CVE-2026-20627

CVE-2026-20627 involves an issue in the handling of environment variables that Apple fixed by improved validation. The vulnerability affects multiple Apple platforms and is addressed in watchOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3, iOS 26.3, and iPadOS 26.3 (and macOS Sonoma...

CVE-2026-28988

CVE-2026-28988 describes a permissions issue where an app may bypass certain Privacy preferences. The vulnerability is addressed in Apple security updates: iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, and watchOS 26.5. The connected advisories (NCSC-2026-0138/0139 and Apple security no...

CVE-2026-28994

CVE-2026-28994 describes a use-after-free in the Wi‑Fi component that Apple fixed across multiple platforms. Affected products include iOS and iPadOS up to 18.7.9/26.5, macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5, and the corresponding tvOS/watchOS versions. The root cause is a memory managem...

CVE-2026-43817

CVE-2026-43817 describes an out-of-bounds read that could cause an app to terminate unexpectedly. Apple fixed the issue in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected advisories indicate the problem involved memory handling improvements (bounds checkin...

CVE-2025-43202

This CVE (CVE-2025-43202) concerns memory handling in Apple platforms. Affects Apple iOS and iPadOS before 18.6 and macOS Sequoia before 15.6; processing a file may lead to memory corruption due to the underlying memory handling issue. The issue is fixed in iOS 18.6, iPadOS 18.6, and macOS Sequoi...

CVE-2025-43230

CVE-2025-43230 affects Apple platforms (iPadOS, iOS, macOS Sequoia, watchOS, visionOS, tvOS) with an issue that could allow an app to access user-sensitive data. The vulnerability is addressed by fixes in iPadOS 17.7.9, iPadOS 18.6, iOS 18.6, macOS Sequoia 15.6, tvOS 18.6, watchOS 11.6, and visio...

CVE-2025-43385

CVE-2025-43385 is an out-of-bounds access vulnerability that could cause an app to terminate or corrupt memory when processing a malicious media file. The issue has concrete fixes in multiple Apple platforms: tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, mac...

CVE-2025-43430

CVE-2025-43430 affects WebKitGTK/WebKitGTK4. The issue is triggered by processing malicious web content and may cause an unexpected process crash due to memory/state handling changes. The connected advisories show multiple distributions (Amazon Linux 2/AlmaLinux/Debian/Fedora) addressing this fam...

CVE-2026-28959

CVE-2026-28959 describes a memory corruption issue (buffer overflow) that affects Apple platforms. The public description consistently states that the vulnerability could allow an app to cause an unexpected system termination and that it has been addressed by improved bounds checking. Connected a...

CVE-2026-43718

CVE-2026-43718 concerns a stack overflow that was addressed by improved input validation. Affected software includes Safari, iOS, iPadOS, and macOS Tahoe, with fixes shipped in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to...

CVE-2025-43225

CVE-2025-43225 concerns a logging issue in Apple OS components where sensitive user data could be exposed due to insufficient data redaction. The NVD description specifies fixes in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, and macOS Sonoma 14.7.7. The accompanying CVSS 3.1 vector i...

CVE-2025-43455

CVE-2025-43455 is a privacy issue addressed by Apple in iOS 26.1, iPadOS 26.1, watchOS 26.1, macOS Tahoe 26.1, and visionOS 26.1. The vulnerability allowed a malicious app to take screenshots of sensitive information in embedded views. Apple mitigated this by tightening privacy checks and isolati...

CVE-2025-43531

CVE-2025-43531 is confirmed in WebKitGTK/WebKit2GTK (webkitgtk4) with a reported race-condition that may cause an unexpected process crash when processing malicious web content. The Amazon Linux 2 advisory ALAS2-2025-3114 notes this CVE among multiple WebKitGTK issues and provides a fix in webkit...

CVE-2025-46306

CVE-2025-46306 affects Apple platforms and Keynote. The issue arises from memory disclosure when processing a maliciously crafted Keynote file, mitigated by improved bounds checks. Affected products/versions include macOS Tahoe 26, Keynote 15.1, iOS 26, and iPadOS 26. The CVE entry indicates a lo...

CVE-2026-64711

CVE-2026-64711 affects Apple platforms where improper entitlement checks could allow an app to leak sensitive user information. Concrete details in the initial record specify the affected software versions and fixes: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Taho...

CVE-2025-43220

Apple CVE-2025-43220 relates to insufficient symlink validation. Affected products include iPadOS 17.7.9 and macOS 15.6 Sequoia, 14.7.7 Sonoma, and 13.7.7 Ventura. The issue may allow an app to access protected user data. It is addressed by Apple through updates to those OS versions (per the CVE ...

CVE-2025-43434

CVE-2025-43434 is a use-after-free in WebKitGTK/WebKit that can cause a crash when processing crafted web content. Connected advisories show affected package webkitgtk4 and related WebKitGTK/WebKit components; fixes are shipped as webkitgtk4-2.50.4-1.amzn2.* for Amazon Linux 2 (and corresponding ...

CVE-2025-43494

CVE-2025-43494 involves a mail header parsing issue in Apple platforms that could allow an attacker to cause a persistent denial-of-service. The connected sources specify the affected products and versions: watchOS before 26.1, iOS before 18.7.2, iPadOS before 18.7.2, macOS Tahoe before 26.1, vis...

CVE-2026-20645

CVE-2026-20645 is an Apple iOS/iPadOS vulnerability described as an inconsistent user interface issue addressed by improved state management. It affects locked devices where an attacker with physical access may view sensitive user information. The CVE is fixed in iOS 18.7.5 and iPadOS 18.7.5, and...

CVE-2026-28833

CVE-2026-28833 concerns a permissions issue in Apple platforms that could allow an app to enumerate a user’s installed apps. The issue is addressed with additional restrictions and is fixed in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4. The initial description notes a local-attack...

CVE-2026-28852

CVE-2026-28852 describes a stack overflow vulnerability mitigated by improved input validation. Affected Apple platforms include iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. The issue could allow an app...

CVE-2026-28957

CVE-2026-28957 concerns an issue where an app could access camera metadata, addressed by Apple with a fixes in iOS/iPadOS 18.7.9 and 26.5, and visionOS 26.5. Affected software includes iOS and iPadOS releases 18.7.9 and 26.5, plus visionOS 26.5; the underlying cause is improper handling of camera...

CVE-2026-28971

CVE-2026-28971 affects Apple platforms via improper UI handling that can be exploited by a malicious iframe to leverage a website’s download settings. Concrete details across connected sources indicate fixes are delivered in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5. The vulnerab...

CVE-2026-28993

CVE-2026-28993 affects Apple platforms and is described as an issue where an app may access user-sensitive data. The initial entry notes that the vulnerability was addressed by adding an additional prompt for user consent and lists fixes in multiple platforms/versions: iOS 18.7.9, iPadOS 18.7.9, ...

CVE-2026-28996

CVE-2026-28996 affects Apple OS components where a race condition was addressed with additional validation. The advisory notes the issue could allow an app to access sensitive user data and is fixed in specific versions: iOS 26.5 and iPadOS 26.5; macOS Sequoia 15.7.7; macOS Sonoma 14.8.7; macOS T...

CVE-2026-64724

Technical details for CVE-2026-64724 are not publicly available in the provided documents. Monitor for updates from Apple advisories and NVD for affected products, impact, and fixes.

CVE-2025-31255

CVE-2025-31255 is an authorization issue fixed by Apple in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26, and iPadOS 26, and macOS Sequoia 15.7. The vulnerability could allow an app to access sensitive user data due to improved state management. Connected sources provide explicit remediation thr...

CVE-2025-43295

CVE-2025-43295 is a denial-of-service issue that Apple addressed by improving input validation. The vulnerability is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7, and iPadOS 18.7. The public description notes that an app may be able to cause a DoS, but the provided documents do not sp...

CVE-2025-43338

CVE-2025-43338 is an out-of-bounds access issue that affects macOS during processing of a malicious media file, potentially causing an app termination or memory corruption. The vulnerability is addressed by bounds checking improvements and is fixed in macOS Tahoe 26 and macOS Sonoma 14.8.2 (per t...

CVE-2025-43345

CVE-2025-43345 affects Apple OSes including tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26/iPadOS 26, macOS Sequoia 15.7, visionOS 26, iOS 18.7/iPadOS 18.7. Description: a correctness issue was addressed with improved checks. Impact: an app may be able to access sensitive user data. Remediation: ...

CVE-2025-43374

CVE-2025-43374 involves an out-of-bounds read in kernel memory that could be triggered by an attacker in physical proximity. Apple fixes indicate this affects iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, and watchOS 11.5, wi...

CVE-2026-20621

CVE-2026-20621 is an Apple memory-handling issue that could allow an app to cause an unexpected system termination or corrupt kernel memory. The vulnerability is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visio...

CVE-2026-20637

CVE-2026-20637 is a use-after-free vulnerability addressed by Apple in multiple OS updates. Affected components are memory-management paths that, in the presence of the flaw, could allow an app to cause an unexpected system termination. The fixed versions are: iOS 18.7.7 and iPadOS 18.7.7; iOS 26...

CVE-2026-20677

CVE-2026-20677 is a race-condition vulnerability related to handling of symbolic links that could allow bypassing sandbox restrictions. Apple fixes indicate this issue affects iOS/iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. The root cause is ...

CVE-2026-28870

CVE-2026-28870 describes an information leakage vulnerability that was addressed with additional validation. The provided documents indicate fixes in Apple OS 26.4 family: iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. The initial description notes that an ap...

CVE-2026-28964

CVE-2026-28964 corresponds to an inconsistency in the user interface resolved by improved state management across Apple platforms. The vulnerability affects CoreAnimation and could allow an app to access sensitive user data due to UI state inconsistencies. Apple’s advisories for iOS 26.5, iPadOS ...

CVE-2026-28977

CVE-2026-28977 affects Apple platforms, with the issue traced to ImageIO handling of maliciously crafted images. The root cause is a bounds-checking/memory handling flaw that could cause an app termination. Fixed in macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Sequoia 15.7.7, iOS/iPadOS 18.7.9, i...

CVE-2026-43733

CVE-2026-43733 is an Apple memory-handling vulnerability tied to processing a malicious image. It affects iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. Exploitation could corrupt process memory, with a CVSSv3.1 base score of 7.8 (high) and local access requiring user interact...

CVE-2025-24089

CVE-2025-24089 involves a permissions issue in iOS 18.3 / iPadOS 18.3 that could allow an app to enumerate a user’s installed apps. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List, etc.) with the same description and impact. Affected software is Apple’s iOS 18.3 and ...

CVE-2025-31229

CVE-2025-31229 affects iOS and iPadOS with a logic issue in the Accessibility/Voi ceOver flow that could cause the passcode to be read aloud. Apple fixes this in iOS 18.6 / iPadOS 18.6; remediation is updating to these versions. The NVD entry maps to a high-severity (C) impact vulnerability, with...

CVE-2025-43209

CVE-2025-43209 is an out-of-bounds access issue in Apple software that is addressed by updates to multiple OSes. Affected and fixed components (as per the CVE entry) include Safari/web content processing and various Apple platforms: macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7, i...

CVE-2025-43224

CVE-2025-43224 is an out-of-bounds access issue addressed by improved bounds checking. It affects visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6, and iPadOS 18.6. Processing a malicious media file may terminate an app or corrupt memory. Remediation: upgrade to the fixed OS versions listed....

CVE-2025-43299

CVE-2025-43299 affects macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7, and iPadOS 18.7. Description: a denial-of-service issue was addressed by improved input validation. Root cause: insufficient validation leading to DoS when handling certain inputs. Impact: potential crash or service disruptio...

CVE-2025-43317

CVE-2025-43317 describes a permissions issue in Apple platforms. The vulnerability may allow an app to access sensitive user data and is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The CVSS data indicate a local attack vector with low attack complexity, no privileges require...

CVE-2025-43358

CVE-2025-43358 concerns a permissions issue in Shortcuts where a malicious or misbehaving shortcut may bypass sandbox restrictions. Public details in connected documents indicate this affects Apple platforms and is mitigated by updates to macOS Sonoma 14.8, macOS Sequoia 15.7, iOS 18.7 / iPadOS 1...

CVE-2025-43361

CVE-2025-43361 describes an out-of-bounds read that could allow a malicious app to read kernel memory. Apple and multiple vendors/feeds confirm the root cause is insufficient bounds checking and note fixes across multiple OS versions: tvOS 26, watchOS 26, iOS 26, iPadOS 26, macOS Sonoma 14.8.2, m...

CVE-2025-43443

CVE-2025-43443 affects WebKitGTK (webkitgtk4). It corresponds to processing maliciously crafted web content that may lead to an unexpected process crash. In the connected advisories, ALAS2-2025-3114 (Amazon Linux 2) fixes this via updates to webkitgtk4 to 2.50.4-1.amzn2.* across architectures; De...

CVE-2025-43535

CVE-2025-43535 affects WebKitGTK/webkitgtk4. The issue is a memory-handling flaw in WebKitGTK that may cause an unexpected process crash when processing malicious web content. Affected packages include webkitgtk4 (and related webkit2gtk/WebKitGTK deployments) with fixes shipped in WebKitGTK 2.50....

CVE-2025-46298

CVE-2025-46298 affects Apple platforms including tvOS, Safari, watchOS, visionOS, iOS, iPadOS, and macOS Tahoe. The description across sources indicates a memory handling vulnerability that could cause an unexpected process crash when processing maliciously crafted web content. Apple patches are ...

CVE-2026-28858

CVE-2026-28858 affects Apple iOS/iPadOS kernels: a buffer overflow caused by insufficient bounds checking in input processing can lead to kernel memory corruption and potential remote code execution. The issue is fixed in iOS 26.4 / iPadOS 26.4; update to apply the mitigation. Reported vectors ar...