CVE-2021-1820

CVE-2021-1820 is a memory initialization issue fixed in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The description states that processing maliciously crafted web content may lead to disclosure of process memory. Connected documentation confirms the vulnerability is a m...

CVE-2023-23514

CVE-2023-23514 is a macOS kernel-use-after-free vulnerability. In macOS Ventura 13.3 (and related updates) the issue was addressed by improved memory management, fixing a flaw that could allow an app to execute arbitrary code with kernel privileges. Public references in Apple advisories show the ...

CVE-2022-22592

CVE-2022-22592 is a WebKit/WebKitGTK logic issue (state management) that may allow malicious web content to bypass or prevent enforcement of Content Security Policy. In the connected advisories, the vulnerability is cited across multiple ecosystems: Apple platforms (WebKit/WebKitGPU stack) with f...

CVE-2019-8763

CVE-2019-8763 is a WebKit-related memory corruption issue addressed across Apple platforms. The description in the initial doc notes multiple memory corruption problems resolved by improved memory handling, with fixes in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1...

CVE-2021-30954

CVE-2021-30954 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2. The connected Astra Linux advisory a...

CVE-2022-26751

CVE-2022-26751 describes a memory corruption issue triggered by processing a maliciously crafted image. The vulnerability is addressed by Apple in iTunes 12.12.4 for Windows, and in iOS 15.5 / iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, and macOS Monterey 12.4. The fixed...

CVE-2022-26702

CVE-2022-26702 is a use-after-free vulnerability in Apple software that could allow an attacker to execute arbitrary code with kernel privileges on affected devices. Apple fixes are listed for watchOS 8.6, tvOS 15.5, iOS 15.5, and iPadOS 15.5. The provided documents identify this vulnerability as...

CVE-2024-54534

CVE-2024-54534 is an Apple memory-corruption issue triggered by processing malicious web content. Public details in connected documents show the vulnerability affects multiple Apple platforms (watchOS, visionOS, tvOS, macOS, Safari, iOS, iPadOS) and is mitigated by memory-management fixes. Fixed ...

CVE-2019-14899

CVE-2019-14899 is a routing-path/kernel issue affecting macOS (and cited across Linux, FreeBSD, OpenBSD, iOS, Android). The root cause is a VPN-tunnel routing problem that allows a local/adjacent attacker to inject into active VPN connections, enabling data injection and potential VPN hijacking. ...

CVE-2022-32922

CVE-2022-32922 describes a use-after-free in Safari-related web content processing that could lead to arbitrary code execution. Affected products/versions include Safari 16.1, iOS 16.1, iPadOS 16, and macOS Ventura 13; the issue is addressed by memory-management fixes in these versions. The conne...

CVE-2023-28201

CVE-2023-28201 affects Apple WebKit Web Inspector used by Safari/WebKit components on macOS ( Ventura 13.3 ), iOS 16.4 / 15.7.4, iPadOS 16.4 / 15.7.4, and tvOS 16.4. The root cause is related to improved state management in WebKit; the issue could allow a remote attacker to cause unexpected app t...

CVE-2021-30953

CVE-2021-30953 is a WebKit Web content handling vulnerability (out-of-bounds read) that could allow arbitrary code execution. It is fixed in Safari 15.2, iOS 15.2, iPadOS 15.2, macOS Monterey 12.1, and tvOS 15.2. Public sources in the Connected Documents corroborate the issue as an out-of-bounds ...

CVE-2021-30928

CVE-2021-30928 is a memory corruption vulnerability in CoreGraphics affecting processing of maliciously crafted images, leading to arbitrary code execution. The Apple advisories indicate the issue is fixed in macOS Big Sur 11.6 and in iOS 14.8 / 15, iPadOS 14.8 / 15, watchOS 8, and tvOS 15. The A...

CVE-2025-31257

CVE-2025-31257 affects WebKit/WebKitGTK components used by Safari across Apple platforms. The issue is described as a memory handling problem that may cause a crash when processing maliciously crafted web content. Concrete fixes exist in watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequo...

CVE-2021-30823

CVE-2021-30823 is a logic issue in WebKit that allowed bypassing HSTS when processing web content. It is addressed in macOS Monterey 12.0.1, iOS 14.8/iPadOS 14.8, tvOS 15, Safari 15, and watchOS 8. Connected sources also list WebKitGTK+ and Apple advisories referencing the same CVE as part of a b...

CVE-2024-54467

CVE-2024-54467 involves a cookie-management issue in WebKitGTK (webkit2gtk) that can allow a malicious website to exfiltrate data cross-origin. The initial description notes fixes across Apple platforms (watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18, iPadOS 18, tvOS 18). Connected d...

CVE-2023-32445

CVE-2023-32445 is a cross-site scripting vulnerability triggered when processing a document. The issue affects Apple platforms including Safari, macOS Ventura, iOS, iPadOS, watchOS, and tvOS as listed, with exploitation potential tied to document handling. Apple states the vulnerability is resolv...

CVE-2023-34425

CVE-2023-34425 involves an issue in Apple software where improved memory handling fixes allow arbitrary code execution with kernel privileges. Affected are watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5. The...

CVE-2020-6616

CVE-2020-6616 involves Broadcom BCM4361 Bluetooth RNG: a low-entropy PRNG is used where a Hardware RNG should be, enabling spoofing risks. Publicly documented impact references include Apple’s iOS 13.5/iPadOS 13.5 notes, which list CVE-2020-6616 under Bluetooth with a low-entropy PRNG issue, affe...

CVE-2023-23530

CVE-2023-23530 relates to an Apple memory handling issue that could allow an app to execute arbitrary code outside its sandbox or with elevated privileges. The vulnerability is addressed in macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3, indicating an Apple memory-management fault in the affected ...

CVE-2025-24150

CVE-2025-24150 concerns WebKitGTK/WebKit components where copying a URL from Web Inspector may lead to command injection. The Initial Description identifies Apple platforms fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Connected documents corroborate the CVE in WebKitGTK con...

CVE-2021-30984

CVE-2021-30984 is a race condition in WebKit-based engines (WebKitGTK/WebKit) that could allow processing malicious web content to execute arbitrary code. Apple advisory notes fixes in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Connected docs also referenc...

CVE-2021-30809

CVE-2021-30809 is a WebKit/WebKitGTK use-after-free vulnerability. The Debian/AlmaLinux/Amazon advisories and Debian security tracker describe it as a use-after-free issue in WebKitGTK that could allow arbitrary code execution when processing malicious web content, with fixes implemented in Safar...

CVE-2019-8822

CVE-2019-8822 is an Apple WebKit vulnerability involving multiple memory corruption issues when processing malicious web content, fixed in iOS 13.2 / iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, and iCloud for Windows 11.0 (and 7.15). The issue enables arbitrary code executi...

CVE-2023-36495

CVE-2023-36495 involves an integer overflow that Apple fixed by improving input validation. Affected platforms include watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8/iPadOS 15.7.8, tvOS 16.6, iOS 16.6/iPadOS 16.6, and macOS Ventura 13.5. The issue could allow an app to execute arbitrary code with...

CVE-2025-30427

CVE-2025-30427 is a use-after-free vulnerability in processing maliciously crafted web content that may lead to an unexpected Safari crash. Affected in multiple Apple platforms; fixes are implemented in visionOS 2.4, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, and Safari 18.4. Debian...

CVE-2019-8821

CVE-2019-8821 is a WebKit/WebKitGTK+ related vulnerability referenced in Apple security content for Windows (iCloud for Windows) and tied to WebKit components. The connected Apple advisories attribute CVE-2019-8821 to WebKit processing of malicious web content and memory-corruption issues, with t...

CVE-2022-26709

CVE-2022-26709 is a use-after-free in WebKitGTK that can lead to arbitrary code execution when processing malicious web content. The initial CVE entry notes the fix across Apple platforms (tvOS 15.5, iOS 15.5/iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5). Connected advisories (Debia...

CVE-2022-46692

CVE-2022-46692 is a logic issue in WebKitGTK/WebKit causing a bypass of the Same Origin Policy when processing malicious web content. The Apple ecosystem fixes (Safari 16.2, iOS 16.2/iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, etc.) are documented in the initial CVE description. Connected advis...

CVE-2023-38604

The CVE-2023-38604 issue is an out-of-bounds write addressed by input validation fixes. Affected Apple platforms include watchOS 9.6; macOS Big Sur 11.7.9; macOS Monterey 12.6.8; macOS Ventura 13.5; iOS 15.7.8 / 16.6; iPadOS 15.7.8 / 16.6; tvOS 16.6. The vulnerability could allow an app to execut...

CVE-2022-42799

CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...

CVE-2022-42852

Mode C: CVE-2022-42852 affects WebKitGTK (webkitgtk2/gtk3 WebKit) components used in Linux GTK-based deployments. The issue allows processing of malicious web content to disclose process memory. Public advisories confirm fixes in WebKitGTK-related packages (e.g., Debian webkit2gtk updates, Fedora...

CVE-2023-38598

CVE-2023-38598 is a use-after-free in Apple operating system components that was addressed via memory-management fixes. The vulnerability can lead to arbitrary code execution with kernel privileges and is fixed in multiple Apple OS versions: watchOS 9.6, macOS Big Sur 11.7.9, macOS Monterey 12.6....

CVE-2021-30848

CVE-2021-30848 is a memory corruption vulnerability in WebKit/WebKitGTK. The issue may be triggered by processing malicious web content and could lead to code execution. Public advisories confirm fixes in Apple Safari/WebKit products (iOS 14.8, iPadOS 14.8, Safari 15, iOS 15, iPadOS 15) and relat...

CVE-2021-30951

CVE-2021-30951 is a WebKit-family use-after-free vulnerability that may be triggered by processing malicious web content. Affected components include WebKit (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK variants. The root cause is described as a memory-management issue leading to po...

CVE-2021-1826

CVE-2021-1826 describes a logic issue in WebKit where processing malicious web content could trigger universal cross-site scripting on Apple platforms. The vulnerability was fixed in Apple software updates across multiple OSes: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5...

CVE-2022-22590

CVE-2022-22590 is a use-after-free in WebKit/WebKitGTK (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Affected lines in connected docs indicate WebKitGTK/WebKit implementations and that Apple fixed the issue in iOS 15.3/iPadOS 15.3/watchOS 8.4/...

CVE-2022-32823

CVE-2022-32823 describes a memory initialization issue that could allow an app to leak sensitive user information. It is fixed in Apple OS updates: iOS/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update 2022-005 Catalina. The vulnerability is local...

CVE-2022-42817

Summary of CVE-2022-42817 (Apple ecosystem) : A logic issue affecting Safari/WebKit on Apple systems could allow leakage of sensitive data when visiting a malicious website. Root cause described as improved state management. Fixed in software updates: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iP...

CVE-2023-28198

CVE-2023-28198: A use-after-free in WebKit processing web content was fixed. Affected: Apple platforms (iOS/iPadOS/macOS) as per the description. Impact stated: arbitrary code execution if exploited via processing web content. Root cause: memory management/use-after-free vulnerability. Remediatio...

CVE-2023-37285

CVE-2023-37285 is an out-of-bounds read vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges. It is fixed in iOS/iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. Exploitation status and in-the-wild detai...

CVE-2022-22589

CVE-2022-22589 is a validation issue in WebKit/WebKitGTK where processing a maliciously crafted mail message could lead to running arbitrary JavaScript. The trusted component is WebKit/WebKitGTK in Apple platforms (iOS, iPadOS, watchOS, tvOS, macOS Monterey 12.2+; Safari 15.3) and WebKitGTK for L...

CVE-2020-9947

CVE-2020-9947 is a use-after-free vulnerability in memory management related to WebKit/Safari on Apple platforms. The advisory states that processing malicious web content may lead to arbitrary code execution. Fixed in watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, Safari 14.0, and corresponding...

CVE-2021-30884

CVE-2021-30884 relates to WebKit-based rendering components (notably WebKitGTK/WebKit on embedded platforms) where an issue in CSS compositing could allow a malicious website to reveal browsing history. The root cause is described as limitations or restrictions on CSS compositing. The vulnerabili...

CVE-2022-26762

CVE-2022-26762 is a memory corruption issue addressed by macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges via a local vector. Affected components are not explicitly enumerated in the provided documents beyond the ...

CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

CVE-2024-23286

CVE-2024-23286 concerns a buffer overflow fix tied to memory handling in Apple platforms. Affected components/versions (as stated): macOS Monterey 12.7.4; macOS Ventura 13.6.5; macOS Sonoma 14.4; visionOS 1.1; iOS 17.4 and iPadOS 17.4; watchOS 10.4; iOS 16.7.6 and iPadOS 16.7.6; tvOS 17.4. Underl...

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2022-26981

Liblouis up to version 3.21.0 is affected by a buffer overflow in compilePassOpcode within compileTranslationTable.c (indirectly via tools/lou_checktable.c). The issue lies in Liblouis 3.21.0 and earlier, with the vulnerable code path being invoked during translation table compilation. The effect...

CVE-2022-26716

CVE-2022-26716 is a memory corruption vulnerability in WebKitGTK/WebKit exposure that could allow arbitrary code execution when processing malicious web content. Public records in connected advisories (AlmaLinux ALAS2-2023-2088 and ALMA 2022:7704/8054) confirm fixes in WebKitGTK/WebKitGTK3/4 pack...