CVE-2020-3825

CVE-2020-3825 concerns memory corruption in WebKit-based components used by Apple Safari/WebKit across multiple platforms. The Initial document notes that processing maliciously crafted web content may lead to arbitrary code execution. Affected products/areas (from Apple advisories) include Safar...

CVE-2022-42803

CVE-2022-42803 describes a race condition that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed by multiple Apple operating system updates: tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, and macOS ...

CVE-2023-23498

CVE-2023-23498 pertains to a logic issue in Apple's software stack where improved state management fixes an issue that could cause the quoted original message to be selected from the wrong email when forwarding an Exchange message. Affected platforms include iOS 15.7.3/iPadOS 15.7.3, iOS 16.3/iPa...

CVE-2023-23503

CVE-2023-23503 describes a logic issue in Apple’s privacy state management that may allow an app to bypass Privacy preferences. The vulnerability is fixed in macOS Ventura 13.2, iOS 16.3/iPadOS 16.3, iOS 15.7.3/iPadOS 15.7.3, tvOS 16.3, and watchOS 9.3. No exploit details are provided in the sour...

CVE-2024-44185

CVE-2024-44185 affects Apple’s WebKit-based components and is fixed by updated builds in multiple Apple OS releases. The issue causes an unexpected process crash when processing maliciously crafted web content and is addressed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 / iPad...

CVE-2017-11120

CVE-2017-11120 affects Broadcom BCM4355C0 Wi‑Fi firmware. An attacker can send crafted 802.11k Neighbor Report Responses (NRREP) to trigger a heap-based buffer overrun in the Wi‑Fi firmware, via an overflow in NRREP data handling and an exploitable NRREP/BA interaction primitive. The exploit reli...

CVE-2022-26766

CVE-2022-26766 is a certificate parsing issue addressed by Apple in updates for multiple OSes. The advisory states that a malicious app may bypass signature validation due to improved checks in certificate parsing. Affected and fixed versions include: tvOS 15.5; iOS 15.5 and iPadOS 15.5; watchOS ...

CVE-2026-65341

CVE-2026-65341 affects WebKit in Safari 26.6.1, iOS 18.7.10/iPadOS 18.7.10, iOS 26.6.1/iPadOS 26.6.1, and macOS Tahoe 26.6.2. The flaw stems from improper memory handling; processing maliciously crafted web content can trigger memory corruption. CVSS 3.1 scores 5.4 (MEDIUM), network exploitable w...

CVE-2017-2363

CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...

CVE-2023-35074

CVE-2023-35074 relates to a memory handling issue in WebKit/WebKitGTK used by Apple platforms (tvOS, Safari, watchOS, iOS, iPadOS, macOS Sonoma) and WebKitGTK-based environments. The vendor advisories state that processing web content may lead to arbitrary code execution, and the fix is a memory-...

CVE-2024-40782

CVE-2024-40782 is a WebKitGTK/use-after-free vulnerability where processing malicious web content could cause an unexpected process crash. It is addressed in Apple platforms as: iOS 16.7.9 and iPadOS 16.7.9; Safari 17.6; iOS 17.6 and iPadOS 17.6; watchOS 10.6; tvOS 17.6; visionOS 1.3; macOS Sonom...

CVE-2026-28847

CVE-2026-28847 concerns a memory handling issue in WebKit/Web content processing that could trigger a crash when processing maliciously crafted content. Apple’s advisories indicate this vulnerability is fixed in Safari 26.5 and related OS updates (iOS 18.7.9 / iPadOS 18.7.9, macOS Tahoe 26.5, tvO...

CVE-2026-65339

CVE-2026-65339 is a logic issue in the Audio component of Apple's operating systems, allowing a local app to leak sensitive user information . The vulnerability requires low privileges and user interaction, with a CVSS 3.1 score of 5.0 (MEDIUM) — high confidentiality impact but no integrity or av...

CVE-2020-3829

CVE-2020-3829 corresponds to an out-of-bounds read fixed by Apple across multiple platforms. The Apple advisories show the vulnerability contributing to elevated-privilege risk and are mitigated by updates: iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. In the ...

CVE-2018-4222

CVE-2018-4222 affects WebKit components in multiple Apple platforms (iOS 11.4, Safari 11.1.1, iCloud/Win apps, tvOS/watchOS).根本原因：WebAssembly编译阶段的 getWasmBufferFromValue 的边界读取，WebKit 按错将数组缓冲区指针嵌入偏移，从而在读取表时产生越界。受影响的实现关键在于 WebAssembly 模块读取与内存/表的管理，导致在构造或执行 WebAssembly 模块时可能触发任意代码执行的潜在风险。公开的利用信息在 Pr...

CVE-2022-26731

CVE-2022-26731 is a logic-issue vulnerability in Apple software where a malicious website could track users in Safari private browsing mode. The issue is addressed through improved state management and is fixed in macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Affected components include Safari/...

CVE-2023-42833

CVE-2023-42833 is a WebKitGTK/WebKitGTK+ correctness issue where processing web content could lead to arbitrary code execution. The vendor advisory notes fixes in macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. Root cause: improved checks in WebKit to address the vulnerability. Practical impac...

CVE-2016-1837

CVE-2016-1837 is a use-after-free/memory corruption vulnerability in libxml2 affecting the htmlParsePubidLiteral and htmlParseSystemLiteral paths, leading to denial of service. Public references in the Initial document note a MEDIUM (CVSSv3 base 5.5) impact with LOCAL attack vector and user inter...

CVE-2017-2350

Affected products: iOS <10.2.1, Safari <10.0.3, tvOS

CVE-2019-6225

CVE-2019-6225 is a kernel memory corruption vulnerability in Apple's XNU related to the task_swap_mach_voucher MIG path. The issue allows an attacker-controlled manipulation of ipc_voucher/voucher ports, enabling use-after-free-like effects on vouchers and, via heap grooming and IOSurface/ORB spr...

CVE-2019-8565

CVE-2019-8565 is a race-condition vulnerability in Apple’s Feedback Assistant that could allow a malicious app to gain root privileges. It is fixed in iOS 12.2 and macOS Mojave 10.14.4 (Security Updates). Apple’s security content for iOS 12.2 and Mojave 10.14.4 describe the issue as a logic/memor...

CVE-2022-46693

The CVE-2022-46693 entry describes an out-of-bounds write vulnerability addressed by input-validation improvements. Affected products/versions include tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. The issue can be triggered by processing a malicio...

CVE-2023-42883

CVE-2023-42883 involves WebKitGTK/WebKit-based components where processing an image can cause a denial-of-service due to an underlying memory handling issue. The vulnerability is addressed in Apple platforms (Safari 17.2, macOS Sonoma 14.2, iOS 17.2/iPadOS 17.2, watchOS 10.2, tvOS 17.2; with olde...

CVE-2025-24223

The CVE-2025-24223 issue is a memory corruption vulnerability in WebKit-based components affecting multiple Apple platforms. The advisory states that the flaw is triggered by processing maliciously crafted web content and is mitigated by memory handling improvements, with fixes shipped in: watchO...

CVE-2016-4669

This CVE corresponds to a Safari WebKit JIT exploit for iOS 7.1.2 that chain-exploits a JIT optimization bug (CVE-2016-4669) to write shellcode into RWX memory, obtain kernel RW/root, and disable code signing. The linked Metasploit/PacketStorm entries confirm a kernel-level exploit used to run a ...

CVE-2020-3840

CVE-2020-3840 describes an off-by-one error in the handling of racoon configuration files within IPSec-related components. The underlying issue arises from improper bounds checking, which could allow a maliciously crafted racoon config to trigger arbitrary code execution. Apple and Red Hat record...

CVE-2022-22596

CVE-2022-22596 covers a memory corruption issue in Apple kernel components that could allow arbitrary code execution with kernel privileges. The vulnerability is addressed by updates in iOS 15.4, iPadOS 15.4, and watchOS 8.5. The initial description notes a memory corruption problem mitigated by ...

CVE-2022-22614

CVE-2022-22614 is a use-after-free vulnerability that Apple addressed across multiple platforms. The issue could allow arbitrary code execution with kernel privileges and is fixed by updates: tvOS 15.4; iOS 15.4 and iPadOS 15.4; macOS Big Sur 11.6.5; Security Update 2022-003 Catalina; watchOS 8.5...

CVE-2025-24137

CVE-2025-24137 is a type confusion issue addressed by Apple in multiple updates: iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The vulnerability could allow a remote attacker to cause an unexpected application termination...

CVE-2018-4192

CVE-2018-4192 affects Apple WebKit throughout iOS, macOS, tvOS, watchOS, iCloud on Windows, and iTunes/WebKit components. The flaw is a race condition in WebKit that enables remote code execution via a crafted website. The vulnerability is tied to multiple Apple products and WebKit usage in Safar...

CVE-2020-9976

CVE-2020-9976 is an Apple security issue identified as a logic bug in a state-management path that could allow a malicious app to leak sensitive user information. The vulnerability is documented across Apple advisories for iOS 14.0/iPadOS 14.0, tvOS 14.0, and watchOS 7.0, with remediation deliver...

CVE-2023-42875

CVE-2023-42875 is an arbitrary-code-execution vulnerability in WebKit/WebKitGTK components triggered by processing certain web content. The issue stems from improper memory handling. It is addressed in various advisories: Apple platforms (iOS 17, iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, S...

CVE-2017-7037

CVE-2017-7037 affects WebKit in multiple Apple platforms (iOS before 10.3.3, Safari before 10.1.2, tvOS before 10.2.2, iCloud/iTunes on Windows). Root issue: memory handling/processing of malicious web content in WebKit could allow arbitrary code execution or cross-origin data leakage when handli...

CVE-2019-8662

CVE-2019-8662 : A use-after-free vulnerability in applications deserializing an untrusted NSDictionary was fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. Public material from Project Zero details a remote, interactionless context via NSKeyedUnarchiver and iMessage-related de...

CVE-2022-32829

CVE-2022-32829 affects Apple platforms (iOS/iPadOS/macOS) and is tied to kernel-level arbitrary-code execution. The vulnerability was addressed by Apple with fixes in iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The fixed versions suggest a kernel-privilege impact; no exploitation details are ...

CVE-2022-42864

CVE-2022-42864 describes a race condition in Apple's IOHID kernel path (IOHIDDevice::postElementTransaction) where element data may be read from shared memory while being validated, allowing out-of-bounds reads and writes on kernel heap. Exploitation details circulated in public proof-of-concept ...

CVE-2022-22610

CVE-2022-22610 involves a memory corruption issue addressed with improved state management. The vulnerability is fixed in macOS Monterey 12.3 and corresponding Apple software updates: Safari 15.4, watchOS 8.5, iOS 15.4, iPadOS 15.4, and tvOS 15.4. Exploitation would occur by processing maliciousl...

CVE-2022-46718

CVE-2022-46718 is a logic issue in Apple platforms that could allow an app to read sensitive location information. The issue is addressed with improved restrictions and is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, and macOS Monterey 12.6.2. Affected products...

CVE-2023-23540

CVE-2023-23540 concerns Apple devices where improved memory handling patches an issue that could allow an app to execute arbitrary code with kernel privileges. The vulnerability affects iOS, iPadOS, and macOS releases, with fixes in iOS 15.7.8/iPadOS 15.7.8, iOS 16.4/iPadOS 16.4, macOS Monterey 1...

CVE-2023-41974

CVE-2023-41974 is a kernel-use-after-free vulnerability in Apple iOS/iPadOS that was leveraged by the Coruna exploit framework. The CVE description notes that exploitation may allow an app to execute arbitrary code with kernel privileges, with fixes shipped in iOS/iPadOS 17 and in iOS 15.8.7 / iP...

CVE-2024-27833

CVE-2024-27833 affects Apple WebKit components across multiple Apple platforms. The issue is described as an integer overflow resolved by input validation, with fixes in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5. The description notes that proces...

CVE-2026-43818

CVE-2026-43818 affects Apple OS components where processing a maliciously crafted image can trigger an integer overflow due to insufficient input validation. Apple has fixed this issue in iOS/iPadOS 26.6 and macOS Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The vulnerability’s root cause is an...

CVE-2020-9770

The CVE-2020-9770 issue is a logic/state-management bug in Bluetooth handling on Apple devices. According to sources, it allows a user in a privileged network position to intercept Bluetooth traffic, and Apple fixed it in iOS 13.4/iPadOS 13.4 (see Apple HT211102). Remediation is to update to the ...

CVE-2021-1753

CVE-2021-1753 affects Apple OS components handling images. An out-of-bounds read was addressed with improved bounds checking, fixed in macOS Big Sur 11.2 and Security Update 2021-001 Catalina and Mojave, and in iOS/iPadOS 14.4. Exploitation requires processing a maliciously crafted image, potenti...

CVE-2022-26763

CVE-2022-26763 is an out-of-bounds access issue fixed in multiple Apple platforms. The cited advisories state an affected condition where a malicious application could execute arbitrary code with system privileges. The concrete fixes are in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 202...

CVE-2024-23273

CVE-2024-23273 affects Safari Private Browsing across Safari 17.4, iOS 17.4, iPadOS 17.4, and macOS Sonoma 14.4. The underlying issue, described as improved state management, could allow Private Browsing tabs to be accessed without authentication. The CVSS v3.1 base score is 4.3 (Medium), with im...

CVE-2025-24271

CVE-2025-24271 describes an access issue in AirPlay handling where an unauthenticated user on the same network as a signed‑in Mac could send AirPlay commands without pairing. Apple fixed this in multiple OS updates: macOS Sequoia 15.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, iOS 18.4 and iPadO...

CVE-2025-31215

CVE-2025-31215 is a WebKitGTK/WebKit-related issue where processing malicious web content may cause an unexpected process crash. The connected advisories show concrete details across multiple distributions: Affected software: webkit2gtk/WebKitGTK (and its WebKit components) used in Linux distros ...

CVE-2026-64784

A WebKit out-of-bounds access flaw, credited to Janggoon Lee and Amy Burnett, affects Safari on iOS/iPadOS 18.7.10, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2; visiting malicious web content may crash Safari. CVSS 3.1 base score 4.3 (MEDIUM). No public exploit details provided.

CVE-2018-4237

CVE-2018-4237 refers to a libxpc logic/memory issue in multiple Apple platforms (iOS ≤11.4, macOS ≤10.13.5, tvOS ≤11.4, watchOS ≤4.3.1). The Apple entries describe a privileged-elevation and potential arbitrary-code-execution impact via a crafted app, caused by a logic error in libxpc with a corr...