CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2022-26765

CVE-2022-26765 is a kernel-level race condition that could let a local attacker with arbitrary read/write bypass Pointer Authentication. Apple security updates fix it across multiple OSes: watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The connected Apple advisories expli...

CVE-2025-24213

CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...

CVE-2020-11759

CVE-2020-11759 affects the OpenEXR open-source image library. The issue arises from integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, allowing an attacker to write to an out-of-bounds pointer in affected builds prior to 2.4.1. The OpenEXR pro...

CVE-2025-24209

CVE-2025-24209 is a WebKitGTK/WebKit-related vulnerability where processing maliciously crafted web content could cause an unexpected process crash due to a buffer/ memory handling issue. The issue affects webkitgtk/webkit2gtk, and multiple Linux distributions have assigned advisories to fix it (...

CVE-2023-23496

CVE-2023-23496 affects Apple Safari/WebKit components; exploitation arises from processing maliciously crafted web content, leading to arbitrary code execution. Publicly documented impact includes macOS Ventura 13.2, macOS Monterey Big Sur/Big Sur? /, iOS 15.7.2 / 16.3, iPadOS 15.7.2 / 16.3, watc...

CVE-2025-24162

CVE-2025-24162 is linked to WebKitGTK/WebKit-derived components in multiple platforms. Connected sources indicate the root cause is improved state management, addressing processing maliciously crafted web content that previously could cause an unexpected process crash. Affected products include v...

CVE-2022-32784

CVE-2022-32784 affects Apple Safari/WebKit; the issue was addressed with improved UI handling and is fixed in Safari 15.6, iOS 15.6, and iPadOS 15.6. The description indicates that visiting a maliciously crafted website could leak sensitive data. The connected documents corroborate Safari/iOS/iPa...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2023-32393

CVE-2023-32393 is a WebKitGTK/WebKit family memory-handling issue where processing web content could lead to arbitrary code execution. The vulnerability is addressed by Apple (watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and is reflected in multiple advisories/NESUS plugins ...

CVE-2023-40403

CVE-2023-40403 involves libxslt and is described as an information disclosure through processing web content, mitigated by improved memory handling. The initial entry states fixes in macOS Ventura 13.6, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, macOS Monterey 12.7, macOS Sonoma 14, and wat...

CVE-2024-27834

CVE-2024-27834 is a WebKit-related vulnerability where an attacker with arbitrary read/write capability may bypass Pointer Authentication. The issue is identified across WebKitGTK/WebKit2GTK deployments and is addressed by updates across multiple ecosystems: Apple platforms: fixed in iOS 17.5/iPa...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2025-24216

CVE-2025-24216 is an Apple WebKit vulnerability: processing malicious web content may cause an unexpected Safari crash. Public records indicate fixes in visionOS 2.4, tvOS 18.4, iPadOS 18.4, iOS 18.4, macOS Sequoia 15.4, and Safari 18.4. The connected documents confirm this CVE within the WebKit/...

CVE-2022-22677

CVE-2022-22677 describes a logic issue in the handling of concurrent media (WebKit/WebRTC) that could interrupt video self-preview when a phone call is answered. Affected software is Apple platforms implementing WebKit/WebRTC (notably macOS Monterey and iOS/iPadOS in the 12.4/15.5 family). The ro...

CVE-2022-26719

CVE-2022-26719 is a memory corruption vulnerability in WebKitGTK/WebKit. The Apple advisory states that processing malicious web content may lead to arbitrary code execution and that fixes are applied in macOS Monterey 12.4, iOS 15.5/iPadOS 15.5, tvOS 15.5, watchOS 8.6, and Safari 15.5. Related a...

CVE-2023-23524

The CVE-2023-23524 issue is a denial-of-service vulnerability caused by improper input validation when processing a certificate. Affected Apple platforms include tvOS 16.3.2, iOS 16.3.1 / iPadOS 16.3.1, watchOS 9.3.1, and macOS Ventura 13.2.1. The root cause is improved input validation in the so...

CVE-2022-46699

CVE-2022-46699 is a WebKitGTK/WebKitGTK2/WebKitGTK4 memory-corruption vulnerability that can allow arbitrary code execution when processing malicious web content. Connected advisories confirm the issue and its fixes across multiple distros: Debian/Ubuntu Debian-LTS (webKit2GTK/WebKit2GTK), Fedora...

CVE-2025-24264

CVE-2025-24264 affects WebKitGTK/WebKitGTK4: processing malicious web content may cause an unexpected crash in Safari; fixed in Apple platforms (visionOS 2.4, Safari 18.4, etc.) and in WebKitGTK packages across distros (Debian: webkit2gtk 2.48.x; Fedora/Amazon Linux advisories) by upgrading to pa...

CVE-2022-46705

CVE-2022-46705 is a spoofing vulnerability in the handling of URLs that can enable address-bar spoofing when visiting a malicious site. The initial description notes improved input validation and lists affected platforms (Apple products) with fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, an...

CVE-2021-30955

CVE-2021-30955 describes a race condition in Apple's iOS/macOS kernel handling that could allow a malicious user-space app to gain kernel privileges. The initial entry notes a fix in macOS Monterey 12.1 and corresponding iOS/iPadOS/watchOS/tvOS updates (12.1/15.2), addressing a race-condition wit...

CVE-2022-42863

CVE-2022-42863 is a WebKit/WebKitGTK memory corruption issue addressed by improved state management. The CVE entry specifies that processing malicious web content may lead to arbitrary code execution and lists affected platforms/versions: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPad...

CVE-2026-64747

CVE-2026-64747 is a buffer overflow vulnerability fixed by improved size validation. It affects Apple platforms including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue may allow an app to execute arbitrary code ...

CVE-2025-24189

CVE-2025-24189 is a memory corruption vulnerability in processing malicious web content that is fixed in Safari 18.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 and tvOS 18.3. Affected WebKit components are the WebKitGTK/WebKitGTK4 family in Linux distributions (per SUS...

CVE-2026-65346

An integer overflow in Apple's ImageIO framework (CVE-2026-65346) allows arbitrary code execution when processing a malicious image on iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. No in-the-wild exploitation is reported; updates are available via Apple's security advisories.

CVE-2022-46691

CVE-2022-46691 is a memory consumption issue in WebKitGTK / WebKit that may enable arbitrary code execution when processing malicious web content. Connected advisories confirm the issue affects WebKitGTK/WebKit, with fixes delivered in Safari 16.2 and corresponding WebKitGTK updates. The underlyi...

CVE-2022-22642

CVE-2022-22642 affects FaceTime on Apple iOS/iPadOS. The vulnerability could allow a user to bypass the Emergency SOS passcode prompt. Apple fixed the issue in iOS 15.4 and iPadOS 15.4, addressing the bypass through enhanced checks/validation. The available connected documents consistently descri...

CVE-2022-32792

CVE-2022-32792 is an out-of-bounds write in WebKitGTK/WebKit affecting the webkitgtk and wpewebkit engines. Exploitation by processing malicious web content may lead to arbitrary code execution. Public advisories confirm fixes in upstream WebKitGTK/WebKit: Arch Linux ASA-202207-1/ASA-202207-2 pat...

CVE-2022-22666

CVE-2022-22666 is a memory corruption vulnerability affecting AppleAVD in Apple’s media decoding stack. The issue arises when processing a maliciously crafted image, due to a memory corruption condition that can lead to heap corruption. Public details indicate the vulnerability is addressed by va...

CVE-2025-24104

CVE-2025-24104 concerns Apple platforms (iPadOS 17.7.4, iOS 18.3, iPadOS 18.3) where the backup restore process could incorrectly handle symlinks, allowing a malicious backup to point system file reads/writes and potentially modify protected system files. Apple’s advisories indicate the issue is ...

CVE-2022-26736

CVE-2022-26736 is an out-of-bounds write vulnerability affecting Apple platforms (notably tvOS 15.5) where an improved bounds check fixes allowed an attacker to execute arbitrary code with kernel privileges. The issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Apple’s ...

CVE-2025-24163

CVE-2025-24163 affects Apple platforms and has been fixed in multiple OS updates (iOS/iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3, iPadOS 17.7.4, visionOS 2.3). The issue is described as: Parsing a file may lead to an unexpected app termination in CoreAudio. Conn...

CVE-2022-22638

CVE-2022-22638 involves a null pointer dereference that was fixed through improved validation. Affected across Apple platforms: tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3. The issue could allow a privileged attac...

CVE-2024-54543

CVE-2024-54543 is a memory corruption flaw in WebKit when processing maliciously crafted web content. Apple’s advisories enumerate fixed products/versions: visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2. Connected sources (e.g., WebKit GTK deployment...

CVE-2024-23284

CVE-2024-23284 concerns a logic issue in WebKitGTK/WebKit rendering where processing maliciously crafted web content may prevent Content Security Policy (CSP) from being enforced. The connected sources show the same vulnerability across multiple distributions (e.g., Debian webkit2gtk advisories a...

CVE-2024-54505

CVE-2024-54505 is a memory corruption vulnerability in WebKitGTK (WebKit2GTK) caused by a type confusion when processing malicious web content. Public advisories confirm fixes in WebKitGTK/WebKit packages: Debian 11 bullseye 2.46.5-1~deb11u1 and Debian 12 bookworm 2.46.5-1~deb12u1; AlmaLinux 8/9 ...

CVE-2020-9849

CVE-2020-9849 affects Apple platforms including macOS Big Sur 11.0.1, iOS/iPadOS 14.0, watchOS 7.0, tvOS 14.0, and related Windows components. The issue is described as an information disclosure due to improved state management that may allow memory leakage. Remediation is to update to the listed...

CVE-2024-23213

CVE-2024-23213 is a memory-handling vulnerability in WebKit (as used by WebKitGTK/WebKit in various OS ecosystems) that may allow arbitrary code execution when processing web content. Public disclosures in connected documents show fixes across multiple platforms: Apple family (watchOS/iOS/macOS/S...

CVE-2022-26710

CVE-2022-26710 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK that could lead to arbitrary code execution when processing malicious web content. Connected advisories identify WebKitGTK/WebKit2GTK as affected, with fixed updates in downstream distributions (e.g., AL2/AL8 advisories and ...

CVE-2025-24208

CVE-2025-24208 affects WebKitGTK (webkitgtk) where loading a malicious iframe may lead to a cross-site scripting (XSS) attack. Public advisories confirm the issue and list it among fixed CVEs in multiple distro advisories (e.g., Debian DSA-5899-1 and AlmaLinux/ALSA advisories) with remediation vi...

CVE-2026-43794

The vulnerability resides in WebKit on Apple platforms, triggered by processing malicious web content. It is fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 . No exploitation or exploit code is reported; CISA SSVC rates technical impact as total. Users shou...

CVE-2024-23263

CVE-2024-23263 is a WebKitGTK/WebKitGTK4 vulnerability observed in multiple Linux package advisories (webkit2gtk, webkitgtk4) and Debian Fedora Amazon Linux updates. The issue arises from processing maliciously crafted web content that may prevent Content Security Policy from being enforced. Conn...

CVE-2022-42823

CVE-2022-42823 describes a type confusion vulnerability in WebKit (affecting WebKitGTK/WebKit2GTK and related WebKit variants) that could allow arbitrary code execution when processing maliciously crafted web content. The issue is addressed by memory-management improvements and fixes are listed f...

CVE-2024-44187

Summary of CVE-2024-44187 (Cross-origin iframe data exfiltration) A cross-origin issue existed involving iframe elements in WebKitGTK/WebKit2GTK, allowing a malicious site to exfiltrate data across origins. The root cause is stated as inadequate tracking of security origins for iframes. Affected ...

CVE-2025-24118

CVE-2025-24118 affects Apple’s kernel on iPadOS/macOS. The issue is described as an out-of-bounds/write-related memory handling race in credential updates (proc_ro.p_ucred) that could allow a kernel crash or credential corruption. Reports in connected sources provide PoCs and demonstrations of a ...

CVE-2022-32832

CVE-2022-32832: Apple security issue tied to memory handling that could allow an app with root privileges to execute arbitrary code with kernel privileges. The vulnerability is addressed via updates across Apple operating systems, including iOS 15.6/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monter...

CVE-2022-32923

CVE-2022-32923 is a correctness issue in the JIT that may disclose internal app states when processing malicious web content. Affected products include tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. The vulnerability is fixed in these ...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2024-54479

CVE-2024-54479 is documented in Debian security advisories as affecting WebKitGTK/webkit2gtk, where processing maliciously crafted web content may lead to an unexpected process crash. Debian reports this under webkit2gtk in both Debian 11 (bookworm) and LTS context, fixed in webkit2gtk version 2....