CVE-2018-4202

CVE-2018-4202 affects Apple iBooks in macOS High Sierra 10.13.4 and iOS before 11.4. The issue is an input-validation flaw in iBooks that could allow a privileged network-position attacker to spoof a password prompt. Apple’s security entries (HT208849, HT208848) note this vulnerability in the iBo...

CVE-2018-4204

CVE-2018-4204 involves WebKit in several Apple products (iOS <11.4, iOS <11.3.1, Safari <11.1, iCloud for Windows 7.5, iTunes for Windows <12.7.5, tvOS

CVE-2018-4378

CVE-2018-4378 affects Apple products prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8. It is described as a memory corruption issue mitigated by improved input validation. No explicit root cause or exploit details are given in the connected docum...

CVE-2018-4129

CVE-2018-4129 affects Apple's WebKit on multiple platforms (iOS 11.3, Safari 11.1, tvOS 11.3, watchOS 4.3, iCloud/iTunes on Windows). The issue is a memory-corruption vulnerability in WebKit that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website....

CVE-2018-4317

CVE-2018-4317 is a use-after-free vulnerability in WebKit-related code that was fixed by Apple through memory-management improvements. Affected products/versions include iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Patches were released as part of Apple securit...

CVE-2018-4404

CVE-2018-4404 is a memory‑corruption vulnerability affecting Apple platforms (iOS before 11.4 and macOS High Sierra before 10.13.5) that was addressed with improved memory handling. Apple advisories HT208851/HT208850/HT208849/HT208848 reference the patch across multiple components (e.g., libxpc, ...

CVE-2020-9910

CVE-2020-9910 is a WebKit-related vulnerability that allowed a malicious attacker with arbitrary read and write capability to bypass Pointer Authentication. Apple's security updates indicate this issue affects iOS/iPadOS (13.6), tvOS (13.4.8), watchOS (6.2.8), Safari (13.1.2), and corresponding W...

CVE-2021-30740

CVE-2021-30740 is a logic issue addressed by improved input validation, fixed in macOS Big Sur 11.4 and iOS/iPadOS 14.6, tvOS 14.6, and watchOS 7.5. A malicious app could potentially execute arbitrary code with kernel privileges. The description and connected records confirm the affected platform...

CVE-2022-32888

CVE-2022-32888 is an out-of-bounds write vulnerability in WebKit/related components that affects Apple platforms. The connected documents confirm the issue is addressed with improved bounds checking and is fixed in macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, iOS 15.7 and iP...

CVE-2024-44136

CVE-2024-44136 affects Apple iOS and iPadOS, with fixed in iOS 17.5 and iPadOS 17.5. Root cause: improved state management. Impact: a local attacker with physical access may disable Stolen Device Protection. Affected component: Face ID-related flow per Apple security content; remediation is upgra...

CVE-2019-6226

CVE-2019-6226 is a set of memory corruption issues in WebKit that could allow arbitrary code execution when processing maliciously crafted web content. The vulnerability is addressed across multiple Apple platforms and components, with fixes in: iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0...

CVE-2020-3878

CVE-2020-3878 is an out-of-bounds read vulnerability in Apple’s ImageIO component. According to Apple security updates, it affects iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes for Windows, and iCloud for Windows; processing a maliciously crafted image may lead ...

CVE-2024-54508

CVE-2024-54508 affects WebKitGTK (webkit2gtk). The issue arises from processing maliciously crafted web content and can lead to an unexpected process crash; memory-related impact is also indicated in related entries. Public advisories confirm fixes in WebKitGTK/WebKit2GTK packages across distribu...

CVE-2018-4197

CVE-2018-4197 is a WebKit/use-after-free vulnerability that was addressed by Apple through memory-management fixes. It affected multiple Apple platforms and products, specifically iOS versions prior to 12, tvOS prior to 12, Safari prior to 12, and Windows components (iTunes 12.9 for Windows and i...

CVE-2018-4213

The CVE-2018-4213 issue affects multiple Apple platforms: iOS (pre-11.3), Safari (pre-11.1), iCloud for Windows (pre-7.4), tvOS (pre-11.3), watchOS (pre-4.3), and iTunes for Windows (pre-12.7.4). The root cause is an unexpected interaction that could cause an ASSERT failure, addressed by improved...

CVE-2018-4373

CVE-2018-4373 relates to multiple memory corruption issues addressed by Apple with improved memory handling. The vulnerability affected iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple notes patches in iOS 12.1, wa...

CVE-2022-32912

CVE-2022-32912 - Summary: An out-of-bounds read vulnerability in WebKit/WebKitGTK was addressed by improving bounds checking. The issue could allow memory disclosure or arbitrary code execution when processing malicious web content. Affected/affected components appear in WebKitGTK/WebKit across m...

CVE-2016-1833

CVE-2016-1833 is a libxml2 memory corruption issue where the htmlCurrentChar function can cause a heap-based buffer over-read during parsing of crafted XML. Public details in connected docs indicate affected platforms include Apple iOS, macOS, tvOS, watchOS and related libxml2 usage, with version...

CVE-2018-4319

CVE-2018-4319 describes a cross-origin issue in iframe handling resolved by improved tracking of security origins in WebKit-based components. Affected products include Safari/WebKit on iOS before iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security pag...

CVE-2022-32788

CVE-2022-32788 is a buffer overflow in Apple’s AppleAVD component that could allow a remote attacker to cause kernel code execution. Affected products include watchOS 8.7, tvOS 15.6, iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The issue was mitigated by applying bounds checking improvements a...

CVE-2024-54502

CVE-2024-54502 is a WebKitGTK/WebKit-based issue where processing maliciously crafted web content could cause an unexpected process crash. Publicly provided connected documents confirm this CVE is discussed across multiple advisories and platforms, with fixes released in various vendor updates. A...

CVE-2018-4309

CVE-2018-4309 is a Safari/WebKit cross‑site scripting vulnerability. The issue affected Safari versions prior to Safari 12 (and related WebKit components) on iOS, tvOS, and Windows platforms (iTunes 12.9 for Windows, iCloud for Windows 7.7). The root cause was an input/URL handling validation fla...

CVE-2018-4464

CVE-2018-4464 corresponds to multiple memory corruption issues addressed by Apple in WebKit components. Affected products/versions include iOS prior to 12.1.1, tvOS prior to 12.1.1, watchOS prior to 5.1.2, Safari prior to 12.0.2, iTunes 12.9.2 for Windows, and iCloud for Windows 7.9. The descript...

CVE-2022-32854

CVE-2022-32854 affects Apple platforms (iOS/iPadOS/macOS). The issue is a logic flaw in privacy-related components (ATS/Contacts) that could allow an app to bypass Privacy preferences. Fixed in iOS 15.7, iPadOS 15.7, iOS 16, and macOS Big Sur 11.7 (and related updates). The primary impact stated ...

CVE-2022-32891

CVE-2022-32891 affects Apple platforms via a UI spoofing risk when framing malicious web content. The issue is mitigated by updating to Safari 16 (and iOS 16, tvOS 16, watchOS 9). Root cause: UI handling weakness that could allow a malicious site to spoof UI. Exploitation status is not detailed i...

CVE-2024-23271

CVE-2024-23271 is a logic-issue in WebKit/WebKitGTK affecting Apple platforms (iOS/iPadOS/macOS/tvOS/watchOS) and WebKitGTK. It can cause unexpected cross-origin behavior when visiting a malicious site. Public details confirm fixes in iOS/iPadOS 17.3, macOS Sonoma 14.3, Safari 17.3, tvOS 17.3, wa...

CVE-2018-4087

CVE-2018-4087 concerns a memory corruption issue in the Core Bluetooth component affecting Apple platforms (iOS before 11.2.5, tvOS before 11.2.5, watchOS before 4.2.2). The root cause is a memory handling/memory corruption defect in Core Bluetooth that can allow an app to execute arbitrary code ...

CVE-2017-13856

Summary: CVE-2017-13856 concerns Apple WebKit in iOS, Safari, tvOS, iCloud/iTunes components. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Affected products include iOS before 11.2, Safari befo...

CVE-2022-42825

CVE-2022-42825 affects Apple platforms including tvOS, macOS, iOS, iPadOS, watchOS and macOS Big Sur/Monterey/Ventura families. The issue stems from entitlement handling that allowed an app to modify protected parts of the file system. Fixed releases: tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS...

CVE-2024-23208

CVE-2024-23208 affects Apple’s kernel memory handling and can enable an app to execute arbitrary code with kernel privileges. Publicly documented fixes apply to macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. The Apple IOS 17.3 advisory confirms the Kernel impact and the mem...

CVE-2018-4211

CVE-2018-4211 is an Apple FontParser memory-corruption/remote code execution vulnerability. AFFECTED PRODUCTS: iOS < 11.4, macOS < 10.13.5, tvOS < 11.4, and watchOS

CVE-2018-4246

CVE-2018-4246 affects WebKit in Apple products including iOS before 11.4, Safari before 11.1.1, iCloud for Windows, iTunes for Windows, tvOS before 11.4, and watchOS before 4.3.1. Root cause: type confusion in WebKit allows remote attackers to execute arbitrary code via a crafted website. Impact:...

CVE-2021-1797

CVE-2021-1797 affects Apple APFS on macOS (Mojave/Catalina) and related OSes. The issue, caused by inadequate permissions logic, could allow a local user to read arbitrary files. Apple patched this in macOS Big Sur 11.2 and Security Updates 2021-001 Catalina/Mojave, plus watchOS 7.3, tvOS 14.4, i...

CVE-2022-22633

CVE-2022-22633 is a memory corruption vulnerability in Apple’s Accelerate Framework that can be triggered by opening a maliciously crafted PDF, potentially leading to arbitrary code execution. It is fixed in watchOS 8.5, iOS 15.4 / iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3. Publi...

CVE-2023-40446

CVE-2023-40446 in Apple software was mitigated by improved memory handling. Processing malicious input could lead to arbitrary code execution in user-installed apps. Fixed in macOS Monterey 12.7.1; iOS 16.7.2 and iPadOS 16.7.2; iOS 17.1 and iPadOS 17.1. No exploitation details are provided in the...

CVE-2018-4121

CVE-2018-4121 involves WebKit in multiple Apple platforms (iOS, iPhone Safari, macOS Safari, iCloud for Windows, iTunes for Windows, tvOS, watchOS) and stems from memory corruption when processing crafted web content, allowing remote code execution. Apple’s security notes for Safari 11.1 and iOS ...

CVE-2018-4361

CVE-2018-4361 is a memory consumption issue addressed by improved memory handling. The vulnerability affects multiple Apple platforms and components prior to the listed versions: iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The description in the ini...

CVE-2021-30737

CVE-2021-30737 is an iOS/macOS NSS ASN.1 decoding issue in Apple’s secasn1d.c, fixed in iOS 14.6. The root cause is a memory corruption primitive arising from Apple’s NSS fork’s ASN.1 bit-string handling. A path in sec_asn1d_parse_bit_string can set the destination item’s Data pointer to NULL for...

CVE-2022-22634

CVE-2022-22634 affects Apple’s AVEVideoEncoder component on tvOS, iOS, and iPadOS. The issue is a buffer overflow that was addressed by improved bounds checking, enabling arbitrary code execution with kernel privileges on the affected devices. Affected firmwares include tvOS 15.4, iOS 15.4, and i...

CVE-2023-23531

CVE-2023-23531 affects Apple platforms (macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and was caused by memory-handling issues that could let an app execute arbitrary code in its sandbox or with elevated privileges. Apple indicates the issue is fixed in the listed updates. Any exploitation requires ...

CVE-2024-23254

CVE-2024-23254 concerns WebKit/WebKitGTK components where a malicious website could exfiltrate audio data cross-origin. The initial entry notes the issue is fixed in Apple platforms: tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and Safari 17.4. Public disclosur...

CVE-2026-64715

The vulnerability is in WebKit on Apple platforms; a use-after-free triggered by malicious web content can crash the process. Patched in iOS/iPadOS 18.7.10, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2. CISA rates exploitation as none, CVSS 6.5 (Medium).

CVE-2011-3068

Technical details for CVE-2011-3068 are not available in the provided connected documents. The initial description mentions a use-after-free in Chrome's CSS engine but no further specifics are supplied.

CVE-2016-1840

CVE-2016-1840: libxml2 contains a heap-based buffer overflow in xmlFAParsePosCharGroup (pre-2.9.4). Affected on Apple iOS (pre-9.3.2), OS X (pre-10.11.5), tvOS (pre-9.2.1), watchOS (pre-2.2.1); can lead to remote code execution or memory corruption. Remediation: upgrade libxml2 to 2.9.4 or later ...

CVE-2020-9800

CVE-2020-9800 is a type-confusion vulnerability in WebKit that was fixed in Apple platforms (iOS 13.5/iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, Windows/iCloud components as noted). The issue involved improved memory handling and could lead to arbitrary code execution when processing...

CVE-2023-23500

CVE-2023-23500 is a memory-handling issue in Apple operating systems that could allow an app to leak sensitive kernel state. The vulnerability is addressed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, and in older releases iOS 15.7.3/iPadOS 15.7.3, tvOS 16.3, and watchOS 9.3. Connected source...

CVE-2025-31204

The CVE-2025-31204 issue affects WebKitGTK/WebKit components as applied in affected platforms, where processing maliciously crafted web content may lead to memory corruption. The available connected documents indicate the root cause is memory handling deficiencies, with the vulnerability fixed by...

CVE-2016-1838

CVE-2016-1838 refers to a vulnerability in libxml2 where the xmlPArserPrintFileContextInternal function can be exploited by a crafted XML document to cause a heap-based overflow/read, leading to a denial of service or potential escalation. The initial description notes the issue affects libxml2 u...

CVE-2017-2371

CVE-2017-2371 affects WebKit/WebKitGTK+ (WebKitGTK+ before 2.14.4) with an issue in blocking popup handling. Arch Linux lists CVE-2017-2371 among webkit2gtk vulnerabilities and notes remote code execution/impact vectors via malicious web content; the advisory fixes by upgrading webkit2gtk to 2.14...

CVE-2020-3825

CVE-2020-3825 concerns memory corruption in WebKit-based components used by Apple Safari/WebKit across multiple platforms. The Initial document notes that processing maliciously crafted web content may lead to arbitrary code execution. Affected products/areas (from Apple advisories) include Safar...