CVE-2020-9843

CVE-2020-9843 is a WebKit/WebKitGTK issue described as an input validation weakness that may lead to cross-site scripting when processing malicious web content. The vulnerability is documented across multiple platforms: Apple: WebKit-related entries in iOS 13.5/iPadOS 13.5/watchOS 6.2.5/Safari 13...

CVE-2020-3865

CVE-2020-3865 is a WebKit-related memory-corruption issue that affects WebKit and WebKitGTK/WebKitGTK4 components. The initial entry notes memory corruption issues addressed by improved memory handling and fixes in iOS 13.3.1/iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, and related Windows/macOS co...

CVE-2020-9895

CVE-2020-9895 is a use-after-free in memory management that Apple fixed across multiple platforms. Fixed in iOS 13.6, iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, and iCloud for Windows 11.3/7.20. The issue could allow remote code execution or cause arbitrar...

CVE-2025-24124

CVE-2025-24124 affects several Apple platforms. The vulnerability involves a parsing issue that may cause an unexpected app termination. Mitigation is available via updates: iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS ...

CVE-2022-48618

CVE-2022-48618 affects Apple platforms (macOS, iOS/iPadOS, watchOS, tvOS) where an attacker with arbitrary read/write capability can bypass Pointer Authentication due to a TOCTOU/memory-corruption issue. Public details describe a memory-corruption risk that could be exploited locally to bypass se...

CVE-2020-3867

CVE-2020-3867 is a WebKitGTK/WebKit vulnerability categorized as a logic issue in state management that could enable universal cross-site scripting when processing malicious web content. According to the documents, the issue affects WebKitGTK/WebKit components (notably webkitgtk4) and was fixed i...

CVE-2020-9894

CVE-2020-9894 affects WebKit in Windows 10+ (via Microsoft Store) with an out-of-bounds read addressed by improved input validation. Impact: remote termination or arbitrary code execution. Remediation: apply the relevant Apple/Safari security updates (Safari 13.1.2; iOS 13.6/iPadOS 13.6; Safari m...

CVE-2019-15126

CVE-2019-15126 affects Broadcom Wi‑Fi client devices. Timed and handcrafted WLAN traffic can trigger state‑transition errors, causing improper layer‑2 Wi‑Fi encryption and potential information disclosure over the air for a discrete traffic set. Connected docs reference Broadcom/Keystroke‑style e...

CVE-2020-29623

CVE-2020-29623 affects WebKitGTK/WebKit2GTK. The issue: the “Clear History and Website Data” function could fail to fully delete browsing history. Affected products include WebKitGTK-based stacks; upstream fixes exist and are reflected in package updates (e.g., Debian security advisory DSA-4877-1...

CVE-2020-9862

The CVE-2020-9862 entry concerns a command injection vulnerability in Web Inspector (WebKit Web Inspector). The root cause is inadequate escaping when copying a URL from Web Inspector, enabling a potential command injection path. Affected components: Web Inspector/WebKit implementations used in A...

CVE-2021-30936

CVE-2021-30936 is a use-after-free in WebKitWebKitGTK/WebKit processing malicious web content, leading to arbitrary code execution. Public details in connected docs show the issue fixed in Safari 15.2, macOS Monterey 12.1, iOS 15.2, iPadOS 15.2 and tvOS 15.2 (WebKit). Debian and AlmaLinux advisor...

CVE-2023-38565

CVE-2023-38565 involves a path handling issue in Apple OS components where insufficient validation could allow a local attacker to gain root privileges. The NVD entry specifies that the underlying problem is a path handling issue that was addressed with improved validation. Affected versions incl...

CVE-2019-8812

CVE-2019-8812 involves multiple memory corruption issues that Apple fixed by addressing memory handling in WebKit-related components. The advisory states that these issues could allow arbitrary code execution when processing maliciously crafted web content. Affected software includes iOS 13.2 and...

CVE-2019-8815

CVE-2019-8815 is a WebKit memory-corruption issue affecting Apple’s WebKit-derived components. It could enable arbitrary code execution after processing malicious web content. Apple tied fixes to iOS 13.2/iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0 (...

CVE-2020-36329

CVE-2020-36329 is a libwebp use-after-free vulnerability present in versions before 1.0.1, caused by a thread being killed too early. The impact can affect data confidentiality, integrity, and system availability. Remediation is via updates/patches provided by distributions; notable fixes include...

CVE-2021-30744

CVE-2021-30744 describes a cross-origin issue with iframe elements that was addressed by improved tracking of security origins. The vulnerability can lead to universal cross-site scripting when processing malicious web content. The initial entries state fixes in multiple Apple platforms: tvOS 14....

CVE-2023-32433

CVE-2023-32433 is a use-after-free vulnerability in Apple system software. The issue allows an attacker to execute arbitrary code with kernel privileges and is fixed by Apple in specific OS updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 15.7.8 and 16.6, iPadOS 15.7....

CVE-2019-8844

CVE-2019-8844 is a memory corruption issue reported across Apple/WebKit components. The connected advisory confirms the vulnerability was addressed in tvOS 13.3, iOS/iPadOS 13.3, watchOS 6.1.1, Safari 13.0.4, and related macOS/iCloud/iTunes releases, indicating improved memory handling fixed the ...

CVE-2022-32844

CVE-2022-32844 describes a race condition (kernel-level logic issue) that could allow an app with arbitrary kernel read/write to bypass Pointer Authentication. Apple fixed this in tvOS 15.6, iOS 15.6, iPadOS 15.6 and watchOS 8.7 by enhancing state handling and memory checks. Connected sources con...

CVE-2019-8819

CVE-2019-8819 is a WebKit/WebKit-related memory corruption issue that could be triggered by processing malicious web content, potentially enabling arbitrary code execution. The initial entry notes a fix in iOS 13.2/iPadOS 13.2, tvOS 13.2, Safari 13.0.3, and related Apple components. Connected sou...

CVE-2023-32416

CVE-2023-32416 is a logic-issue vulnerability in Apple’s Find My framework where an app may read sensitive location information. The entry notes a fix in macOS Monterey 12.6.8, iOS 15.7.8 / iPadOS 15.7.8, iOS 16.6 / iPadOS 16.6, macOS Ventura 13.5, and watchOS 9.6, implying the impact and remedia...

CVE-2023-38410

CVE-2023-38410 is an Apple kernel privilege-elevation issue that Apple fixed via updated checks. Affected platforms include iOS 16.6/iPadOS 16.6 and macOS Ventura 13.5. The issue could allow a local attacker with low privileges to elevate to high/root privileges. The mitigation is to upgrade to t...

CVE-2023-32441

CVE-2023-32441 is an Apple kernel memory-management issue that could allow an app to execute arbitrary code with kernel privileges. The advisory fixes are in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, and wat...

CVE-2020-36331

CVE-2020-36331 affects libwebp prior to 1.0.1, with an out-of-bounds read in the ChunkAssignData path (mux/muxinternal.c). The vulnerability impacts data confidentiality and availability. Public documents confirm the root cause as out-of-bounds read in the specified function, and multiple advisor...

CVE-2023-38424

CVE-2023-38424 affects Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Impact is described as local, with user interaction required for exploitation; CVSS notes high i...

CVE-2023-38593

CVE-2023-38593 is a logic-issue vulnerability addressed by Apple in updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, and watchOS 9.6. The root cause is described as a logic issue with improved checks, and the impact noted is the potential for an app...

CVE-2021-30734

CVE-2021-30734 is a memory corruption vulnerability in WebKitGTK and WPE WebKit prior to version 2.32.3. Processing malicious web content could lead to arbitrary code execution. Advisories (ASA-202107-67/68 and Debian DSA-4945-1) note the fix to 2.32.3-1 and list the affected packages. Apple’s vu...

CVE-2022-22639

Technical details for CVE-2022-22639 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-8816

CVE-2019-8816 refers to multiple memory corruption issues in WebKit-related components that could lead to arbitrary code execution when processing malicious web content. Public details indicate fixes across Apple platforms: iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, and rele...

CVE-2023-32381

CVE-2023-32381 describes a use‑after‑free vulnerability that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in multiple Apple OS updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5; iOS 16.6 and iPadOS 16.6; tvOS 16.6; watchOS 9.6. Att...

CVE-2019-8769

CVE-2019-8769 concerns WebKit: an issue in the drawing of web page elements could allow leakage of browsing history when visiting a malicious site. Public fixes span multiple platforms and projects: Apple webkit (iOS 13.1/iPadOS 13.1 and macOS Catalina 10.15), WebKitGTK/WebKitGTK+ (e.g., webkitgt...

CVE-2019-8835

CVE-2019-8835 involves multiple memory corruption issues in WebKit components. The public description states exploitation could occur by processing malicious web content, with fixed versions including tvOS 13.3, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windo...

CVE-2020-11763

OpenEXR has a CVE-2020-11763 vulnerability affecting versions before 2.4.1 due to an std::vector out-of-bounds read and write, demonstrated in ImfTileOffsets.cpp. Amazon Linux 2 and Red Hat advisories confirm the issue and list related OpenEXR problems (11761, 11763, 11764). The fixed version is ...

CVE-2020-9807

CVE-2020-9807 is a memory corruption issue in WebKit components that can occur when processing maliciously crafted web content, potentially enabling arbitrary code execution. The vulnerability affects WebKitGTK and related WebKit builds prior to the fixed version, with upstream fix in WebKit 2.28...

CVE-2019-8782

CVE-2019-8782 is a WebKit-related memory corruption issue addressed by Apple in iOS 13.2, iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, and iCloud for Windows 11.0. The advisory notes multiple memory corruption vulnerabilities fixed across WebKit with improved memory handling...

CVE-2019-8811

CVE-2019-8811 is a memory corruption vulnerability in WebKit that affected WebKit components used by Apple and related Windows apps (e.g., iCloud for Windows) and could be triggered by processing malicious web content to achieve arbitrary code execution. The vulnerability is addressed in the Appl...

CVE-2020-11761

CVE-2020-11761 involves an out-of-bounds read during Huffman uncompression in OpenEXR before 2.4.1 (CVE-2020-11761). Amazon Linux 2 advisory ALAS2-2020-1499 documents OpenEXR issues including CVE-2020-11761 and notes the fix in OpenEXR 1.7.1 packages for AL2 and provides upgrade guidance. Red Hat...

CVE-2023-38261

CVE-2023-38261 affects Apple devices (iOS, iPadOS, macOS) with a kernel-privilege arbitrary code execution possibility. The description states the issue was mitigated by improved memory handling and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The available connected documents corro...

CVE-2023-23541

CVE-2023-23541 affects Apple iOS/iPadOS. A privacy issue could allow an app to access information about a user’s contacts due to insufficient private data redaction in log entries. The issue is fixed in iOS 15.7.4 / iPadOS 15.7.4 and in iOS 16.4 / iPadOS 16.4. Affected components are tied to log-...

CVE-2021-30952

CVE-2021-30952 is an Apple WebKit/WebKitGTK-affected integer overflow in processing malicious web content that can lead to arbitrary code execution. The issue is addressed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, iPadOS 15.2, and watchOS 8.3, with fixes via input validation impro...

CVE-2025-31201

CVE-2025-31201 is an Apple vulnerability that enables an attacker with arbitrary read/write capability to bypass Pointer Authentication. The issue is tied to the RPAC path and is fixed in iOS/iPadOS 18.4.1, tvOS 18.4.1, visionOS 2.4.1, and macOS Sequoia 15.4.1. Public records note high severity (...

CVE-2020-3862

CVE-2020-3862 is a denial-of-service issue affecting WebKit/Safari in Apple ecosystems. The vulnerability stems from memory handling in WebKit that could be triggered by visiting a malicious website, potentially impacting availability. Apple fixed this in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1...

CVE-2023-40447

CVE-2023-40447 is a WebKit-related vulnerability that could allow arbitrary code execution when processing web content. The weakness is addressed in Safari 17.1, iOS 17.1/iPadOS 17.1, watchOS 10.1, macOS Sonoma 14.1, macOS Ventura 13.6.1, iOS 16.7.2/iPadOS 16.7.2, macOS Monterey 12.7.1, and relat...

CVE-2019-8808

CVE-2019-8808 refers to memory corruption issues in WebKit-related components that could allow arbitrary code execution when processing malicious web content. Publicly documented fixes target Apple platforms: iOS/iPadOS 13.2, watchOS 6.1, tvOS 13.2, Safari 13.0.3, and iTunes for Windows 12.10.2; ...

CVE-2020-9952

CVE-2020-9952 refers to an input validation issue that could enable a cross-site scripting (XSS) attack when processing maliciously crafted web content. The official guidance states this was addressed with improved input validation and is fixed in Apple software releases: iOS 14.0 and iPadOS 14.0...

CVE-2020-11764

OpenEXR before 2.4.1 contains an out-of-bounds write in copyIntoFrameBuffer (ImfMisc.cpp), CVE-2020-11764. Amazon Linux 2 ALAS2-2020-1499 confirms the OpenEXR fix and provides updated packages; Red Hat/CentOS advisories (RHSA-2020:4039) also address CVE-2020-11764 among related OpenEXR issues. Re...

CVE-2023-41254

CVE-2023-41254 is a privacy-related issue in Apple platforms where log entries could reveal sensitive user data. It affects iOS/iPadOS 16.7.2 and 17.1, watchOS 10.1, macOS Ventura 13.6.1 and Sonoma 14.1. The root cause is improper private data redaction in logs. The issue is fixed in iOS/iPadOS 1...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2023-38425

CVE-2023-38425 affects Apple systems (iOS, iPadOS, macOS) where the kernel could be compromised due to a memory handling issue in a component named in Apple’s advisories. The vulnerability could allow an app to execute arbitrary code with kernel privileges, according to the CVE entry. It has been...

CVE-2020-3864

CVE-2020-3864 is a logic issue where a DOM object context may not have had a unique security origin. It is fixed in Apple/software updates across multiple platforms: iCloud for Windows 7.17, iTunes for Windows 12.10.4, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 1...