CVE-2016-4622

CVE-2016-4622 : WebKit-based components in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2 are vulnerable to a crafted website that can lead to remote code execution or memory corruption. The entry notes this is a different issue from CVE-2016-4589, CVE-2016-4623, and CVE...

CVE-2022-26710

CVE-2022-26710 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK that could lead to arbitrary code execution when processing malicious web content. Connected advisories identify WebKitGTK/WebKit2GTK as affected, with fixed updates in downstream distributions (e.g., AL2/AL8 advisories and ...

CVE-2023-23524

The CVE-2023-23524 issue is a denial-of-service vulnerability caused by improper input validation when processing a certificate. Affected Apple platforms include tvOS 16.3.2, iOS 16.3.1 / iPadOS 16.3.1, watchOS 9.3.1, and macOS Ventura 13.2.1. The root cause is improved input validation in the so...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2019-6227

CVE-2019-6227 is a WebKit-related memory corruption vulnerability that could be triggered by processing malicious web content, potentially leading to arbitrary code execution. The vulnerability is documented in Apple advisories and is fixed in macOS/Safari/WebKit updates: iOS 12.1.3, tvOS 12.1.2,...

CVE-2019-6215

CVE-2019-6215 is a WebKit/Web content processing type confusion vulnerability that could allow arbitrary code execution on affected Apple platforms. Root cause: memory handling issue in WebKit. Affects Safari/WebKit on iOS, macOS, tvOS, and Windows components listed in Apple/Windows advisories. I...

CVE-2026-43794

The vulnerability resides in WebKit on Apple platforms, triggered by processing malicious web content. It is fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 . No exploitation or exploit code is reported; CISA SSVC rates technical impact as total. Users shou...

CVE-2017-13870

CVE-2017-13870 affects Apple WebKit across multiple platforms (iOS prior to 11.2, Safari prior to 11.0.2, tvOS prior to 11.2, iCloud/ iTunes on Windows) with memory-corruption issues in WebKit that could allow arbitrary code execution or cause a crash via a crafted web site. The public documents ...

CVE-2017-2520

CVE-2017-2520 (SQLite, affected Apple OSes) is a vulnerability where a crafted SQL statement could cause a buffer overflow, enabling remote code execution or a denial of service. Affected products/versions (from provided sources): Apple iOS <10.3.2, macOS <10.12.5, tvOS <10.2.1, watchOS

CVE-2018-4437

CVE-2018-4437 involves multiple memory corruption issues that were addressed by Apple through memory-handling improvements. Affected products and versions (from public advisories) include iOS before 12.1.1, tvOS before 12.1.1, watchOS before 5.1.2, Safari before 12.0.2, iTunes for Windows (12.9.2...

CVE-2019-8503

CVE-2019-8503 is a logic/validation issue in WebKit-related components that could allow a malicious website to execute scripts in the context of another site. Documented exposure relates to WebKit/WebKitGTK/WebKitGTK4 and associated WebKit-based stacks used in iOS, macOS, tvOS, Safari windows, an...

CVE-2022-46699

CVE-2022-46699 is a WebKitGTK/WebKitGTK2/WebKitGTK4 memory-corruption vulnerability that can allow arbitrary code execution when processing malicious web content. Connected advisories confirm the issue and its fixes across multiple distros: Debian/Ubuntu Debian-LTS (webKit2GTK/WebKit2GTK), Fedora...

CVE-2019-6217

CVE-2019-6217 is a WebKit/WebKit-related memory corruption issue addressed across Apple platforms. Affected components include WebKit (and related Apple WebKit-based apps) where memory handling flaws allowed processing malicious web content to lead to arbitrary code execution. The published fixes...

CVE-2022-46705

CVE-2022-46705 is a spoofing vulnerability in the handling of URLs that can enable address-bar spoofing when visiting a malicious site. The initial description notes improved input validation and lists affected platforms (Apple products) with fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, an...

CVE-2019-6216

CVE-2019-6216 concerns multiple memory corruption issues in WebKit-related components. The description indicates the vulnerability is addressed by memory handling improvements and is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, and iCloud for Windows ...

CVE-2025-24189

CVE-2025-24189 is a memory corruption vulnerability in processing malicious web content that is fixed in Safari 18.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 and tvOS 18.3. Affected WebKit components are the WebKitGTK/WebKitGTK4 family in Linux distributions (per SUS...

CVE-2021-30955

CVE-2021-30955 describes a race condition in Apple's iOS/macOS kernel handling that could allow a malicious user-space app to gain kernel privileges. The initial entry notes a fix in macOS Monterey 12.1 and corresponding iOS/iPadOS/watchOS/tvOS updates (12.1/15.2), addressing a race-condition wit...

CVE-2018-4264

CVE-2018-4264 is a memory corruption issue in Apple WebKit/WebKit-derived components that affects multiple Apple platforms and associated desktop/mobile apps. Affected products/areas include iOS, tvOS, watchOS, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6, with the vulnerabi...

CVE-2019-8641

CVE-2019-8641 is a memory-corruption bug in Apple’s NSKeyedUnarchiver (NSSharedKeyDictionary/NSSharedKeySet) that was exposed via iMessage and remotely exploitable on iOS devices. Project Zero details describe how unarchiving a crafted NSSharedKeyDictionary can cause a crash and, with a carefully...

CVE-2022-42863

CVE-2022-42863 is a WebKit/WebKitGTK memory corruption issue addressed by improved state management. The CVE entry specifies that processing malicious web content may lead to arbitrary code execution and lists affected platforms/versions: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPad...

CVE-2009-0040

The CVE-2009-0040 issue affects the PNG reference library (libpng) as used in pngcrush and other apps. A crafted PNG can trigger a free of an uninitialized pointer in png_read_png, pCAL chunk handling, or 16-bit gamma table setup, enabling denial of service or possibly arbitrary code execution. A...

CVE-2019-6203

CVE-2019-6203 affects Apple devices via the 802.1X component, where a logic/state-management issue could allow a privileged network-position attacker to intercept traffic. Apple’s security pages tie this to iOS 12.2, macOS Mojave 10.14.4, and tvOS 12.2, with fixes in those releases. The CVE is do...

CVE-2022-46691

CVE-2022-46691 is a memory consumption issue in WebKitGTK / WebKit that may enable arbitrary code execution when processing malicious web content. Connected advisories confirm the issue affects WebKitGTK/WebKit, with fixes delivered in Safari 16.2 and corresponding WebKitGTK updates. The underlyi...

CVE-2024-54543

CVE-2024-54543 is a memory corruption flaw in WebKit when processing maliciously crafted web content. Apple’s advisories enumerate fixed products/versions: visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2. Connected sources (e.g., WebKit GTK deployment...

CVE-2018-4278

CVE-2018-4278 affects Safari prior to 11.1.2, iTunes for Windows prior to 12.8, iOS prior to 11.4.1, tvOS prior to 11.4.1, and iCloud for Windows prior to 7.6. The vulnerability involves sound fetched through elements being exfiltrated cross-origin due to insufficient audio taint tracking. The i...

CVE-2018-4266

CVE-2018-4266 describes a race condition fixed by additional validation in Apple WebKit/OS components. Affected products/versions include macOS iOS/tvOS/watchOS Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6. Impact details in the entry show partial availability with no confid...

CVE-2018-4284

CVE-2018-4284 describes a type confusion vulnerability that was addressed with improved memory handling. It affected multiple Apple software versions prior to patches: iOS 11.4.1 and earlier, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6. The initi...

CVE-2018-4299

CVE-2018-4299 involves multiple memory corruption issues resolved by improved memory handling. The initial entry notes the vulnerability affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Connected documents indicate this CVE app...

CVE-2018-4318

CVE-2018-4318 is a memory‑safety issue described as a use-after-free that was addressed with improved memory management. Affected products include iOS 12 and later, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes indicate patches/releases exist for th...

CVE-2018-4345

CVE-2018-4345 is a cross-site scripting vulnerability in Safari (WebKit) that was addressed by improved URL validation. Affected products/versions include Safari 12 and earlier on macOS/iOS, tvOS 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The vulnerability’s root cause is tied to UR...

CVE-2022-22666

CVE-2022-22666 is a memory corruption vulnerability affecting AppleAVD in Apple’s media decoding stack. The issue arises when processing a maliciously crafted image, due to a memory corruption condition that can lead to heap corruption. Public details indicate the vulnerability is addressed by va...

CVE-2025-24104

CVE-2025-24104 concerns Apple platforms (iPadOS 17.7.4, iOS 18.3, iPadOS 18.3) where the backup restore process could incorrectly handle symlinks, allowing a malicious backup to point system file reads/writes and potentially modify protected system files. Apple’s advisories indicate the issue is ...

CVE-2016-1836

CVE-2016-1836 is a use-after-free in libxml2 (xmlDictComputeFastKey). Public mentions tie it to libxml2 up to 2.9.4, with affected Apple platforms (iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, watchOS before 2.2.1) and a DoS impact via crafted XML, per vendor advisories. Connected do...

CVE-2017-2519

CVE-2017-2519 is a SQLite vulnerability where an insufficient size of the reference count on Table objects could lead to denial of service or arbitrary code execution via a crafted SQL statement. Public records in the provided documents show affected products across multiple vendors: Apple (iOS 1...

CVE-2018-4306

CVE-2018-4306 is a use-after-free vulnerability that was addressed with improved memory management. Public details indicate impact on Apple products and components including iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes and related Nessus en...

CVE-2016-1762

CVE-2016-1762 (and related libxml2 flaws) affects the GNOME libxml2 library where crafted XML input can cause denial of service or code execution. The primary cited issue is a heap-based buffer over-read in xmlNextChar prior to libxml2 2.9.4. Public advisories list multiple CVEs (e.g., 2016-1833/...

CVE-2018-4273

CVE-2018-4273 is a memory corruption vulnerability in WebKit-related components affecting Apple platforms (iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows). The issue was addressed by improved input validation, with affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4....

CVE-2018-4376

CVE-2018-4376 is a memory corruption issue addressed by Apple in multiple products. Affected software includes iOS versions before 12.1, watchOS before 5.1, Safari before 12.0.1, iTunes before 12.9.1, and iCloud for Windows before 7.8. The issue was mitigated by Apple’s updates (iOS 12.1, watchOS...

CVE-2018-4416

CVE-2018-4416 covers multiple memory corruption issues that were present in Apple software prior to updates released for iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8. Apple notes that the vulnerability involves memory corruption and was addressed with...

CVE-2022-1622

CVE-2022-1622 : LibTIFF has an out-of-bounds read in LZWDecode (libtiff/tif_lzw.c:619) that can cause a denial-of-service via a crafted TIFF file. The patch is available as commit b4e79bfa. Connected advisories confirm LibTIFF remediation via package updates: Debian Bullseye fixes in tiff 4.2.0-1...

CVE-2022-22642

CVE-2022-22642 affects FaceTime on Apple iOS/iPadOS. The vulnerability could allow a user to bypass the Emergency SOS passcode prompt. Apple fixed the issue in iOS 15.4 and iPadOS 15.4, addressing the bypass through enhanced checks/validation. The available connected documents consistently descri...

CVE-2022-26736

CVE-2022-26736 is an out-of-bounds write vulnerability affecting Apple platforms (notably tvOS 15.5) where an improved bounds check fixes allowed an attacker to execute arbitrary code with kernel privileges. The issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Apple’s ...

CVE-2025-24163

CVE-2025-24163 affects Apple platforms and has been fixed in multiple OS updates (iOS/iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3, iPadOS 17.7.4, visionOS 2.3). The issue is described as: Parsing a file may lead to an unexpected app termination in CoreAudio. Conn...

CVE-2018-4208

CVE-2018-4208 describes an assertion failure caused by an unexpected interaction in WebKit components across Apple platforms (iOS, Safari, iCloud for Windows, tvOS, watchOS, iTunes for Windows). The description indicates that the issue affected multiple surfaces and was addressed by “improved che...

CVE-2018-4265

CVE-2018-4265 is a memory corruption vulnerability addressed by Apple in WebKit-related components. Affected are iOS versions prior to 11.4.1, tvOS prior to 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, and iCloud for Windows 7.6. The issue arises from memory handling problems and was fixed in ...

CVE-2018-4272

CVE-2018-4272 corresponds to multiple memory corruption issues in Apple's WebKit components affecting iOS, tvOS, watchOS, Safari, and related Windows apps. The documented impact is high in CVSS terms, with vulnerable components including WebKit memory handling across iOS 11.x, tvOS 11.x, watchOS ...

CVE-2018-4382

CVE-2018-4382 corresponds to multiple memory corruption issues found in Apple software. The connected Nessus entries corroborate a memory corruption vulnerability affecting Apple Safari and related components, with affected versions including iOS prior to 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0...

CVE-2022-22638

CVE-2022-22638 involves a null pointer dereference that was fixed through improved validation. Affected across Apple platforms: tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3. The issue could allow a privileged attac...

CVE-2024-23284

CVE-2024-23284 concerns a logic issue in WebKitGTK/WebKit rendering where processing maliciously crafted web content may prevent Content Security Policy (CSP) from being enforced. The connected sources show the same vulnerability across multiple distributions (e.g., Debian webkit2gtk advisories a...

CVE-2018-4212

CVE-2018-4212 is referenced in connected documents as affecting WebKit components across iOS/Safari and related Apple platforms, where an unexpected interaction could trigger an ASSERT failure. Apple’s coverage for iOS 11.3 (and Safari/WebKit) notes an issue that was addressed by improved input/i...