CVE-2026-64721

CVE-2026-64721 concerns an Apple platform state-management issue that may allow an app to access sensitive user data. The issue is fixed in: iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected advisories corroborate s...

CVE-2026-64729

Technical details for CVE-2026-64729 are not publicly provided in the connected documents. Monitor for updates; the initial description lists a use-after-free issue fixed in 26.6 across Apple OSes.

CVE-2026-64765

CVE-2026-64765 affects multiple Apple OSes (iOS/iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) where an integer overflow occurs during processing of a malicious file. Root cause: improved input validation addresses an overflow in an affected component, preventing potential arbitrary...

CVE-2023-40443

CVE-2023-40443 affects iOS/iPadOS; vulnerability allows an app to gain root privileges. Root cause is revealed through multiple sources: the issue is mitigated in iOS 17 / iPadOS 17 with improved checks. Attack Vector: LOCAL; Privileges Required: NONE; User Interaction: REQUIRED; Impact: HIGH (fu...

CVE-2024-27874

CVE-2024-27874 concerns Apple iOS and iPadOS. The issue stems from a state-management problem that allowed a remote attacker to trigger a denial-of-service. It affects versions prior to the fixed release, with mitigation provided by upgrades to iOS 18 and iPadOS 18. Connected advisories corrobora...

CVE-2024-44124

CVE-2024-44124 affects iOS 18 and iPadOS 18, where a malicious Bluetooth input device may bypass pairing due to a state-management issue. Connected sources confirm the root cause as improper state management in the Bluetooth pairing flow, with Apple listing the fix in iOS 18 / iPadOS 18. The Red ...

CVE-2025-43419

CVE-2025-43419 affects WebKitGTK/WebKit content processing. The vulnerability is described as memory corruption caused by improper memory handling during processing of malicious web content. Affected packages in various Linux distributions (e.g., webkitgtk4) have been addressed by updates to vers...

CVE-2025-43480

CVE-2025-43480 is a cross-origin data exfiltration vulnerability impacting Apple platforms and Safari/WebKit in general. The issue is addressed with improved checks and is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, Safari 26.1, and visionOS 26.1. The CVSSv3.1 score...

CVE-2026-20634

CVE-2026-20634 affects Apple ImageIO across multiple platforms. The issue could allow disclosure of process memory when processing a maliciously crafted image. Root cause: memory handling improvements fixed the vulnerability. Fixed in iOS 18.7.5, iPadOS 18.7.5 and iOS 26.3, iPadOS 26.3; macOS Seq...

CVE-2026-20675

CVE-2026-20675 is an Apple vulnerability tied to processing maliciously crafted images that could disclose user information. Connected sources confirm the issue affects multiple Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS, including Apple TV firmware references) and is addressed ...

CVE-2026-20688

CVE-2026-20688 describes a path handling issue fixed by improved validation. Affected software includes Apple operating systems: iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, and visionOS 26.4. The underlying flaw allows a malicious app to break out of its...

CVE-2026-28947

Concerning CVE-2026-28947, multiple connected advisories confirm a use-after-free/memory management vulnerability affecting Apple platforms. The issue is triggered by processing malicious web content via Safari, leading to a potential crash. It is addressed in macOS Tahoe 26.5, iOS/iPadOS 26.5, t...

CVE-2026-28952

CVE-2026-28952 is an integer overflow that Apple fixed by improved input validation. The NVD entry states the issue can lead to an app possibly causing unexpected system termination, with fixes in iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Related ...

CVE-2026-43703

CVE-2026-43703 affects macOS Tahoe 26.5.2, iOS 26.5.2, and iPadOS 26.5.2, linked to a memory handling issue in libxslt when processing malicious web content. Root cause: memory handling flaw leading to an unexpected process crash. Consequence: potential disruption of a process due to crafted web ...

CVE-2026-64743

CVE-2026-64743 is an authorization issue addressed by Apple with improved state management. The NVD entry specifies that the flaw allows an app to access sensitive user data and is fixed in iOS 26.6 / iPadOS 26.6 / macOS Tahoe 26.6 / tvOS 26.6 / visionOS 26.6 / watchOS 26.6. Core metrics show CVS...

CVE-2025-31210

CVE-2025-31210 affects iOS/iPadOS where processing web content can cause a denial-of-service. Apple attributes this to a FaceTime-related/web-content handling issue and provides fixes in iPadOS 17.7.7, iOS 18.5, and iPadOS 18.5. The vulnerability is resolved by these updates; no exploitation deta...

CVE-2025-43349

CVE-2025-43349 describes an out-of-bounds write in media processing that may cause an app to terminate when handling a malicious video file. The Apple security content lists affected components (e.g., CoreMedia and CoreAudio entries) and notes that the issue is fixed by updating to newer OS relea...

CVE-2025-43425

CVE-2025-43425 is linked to WebKit/WebKitGTK family as described in connected advisories. The vuln manifests as processing maliciously crafted web content that may lead to an unexpected process crash. Concrete details across connected docs show multiple distributions addressing this via updated W...

CVE-2025-43431

CVE-2025-43431 is a WebKitGTK/WebKit2GTK memory corruption issue triggered by processing malicious web content. Public advisories show fixes across Linux distros: AL2 webkitgtk4 2.50.4-1.amzn2.*; Debian/webkit2gtk 2.50.2-1~deb11u1 (and related stable/bookworm updates); Mageia/alma/other entries l...

CVE-2026-20671

CVE-2026-20671 is a logic-issue vulnerability fixed across Apple platforms. Affected products include iOS/iPadOS 18.7.5 and 26.3, macOS Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. The issue is addressed with improved checks; exploitation requires a privilege...

CVE-2026-28954

CVE-2026-28954 describes a file-quarantine bypass where a malicious disk image could bypass Gatekeeper checks. Concrete details from connected advisories confirm affected Apple platforms and fixed versions: iOS 18.7.9 and iPadOS 18.7.9; macOS Sequoia 15.7.7; macOS Sonoma 14.8.7; macOS Tahoe 26.5....

CVE-2026-28962

The CVE-2026-28962 issue affects Apple platforms and is addressed by updates to iOS/iPadOS 18.7.9, iOS/iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5. The vulnerability involved processing maliciously crafted web content that could disclose sensitive user information. Root cause is described as...

CVE-2026-28991

CVE-2026-28991 is an out-of-bounds read vulnerability fixed by improved bounds checking. Affected products include Apple platforms with versions up to 26.5 (iOS 26.5/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). The issue could allow an app to cause a denial of service. ...

CVE-2026-43655

CVE-2026-43655 affects Apple platforms (iOS/iPadOS/macOS Tahoe/tvOS/watchOS) and is caused by an out-of-bounds read due to insufficient bounds checking in IOSurfaceAccelerator. Apple fixed it in 26.5 across the listed OS versions. Potential impact reported: an app may cause unexpected system term...

CVE-2026-43744

CVE-2026-43744 describes an out-of-bounds write in CoreAudio when processing an audio stream from a maliciously crafted media file. The issue is addressed in Apple's security updates: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and...

CVE-2023-40428

CVE-2023-40428 describes an issue in Apple’s iOS/iPadOS where improper cache handling could allow an app to access sensitive user data. The vulnerability is fixed in iOS 17 and iPadOS 17. Connected sources confirm the same description across multiple advisories (Apple and Red Hat) and align on th...

CVE-2024-44147

CVE-2024-44147 affects iOS 18 and iPadOS 18. The issue, resolved by Apple through improved state management, could allow an app to gain unauthorized access to the Local Network via the NetworkExtension surface. The vulnerability is fixed in iOS 18/iPadOS 18; no exploitation details are provided b...

CVE-2024-44263

CVE-2024-44263 is an Apple iOS/iPadOS vulnerability describing a logic issue related to state management that could allow an app to access user-sensitive data. The public records consistently tie the flaw to iOS 18.1 and iPadOS 18.1; Apple’s advisories and CVE records confirm that the issue is ad...

CVE-2025-43511

CVE-2025-43511 is a use-after-free vulnerability in WebKit when processing maliciously crafted web content, causing an unexpected process crash. The Connected documents confirm impact on WebKitGTK/WebKit2GTK components and list remediation via security updates across multiple distributions (e.g.,...

CVE-2026-20626

CVE-2026-20626 affects Apple platforms including iOS, iPadOS, macOS Sequoia 15.7.4, macOS Tahoe 26.3, and visionOS 26.3. The issue is a local-privilege-elevation vulnerability where a malicious app may gain root privileges; CVSS indicates local access, low privileges, no user interaction, and hig...

CVE-2026-20691

CVE-2026-20691 is an authorization issue described as allowing fingerprinting via a malicious webpage. Connected advisories reference WebKitGTK in SUSE/OpenSUSE/SLED/SLES: fixed by upgrading to WebKitGTK 2.52.x (2.52.0/2.52.1) per SUSE-SU-2026:1364-1 and related Fedora advisories. The CVE entry a...

CVE-2026-28865

CVE-2026-28865 is an authentication issue in Apple platforms that Apple fixed with state-management improvements. The advisory indicates the vulnerability affects 802.1X/network authentication and could allow an attacker in a privileged network position to intercept traffic. Patches are present i...

CVE-2026-28867

CVE-2026-28867: Apple advises that an issue was addressed with improved authentication. Affected products include iOS 18.7.7/iPadOS 18.7.7 and iOS 26.4/iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. The vulnerability could allow an app to leak sen...

CVE-2026-28944

CVE-2026-28944 relates to memory-management flaws exposed by processing malicious web content, causing an unexpected process crash. It affects Apple platforms including iOS, iPadOS, macOS Tahoe, and visionOS, and is fixed in versions 26.5 for these systems (per the CVE description and linked advi...

CVE-2026-28972

CVE-2026-28972 describes an out-of-bounds write vulnerability that could cause an app to terminate unexpectedly or write kernel memory. Apple specifies fixes via input validation improvements and lists affected platforms: iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7....

CVE-2026-43653

CVE-2026-43653 affects Apple platforms and is addressed by updates: iOS/iPadOS 18.7.9 and 26.5, macOS Sonoma 14.8.7 and Tahoe 26.5, tvOS 26.5. The vulnerability stems from memory handling flaws and can allow a local-network attacker to cause a denial-of-service. Affected components are not explic...

CVE-2026-43796

CVE-2026-43796 is a vulnerability in Apple platforms that is fixed in macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and in iOS 26.6 / iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. The issue allows an app to access sensitive user data, with the CVE entry describing a local attack vector ...

CVE-2024-40853

CVE-2024-40853 affects Apple iOS 18 and iPadOS 18. Verified details show the issue arises from Siri allowing Auto-Answer Calls on a locked device; Apple fixed it by restricting options on a locked device. Root cause described as a protection bypass tied to Siri on locked screens. Exploitation des...

CVE-2025-43217

CVE-2025-43217 affects Apple iPadOS and iOS where privacy indicators for microphone or camera access may not be correctly displayed. The issue is mitigated by Apple in iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6 through added logic changes. CVSSv3.1 metrics indicate a Local attack vector, Low confide...

CVE-2026-20609

CVE-2026-20609 is a memory-handling vulnerability affecting Apple systems where processing a maliciously crafted file may cause denial-of-service or memory disclosure. Connected sources map the issue to CoreMedia on Apple Watch (and related Apple platforms) with fixes implemented in iOS/iPadOS 18...

CVE-2025-43344

CVE-2025-43344 describes an out-of-bounds access issue in Apple OS components that is mitigated by improved bounds checking. The vulnerability is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The issue could allow an app to terminate the system, depending on context. Connected...

CVE-2025-43458

CVE-2025-43458 is a WebKitGTK/WebKit-related issue described in multiple advisories as a fault in processing maliciously crafted web content that can trigger an unexpected process crash. The core detail in the CVE entry states the fix was implemented via improved state management, with remediatio...

CVE-2025-43507

The CVE-2025-43507 entry describes a privacy issue in Apple platforms where sensitive data was moved, enabling an app to fingerprint the user. Affected products include watchOS, macOS (Tahoe), iOS, iPadOS, and visionOS. Root cause: exposure related to relocating or handling sensitive data that co...

CVE-2026-20636

CVE-2026-20636 is a memory-handling issue in the WebKit/Web content processing path that may lead to an unexpected process crash when processing malicious web content. According to the CVE entry, the vulnerability is fixed in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3...

CVE-2026-20650

CVE-2026-20650 corresponds to a Bluetooth denial-of-service issue that Apple fixed in iOS/iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. The vulnerability is triggered by crafted Bluetooth packets and an attacker in a privileged network position could cause a DoS. The ...

CVE-2026-20680

CVE-2026-20680 affects Apple platforms (iOS, iPadOS, macOS) and describes an information-disclosure issue where a sandboxed app may access sensitive user data due to limitations in observability of app states. Root cause: added restrictions on observability of app states. Impact: potential exposu...

CVE-2026-28877

CVE-2026-28877 concerns an authorization issue fixed by improved state management across Apple OS updates. Affected platforms include iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4. The vulnerability could allow an app to access sensitive user data....

CVE-2026-28902

CVE-2026-28902 affects WebKitGTK/webkit2gtk across multiple Linux distributions (RH/RHEL 8/9, SUSE, Oracle Linux, Amazon Linux 2). The issue stems from improper memory handling when processing malicious web content, potentially causing an unexpected process crash. The advisories indicate remediat...

CVE-2026-64693

The CVE-2026-64693 issue is a type confusion vulnerability addressed by Apple: improved checks fix the flaw. Affected products/versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. If a device processes a m...

CVE-2026-64718

CVE-2026-64718 is a use-after-free in WebKit/Safari processing of web content that may crash Safari. The issue is fixed in Safari 26.6 and corresponding OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6). Exploitation would require local access with user intera...