-2026-20642

CVE-2026-20642 is an input validation vulnerability fixed in iOS 26.3 and iPadOS 26.3. The issue could let a person with physical access to an iOS device access photos from the lock screen. Affected software: iOS and iPadOS (prior to 26.3). Root cause: input validation weakness enabling exposure ...

CVE-2026-28956

CVE-2026-28956 is a memory corruption issue addressed with improved input validation; fixed in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Processing a malicious media file may cause an app to terminate or memory corrup...

CVE-2026-43780

CVE-2026-43780 affects Apple’s ImageIO component. An integer overflow was addressed via improved input validation, with patches in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Processing a maliciously crafted texture may...

CVE-2026-64730

CVE-2026-64730 αφορά UI spoofing via websites that frame malicious content in WebKit/Safari. Leaks/impacts: an attacker could exploit UI spoofing when a site frames content; patched in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Root cause: improv...

CVE-2026-64763

CVE-2026-64763 is an Apple vulnerability describing an out-of-bounds write that was mitigated by removing the vulnerable code. Affected products and versions include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. ...

CVE-2021-30662

CVE-2021-30662 affects Apple iOS/iPadOS; processing a maliciously crafted file may lead to arbitrary code execution. Apple fixed this with iOS 14.5 and iPadOS 14.5. Public references note associated updates in Apple’s security content. Other connected records reiterate the same remediation date a...

CVE-2022-43454

CVE-2022-43454 describes a double-free condition that affects Apple systems where memory management improvements fix the issue. Affected is Apple platforms’ kernel-level handling, with the vulnerability fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. The advisory s...

CVE-2025-43347

CVE-2025-43347 affects Apple OS ecosystem and was addressed by removing the vulnerable code. The NVD entry states the fix is in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26, with an input validation issue also addressed. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

CVE-2025-43441

The CVE-2025-43441 vulnerability is addressed by improved memory handling, with fixes in Safari 26.1, iOS 18.7.2 / iPadOS 18.7.2, iOS 26.1 / iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, and visionOS 26.1. Affected products are Apple platforms where processing maliciously crafted web content could le...

CVE-2026-20644

CVE-2026-20644 affects WebKit/Web content handling in Apple platforms. The issue, described as a memory handling problem, could cause an unexpected process crash when processing maliciously crafted web content. It is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS ...

CVE-2026-28983

Apple fixed CVE-2026-28983 as a type confusion vulnerability. Affected platforms include iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, with fixes shipped in iOS 18.7.9/iPadOS 18.7.9 (and corresponding OS updates for other devices). Impact: remote attacker may cause denial of service. Roo...

CVE-2026-28986

CVE-2026-28986 is a race-condition vulnerability that Apple fixed with additional validation. According to connected sources, the issue could cause an app to trigger an unexpected system termination. It is addressed in multiple Apple OS updates: iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5,...

CVE-2023-42831

CVE-2023-42831 affects Apple operating systems, with remediation in macOS Big Sur 11.7.9, iOS 15.7.8, iPadOS 15.7.8, macOS Monterey 12.6.8, and macOS Ventura 13.5. The issue was addressed by removing the vulnerable code, and may allow an app to fingerprint the user.

CVE-2024-40826

CVE-2024-40826 affects Apple products (iOS/iPadOS 18 and macOS Sequoia 15). The issue is a privacy flaw where an unencrypted document may be written to a temporary file during print preview. Apple documents remediation: the vulnerability is fixed in iOS 18, iPadOS 18, and macOS Sequoia 15. Refere...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-44127

CVE-2024-44127 : A privacy issue in Apple iOS/iPadOS where Private Browsing tabs could be accessed without authentication due to state-management weaknesses. The CVE is addressed in updates: iOS 17.7 and iPadOS 17.7, and iOS 18/iPadOS 18. Mitigations include applying these updates to prevent unau...

CVE-2026-28905

CVE-2026-28905 is an Apple memory-handling flaw affecting how web content is processed, potentially causing an application/process crash. The primary description specifies the issue is fixed in Apple OS updates: iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and visionOS 26.5. The CVSSv3.1 m...

CVE-2026-28958

CVE-2026-28958 is an Apple vulnerability addressed by updates to iOS/iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5. The issue is described as an access to sensitive user data due to improved data protection in the fixed releases. Connected advisories confirm fixes across macOS, iOS/iPadOS, and...

CVE-2026-43709

CVE-2026-43709 affects WebKit-based components in Safari, iOS/iPadOS, and macOS Tahoe/macOS Tahoe builds. Description confirms a use-after-free vulnerability in memory handling that can cause a crash when processing malicious web content. Affected versions include Safari 26.5.2, iOS 26.5.2, iPadO...

CVE-2026-43711

CVE-2026-43711 describes a memory corruption vulnerability in processing a maliciously crafted video file. Apple lists fixed versions across multiple platforms: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The i...

CVE-2026-43769

Summary of CVE-2026-43769 : An integer overflow was addressed via improved input validation. Affected Apple platforms and fixed versions include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue could allow an app t...

CVE-2026-43804

CVE-2026-43804 affects Apple WebKit/Safari on macOS, iOS, iPadOS, visionOS, and macOS Tahoe. The issue is a state-management vulnerability that could allow visiting a malicious website to trigger an app denial-of-service. Apple patched this in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6,...

CVE-2026-64725

CVE-2026-64725 is an out-of-bounds write vulnerability addressed by Apple in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises from insufficient bounds checking and may allow an app to trigger a deni...

CVE-2026-65347

CVE-2026-65347 affects the ImageIO framework on iOS and macOS. A crafted image could cause a denial-of-service via improved checks in iOS 26.6.1/iPadOS 26.6.1/macOS Tahoe 26.6.2. CVSS 6.5 (MEDIUM). No exploitation observed. Patch applies to devices running those OS versions.

CVE-2023-40385

CVE-2023-40385 affects Apple platforms: macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. The issue stems from vulnerable code related to DNS query handling that could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. The public documents consistently state that A...

CVE-2024-44235

CVE-2024-44235 concerns Apple iOS/iPadOS where an attacker with physical access could view restricted content from a locked device. The Apple advisories indicate the issue was addressed with improved checks and is fixed in iOS 18.1 and iPadOS 18.1. Red Hat and other sources reference the same vul...

CVE-2025-30468

Summary of CVE-2025-30468 : Several connected sources confirm a vulnerability in iOS/iPadOS before version 26 where Private Browsing tabs could be accessed without authentication due to improper state management. Apple has issued fixes in iOS 26 and iPadOS 26, addressing the issue through improve...

CVE-2025-31207

CVE-2025-31207 is an Apple logic issue affecting iOS and iPadOS where an app may enumerate a user’s installed apps. The connected documentation confirms the vulnerability and that it is addressed in iOS 18.5 and iPadOS 18.5 with “improved checks.” The NVD/Red Hat/NCSC entries repeat the same desc...

CVE-2025-43400

CVE-2025-43400 is an out-of-bounds write vulnerability in FontParser that Apple fixed across multiple platforms. According to the provided documents, the issue could be triggered by processing a maliciously crafted font and may lead to unexpected app termination or memory corruption. Affected pro...

CVE-2025-43510

Connected documents confirm CVE-2025-43510 is a Copy-on-Write bug in the XNU kernel used in a multi-stage DarkSword exploit chain. The iOS/iPadOS/macOS chain details stage 4: sandbox escape from GPU to mediaplaybackd via this kernel bug, enabling broader privilege escalation. The vulnerability af...

CVE-2025-43541

CVE-2025-43541 is a type-confusion issue in WebKit/WebKitGTK affecting the web rendering stack. Connected advisories show the issue being fixed in WebKitGTK/WebKitGTK+related components, with remediation via updated packages such as webkitgtk4 (e.g., WebKitGTK 2.50.4 and related debian/alma/redha...

CVE-2026-20617

CVE-2026-20617 describes a race condition in CoreServices that could allow an app to gain root privileges. The issue was mitigated by improved state handling and is fixed in multiple Apple platforms: iOS 26.3, iPadOS 26.3, watchOS 26.3, tvOS 26.3, visionOS 26.3, macOS Sonoma 14.8.4, and macOS Tah...

CVE-2026-20664

CVE-2026-20664 is a memory-handling vulnerability where processing malicious web content may cause an unexpected process crash. It is fixed in Safari 26.4, iOS 26.4/iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4. The connected advisories corroborate a fixed-upgrade path (WebKitGTK/WebKit2GTK re...

CVE-2026-20668

CVE-2026-20668 is a logging issue in Apple OS components that could allow an app to access sensitive user data. Affected products include iOS and iPadOS (18.7.7 and 26.3), macOS (Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.3), and visionOS 26.3. The underlying problem is improper data handling in log...

CVE-2026-28936

CVE-2026-28936 affects Apple platforms and is described as a vulnerability where processing a maliciously crafted file may lead to an unexpected app termination. It has been fixed in multiple updates: iOS 18.7.9 and iPadOS 18.7.9; iOS 26.5 and iPadOS 26.5; macOS Sonoma 14.8.7; macOS Tahoe 26.5; a...

CVE-2026-43799

The CVE-2026-43799 issue is a use-after-free memory management vulnerability in Apple platforms. Affected components are Apple OS family releases including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The underlying caus...

CVE-2026-43801

CVE-2026-43801 affects Apple platforms (iOS/iPadOS 26.6; macOS Sequoia 15.7.8; Sonoma 14.8.8; Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6). The issue: an app may access sensitive user data due to inadequate checks; Apple states fixes are included in the listed OS updates (improved checks)....

CVE-2026-64692

CVE-2026-64692 is an Apple-ecosystem issue described as an out-of-bounds read that was addressed by improving bounds checking. The vulnerability is fixed in multiple Apple OS updates (iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; ...

CVE-2026-64771

CVE-2026-64771 involves a buffer overflow resolved by improved bounds checking. Affected software includes iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue could enable remote-induced app termination or heap corruption. Remediation is to updat...

CVE-2023-42869

CVE-2023-42869 is a set of multiple memory corruption issues in libxml2 that were addressed through improved input validation. The CVE entry notes the fixes are included in Apple products: macOS Ventura 13.4, iOS 16.5, and iPadOS 16.5. Connected sources corroborate that the libxml2 problems were ...

CVE-2024-40839

CVE-2024-40839 affects Apple iOS and iPadOS (Lock Screen). Reported issue arises from improper/insufficient state management that could allow a local attacker with physical access to view notification contents on the lock screen. The vulnerability is fixed in iOS 17.5 and iPadOS 17.5. Connected s...

CVE-2024-54512

CVE-2024-54512 concerns the Face Gallery component on Apple platforms. The issue allowed a system binary to fingerprint a user’s Apple Account. Apple addressed it by removing the relevant flags. Patches are included in watchOS 11.2 and iOS 18.2 / iPadOS 18.2. The Apple security content page for F...