CVE-2025-24184

CVE-2025-24184 is an Apple memory-management issue that can cause an Apple system termination. Affected platforms include visionOS 2.3, iOS 18.3, iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The vulnerability is described as caused by improved memory handling in th...

CVE-2025-43440

CVE-2025-43440 is a WebKitGTK/WebKitGTK4 vulnerability affecting WebKitGTK components (webkitgtk4) that can cause an unexpected process crash when processing malicious web content. Connected advisories show the issue being addressed across multiple distributions with concrete fixes: Amazon Linux ...

CVE-2025-43502

This CVE pertains to a privacy issue in Apple platforms that could allow an app to bypass certain Privacy preferences. Affected products include iOS, iPadOS, macOS Tahoe, visionOS, and Safari, with fixes implemented in version 26.1 across these platforms. The underlying description repeatedly not...

CVE-2026-28872

CVE-2026-28872 is an Apple advisory-linked vulnerability described as a resource-exhaustion issue triggered by input validation problems in a component used by Calendar (and related Apple security pages reference multiple iOS/iPadOS subsystems). Root cause: improper handling leading to denial-of-...

CVE-2026-28897

The CVE-2026-28897 entry describes a local-buffer overflow that was mitigated by improved input validation. Affected Apple platforms include iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5....

CVE-2026-28973

CVE-2026-28973 is an Apple macOS/iOS/watchOS vulnerability tied to an integer overflow fixed by improved input validation. The entry notes that the issue could allow a malicious app to break out of its sandbox. Affected products/versions include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, mac...

CVE-2026-28987

The CVE-2026-28987 describes a logging issue that could cause leakage of sensitive kernel state due to insufficient data redaction. Apple fixed this by improving data redaction in the kernel logging path. Affected updates include iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5, macOS Sequoia 1...

CVE-2025-43210

CVE-2025-43210 describes an out-of-bounds access in Apple’s media processing that may cause an app to terminate or memory corruption when handling maliciously crafted media files. Affected products include Apple platforms running iOS, iPadOS, macOS, tvOS, visionOS, and watchOS with specific fixed...

CVE-2025-43223

CVE-2025-43223 is a denial-of-service issue in Apple systems that stems from insufficient input validation. According to the provided documentation, the vulnerability is addressed by input validation improvements and is fixed in multiple Apple platforms and versions: macOS Ventura 13.7.7, macOS S...

CVE-2025-46301

CVE-2025-46301 is an Apple security issue addressed by Apple in iOS 18.7.5 / iPadOS 18.7.5, iOS 26.2 / iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, and watchOS 26.2. Description and OSV/NVD/NCSC/Nessus entries indicate the root cause was impr...

CVE-2026-20641

CVE-2026-20641 is a privacy issue affecting Apple platforms where an app may identify other apps installed on the device. Concrete fixes are listed across multiple Apple OS updates: iOS/iPadOS 18.7.5, iOS/iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionO...

CVE-2026-28859

CVE-2026-28859 affects WebKit-derived runtimes (e.g., WebKitGTK/WebKit in Safari family). Root cause: memory handling changes enabling a malicious website to process restricted web content outside the sandbox. Impact: potential exposure of restricted content outside sandbox; CVSS base score 8.8 (...

CVE-2026-28929

CVE-2026-28929 describes a logic issue in Apple’s Mail app related to Lockdown Mode, where replying to an email could cause remote images to be displayed. The problem is fixed in software updates: iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. The conn...

CVE-2026-43714

The CVE-2026-43714 issue affects Apple platforms and is addressed by updates across multiple OS versions. Affected components/targets include iOS and iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), visionOS, and watchOS, with the root cause described as insufficient input handling that...

CVE-2026-64722

CVE-2026-64722 is a memory-corruption issue in Apple platforms: a buffer overflow that can cause disclosure of process memory when processing certain 3D models. Affected products/versions are iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The root cause is unspecified in th...

CVE-2026-64764

CVE-2026-64764 is an out-of-bounds write vulnerability addressed by Apple in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises when processing a maliciously crafted file, with fixed bounds checking; impact is...

CVE-2024-40830

The CVE-2024-40830 issue affects Apple iOS 18 and iPadOS 18, where an app may be able to enumerate a user’s installed apps. The Connected/NVD entries confirm the vulnerability and state the fix is implemented in iOS 18 / iPadOS 18, addressing data protection to prevent this enumeration. The prima...

CVE-2025-24224

CVE-2025-24224 is a remote-Trigger risk in Apple OS lineages. Affected: tvOS 18.5; iOS 18.5 and iPadOS 18.5; iPadOS 17.7.9; macOS Sequoia 15.5; watchOS 11.5; visionOS 2.5; macOS Ventura 13.7.7. Description: an issue addressed with improved checks that could allow a remote attacker to cause an une...

CVE-2025-31262

Summary of CVE-2025-31262 : A permissions issue could allow an app to modify protected parts of the file system. Apple lists fixes in multiple platforms and versions: visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The base CVSS is MEDIUM (5.5) with local, lo...

CVE-2025-43355

CVE-2025-43355 is a type confusion vulnerability addressed by Apple across multiple platforms. The issue, which can lead to a denial-of-service, is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, visionOS 26, and iOS 18 and iPadOS 18.7. Root cause is a t...

CVE-2025-43359

CVE-2025-43359 describes a logic issue in state management where a UDP server socket bound to a local interface may become bound to all interfaces. This could lead to exposure of network services. The vulnerability affects Apple platforms and is fixed in: tvOS 26, watchOS 26, macOS Sonoma 14.8, i...

CVE-2025-43445

CVE-2025-43445 is an out-of-bounds read vulnerability that Apple fixed via input validation improvements. The CVE affects media processing paths and can cause an app to terminate unexpectedly or memory corruption when handling a malicious media file. Affected platforms and versions, per available...

CVE-2026-20611

CoreAudio in Apple platforms is affected by CVE-2026-20611, an out-of-bounds access issue that can cause an app to terminate or memory corruption when processing a malicious media file. Affected products/versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4...

CVE-2026-28866

Apple advisory CVE-2026-28866 fixes a vulnerability where an app could access sensitive user data due to insufficient validation of symlinks. The issue is addressed with improved symlink validation and is fixed in: iOS 18.7.7 and iPadOS 18.7.7; iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5; macO...

CVE-2026-28879

CVE-2026-28879 is a use-after-free vulnerability in WebKit addressed by Apple. The issue affects processing malicious web content and may crash the process if exploited. Apple’s security notes indicate the fix is included in iOS 18.7.7 / iPadOS 18.7.7, iOS 26.4 / iPadOS 26.4, macOS Sequoia 15.7.5...

CVE-2026-28917

CVE-2026-28917 affects Apple's platforms (iOS/iPadOS, macOS Tahoe, tvOS, visionOS, watchOS). The issue is resolved by improved input validation and is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Vulnerability class...

CVE-2026-28943

CVE-2026-28943 is a logging/data redaction issue tied to kernel memory layout disclosure. Connected sources confirm the vulnerability is present in macOS family components (notably IOHIDFamily) and related OS lineages, with the root cause described as a logging issue leaking kernel memory layout ...

CVE-2026-64735

CVE-2026-64735 affects multiple Apple platforms (iOS 26.6/iPadOS 26.6; macOS Sequoia 15.7.8; Sonoma 14.8.8; Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6). Root cause described as an inconsistent user interface issue resolved by improved state management. The issue allows a remote attacker t...

CVE-2025-31281

CVE-2025-31281 affects Apple OSes including visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6. It stems from an input validation/memory handling issue; processing a maliciously crafted file may cause an app to terminate unexpectedly. Affected versions should be updated to the ...

CVE-2025-43190

CVE-2025-43190 describes a parsing issue in how directory paths are handled, addressed by improved path validation. The fixed products and versions listed in public records include watchOS 26, macOS Sonoma 14.8, iOS 26, iPadOS 26, visionOS 26, and macOS Sequoia 15.7. The vulnerability could enabl...

CVE-2025-43354

CVE-2025-43354 corresponds to a logging issue that could allow access to sensitive user data. Apple fixes: the vulnerability is addressed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26 with improved data redaction. The Apple security content entry places this issue under Bluetooth, in...

CVE-2025-43496

The CVE-2025-43496 issue affects Apple platforms (watchOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 26.1; iOS 18.7.2/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Description: remote content could be loaded even when the device setting Load Remote Images is off. Root cause: insufficient logi...

CVE-2025-46292

CVE-2025-46292 affects Apple iOS/iPadOS prior to versions 26.2 and 18.7.3, respectively. The issue arose from insufficient entitlement checks that could allow a malicious app to access user‑sensitive data. Apple fixed this in iOS 26.2 and iPadOS 26.2, and in iOS 18.7.3 and iPadOS 18.7.3. Remediat...

CVE-2026-20616

CVE-2026-20616: An out-of-bounds write issue affecting USD file processing was mitigated by improved bounds checking. It is fixed in iOS 18.7.5 / iPadOS 18.7.5, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. Exploitation could cause unexpected app termination. This CVE, tied to multipl...

CVE-2026-20628

CVE-2026-20628 describes a permissions issue in the sandbox component that could allow an app to break out of its sandbox. The vulnerability is fixed in multiple Apple platforms and versions: iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS ...

CVE-2026-28953

CVE-2026-28953 concerns a memory handling issue in Apple software that may cause a process crash when processing malicious web content. Connected advisories confirm the vulnerability affected multiple Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) and were addressed by update...

CVE-2026-43708

CVE-2026-43708 affects WebKit/Safari components. The issue allowed a malicious website to exfiltrate data across origins due to insufficient input validation. The vulnerability is addressed with patches in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Root cause: improved inpu...

CVE-2025-43357

CVE-2025-43357 is an Apple vulnerability affecting iOS, iPadOS, and related components (Call History) that could allow fingerprinting of a user. The primary documented impact is exposure of sensitive information through redaction issues, with exploitation described as local in scope and requiring...

CVE-2025-46303

The CVE-2025-46303 issue is an Apple-focused vulnerability where a malicious HID device may cause an unexpected process crash due to an out-of-bounds/bounds-check issue resolved by improved checks. Affected products and patched versions include: iOS 18.7.5 and iPadOS 18.7.5; iOS 26.2 and iPadOS 2...

CVE-2025-46304

CVE-2025-46304 is an Apple HID-related issue where improper bounds checks could cause an unexpected process crash. Affected products include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, and watchOS 2...

CVE-2026-20649

CVE-2026-20649 is an Apple logging-issue vulnerability affecting multiple Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, watchOS) within Game Center that could allow viewing of sensitive user information. The issue is fixed in updates for 26.3 across these OSes (watchOS 26.3, iOS/iPadOS 26.3, m...

CVE-2026-20653

CVE-2026-20653 involves a parsing issue in the Shortcuts component related to handling of directory paths. The flaw allows an app to access sensitive user data and is addressed by path validation improvements, with fixes in: iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15...

CVE-2026-28959

CVE-2026-28959 describes a memory corruption issue (buffer overflow) that affects Apple platforms. The public description consistently states that the vulnerability could allow an app to cause an unexpected system termination and that it has been addressed by improved bounds checking. Connected a...

CVE-2026-28985

The CVE-2026-28985 issue is a null pointer dereference that was addressed by improved input validation and is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and tvOS 26.5. The provided connected documents specify that an attacker on the local network could cause a denial-of-service, indicating...

CVE-2026-28988

CVE-2026-28988 describes a permissions issue where an app may bypass certain Privacy preferences. The vulnerability is addressed in Apple security updates: iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, and watchOS 26.5. The connected advisories (NCSC-2026-0138/0139 and Apple security no...

CVE-2026-28994

CVE-2026-28994 describes a use-after-free in the Wi‑Fi component that Apple fixed across multiple platforms. Affected products include iOS and iPadOS up to 18.7.9/26.5, macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5, and the corresponding tvOS/watchOS versions. The root cause is a memory managem...

CVE-2026-43718

CVE-2026-43718 concerns a stack overflow that was addressed by improved input validation. Affected software includes Safari, iOS, iPadOS, and macOS Tahoe, with fixes shipped in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to...

CVE-2026-43817

CVE-2026-43817 describes an out-of-bounds read that could cause an app to terminate unexpectedly. Apple fixed the issue in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected advisories indicate the problem involved memory handling improvements (bounds checkin...

CVE-2025-43221

The CVE-2025-43221 issue is an out-of-bounds access vulnerability in media processing that was mitigated by improved bounds checking. Affected platforms include macOS Sequoia 15.6, iOS 18.6, iPadOS 18.6, visionOS 2.6, and tvOS 18.6, where processing a maliciously crafted media file could terminat...

CVE-2025-43230

CVE-2025-43230 affects Apple platforms (iPadOS, iOS, macOS Sequoia, watchOS, visionOS, tvOS) with an issue that could allow an app to access user-sensitive data. The vulnerability is addressed by fixes in iPadOS 17.7.9, iPadOS 18.6, iOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, and visio...