CVE-2022-32868

CVE-2022-32868 affects Safari and related iOS/iPadOS web-extension handling. The issue is a logic bug in state management that could enable a website to track users via Safari web extensions. The NVD/NIST description confirms a fix in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Connected source...

CVE-2024-40776

CVE-2024-40776 is a use-after-free in the WebKitGTK/WebKit2GTK web engine where processing maliciously crafted web content may lead to an unexpected process crash. The initial CVE description confirms the issue and its fix across Apple platforms (iOS, iPadOS, macOS Sonoma, etc.). Connected adviso...

CVE-2025-31215

CVE-2025-31215 is a WebKitGTK/WebKit-related issue where processing malicious web content may cause an unexpected process crash. The connected advisories show concrete details across multiple distributions: Affected software: webkit2gtk/WebKitGTK (and its WebKit components) used in Linux distros ...

CVE-2018-4237

CVE-2018-4237 refers to a libxpc logic/memory issue in multiple Apple platforms (iOS ≤11.4, macOS ≤10.13.5, tvOS ≤11.4, watchOS ≤4.3.1). The Apple entries describe a privileged-elevation and potential arbitrary-code-execution impact via a crafted app, caused by a logic error in libxpc with a corr...

CVE-2021-1818

CVE-2021-1818 is a logic‑level issue in Apple OS components that Apple fixed across macOS Big Sur 11.2, macOS Security Update 2021‑001 for Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. Root cause: improved state management addressing a logic flaw. Impact: remote attacker...

CVE-2021-30855

CVE-2021-30855 is an Apple vulnerability in the Preferences component where a validation issue in the handling of symlinks could allow an application to access restricted files. The issue is addressed in Security Update 2021-005 Catalina, iOS 14.8/iPadOS 14.8 and iOS 15/iPadOS 15, watchOS 8, and ...

CVE-2022-32857

CVE-2022-32857 is a network-privacy flaw fixed by Apple in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6/iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The advisory states that information sent over the network should use HTTPS to prevent eavesdropping; the issu...

CVE-2022-32911

CVE-2022-32911 is an Apple macOS/kernel memory handling issue that could allow an app to execute arbitrary code with kernel privileges. It is fixed in macOS Monterey 12.6, iOS 15.7/iPadOS 15.7, iOS 16, and macOS Big Sur 11.7, per the CVE description and corroborating NASL/Apple security docs in t...

CVE-2023-27933

The CVE-2023-27933 issue is a kernel‑level memory handling flaw that could allow a root‑privileged app to execute arbitrary code. Apple fixes are shipped in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Impact is listed as High for confidentiality, ...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2026-43813

CVE-2026-43813 is a validation issue in Apple’s CloudAttestation component which may allow a malicious app to bypass code signing enforcement. The vulnerability is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The underlying issue relates to inpu...

CVE-2017-2356

The CVE-2017-2356 issue affects Apple’s WebKit on multiple platforms (iOS before 10.2.1, Safari before 10.0.3, iCloud 6.1.1, iTunes 12.5.5, tvOS before 10.1.1). The underlying vulnerability is within WebKit and can be triggered by a crafted web site to perform remote code execution or cause a den...

CVE-2020-9870

CVE-2020-9870 is a WebKit/JavaScriptCore-related logic issue that allowed bypassing exploit mitigations (StructureID randomization, the Gigacage, and PAC/APRR) to achieve arbitrary memory read/write. The published material describes bypassing StructureID checks via crafted JSArray/JSCell headers,...

CVE-2022-26757

CVE-2022-26757 is a use-after-free vulnerability in Apple’s kernel memory management that could allow an unprivileged local attacker to execute arbitrary code with kernel privileges. It is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur ...

CVE-2024-27838

CVE-2024-27838 describes a fingerprinting risk in WebKit-based components exposed by Apple platforms. The issue, triggered by visiting a malicious webpage, allows fingerprinting of the user. The CVE is fixed in multiple platforms and versions: tvOS 17.5; iOS 16.7.8 and iPadOS 16.7.8; visionOS 1.2...

CVE-2025-43457

CVE-2025-43457 is a use-after-free in WebKitGTK/web content processing that can crash Safari-based engines. Public notes confirm fixes in WebKitGTK/WebKit components across multiple distributions: Debian/DSA-6172-1 and Debian security tracker list WebKitGTK 2.50.6-1 (for oldstable/trixie) with th...

CVE-2026-64788

CVE-2026-64788 affects Apple's IOGPUFamily component on iOS 26.6.1/iPadOS 26.6.1 and macOS Tahoe 26.6.2. The root cause is insufficient memory handling when processing maliciously crafted web content, leading to memory corruption. Reported by f00l, 3ndy1, Minghao Lin, Y1nkoc, and Arjanit Isufi. C...

CVE-2022-32824

The CVE-2022-32824 entry describes a kernel memory disclosure vulnerability. Affected Apple platforms include tvOS, iOS, iPadOS, and watchOS; the issue stems from memory handling weaknesses that could allow an app to disclose kernel memory. Apple lists fixes in tvOS 15.6, iOS 15.6, iPadOS 15.6, a...

CVE-2022-32883

CVE-2022-32883 describes a logic issue that allowed an app to read sensitive location information. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The issue is mitigated by applying the listed Apple OS updates; no exploitation status is provided beyon...

CVE-2024-23235

CVE-2024-23235 is a kernel race condition addressed by Apple with additional validation. It is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4/iPadOS 17.4, watchOS 10.4, and iOS 16.7.6/iPadOS 16.7.6 and tvOS 17.4. The affected impact is that an app may be able to access user-sensitive data. Th...

CVE-2024-23265

CVE-2024-23265 is a memory corruption vulnerability fixed by updated locking in macOS family. Affected products/versions include macOS Monterey 12.7.4 and later (Ventura 13.6.5, Sonoma 14.4), visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, and tvOS 17.4. The is...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2026-65334

CVE-2026-65334 is a memory corruption vulnerability in WebKit , addressed with improved state management (WebKit Bugzilla 316791). Processing maliciously crafted web content may lead to an unexpected Safari crash . The flaw is fixed in Safari 26.6.1 , iOS 18.7.10 / iPadOS 18.7.10 , iOS 26.6.1 / i...

CVE-2017-7061

CVE-2017-7061 concerns WebKit in multiple Apple platforms (iOS, macOS Safari, tvOS, WebKitGTK+), with memory corruption and DOMParser handling issues that could allow arbitrary code execution or cross-origin data leakage when processing malicious web content. Public advisories link this to severa...

CVE-2021-30724

Technical details for CVE-2021-30724 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-30905

CVE-2021-30905 is an out-of-bounds read vulnerability fixed in Apple OS updates: iOS 15.1 / iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, and macOS Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information. Affected component is title-lis...

CVE-2021-30919

CVE-2021-30919: An out-of-bounds write in processing a maliciously crafted PDF may lead to arbitrary code execution. Affected components relate to Apple platforms including iOS/iPadOS, macOS, tvOS and watchOS. The issue was addressed by input validation improvements and is fixed in iOS 15.1/iPadO...

CVE-2022-32839

The CVE-2022-32839 issue is resolved by improved bounds checks and affects multiple Apple platforms. Affects macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6, iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The vulnerability could allow a remote attacker to cause an...

CVE-2024-27808

CVE-2024-27808 : The vulnerability is in memory handling within WebKit technologies affecting multiple Apple platforms and WebKitGTK-based components. When processing web content, an attacker could trigger arbitrary code execution. The issue is addressed in: tvOS 17.5, visionOS 1.2, Safari 17.5, ...

CVE-2024-27851

CVE-2024-27851 affects Apple WebKit-based content processing. The issue arises from insufficient bounds checks in processing malicious web content, enabling arbitrary code execution. Official mitigation notes specify fixes across multiple Apple platforms, including tvOS 17.5, visionOS 1.2, Safari...

CVE-2026-43724

CVE-2026-43724 affects macOS Tahoe (kernel) and is described as an issue where an app may be able to cause unexpected system termination or write kernel memory. The fixed variant is addressed by improved input sanitization and is released in macOS Tahoe 26.5.2 (also reflected for iOS 26.5.2 and i...

CVE-2019-6222

CVE-2019-6222 (WebKit / iOS) concerns a consistency issue where a website could access the microphone without displaying the microphone-use indicator. The Apple advisory notes this was addressed with improved state handling and was fixed in iOS 12.2. The CVE appears in multiple sources (Apple sec...

CVE-2020-9992

CVE-2020-9992 affects Apple's IDE Device Support in Xcode 12.0 and iOS/iPadOS 14 (paired-device remote debugging). The vulnerability allows an attacker in a privileged network position to execute arbitrary code on a paired device during a debug session over the network. Apple addressed this by en...

CVE-2022-32943

The CVE-2022-32943 issue affects Apple’s Photos component and is addressed in iOS 16.2 and iPadOS 16.2, and macOS Ventura 13.1. The root cause is described as an issue addressed with improved bounds checks, preventingShake-to-undo from resurfacing a deleted photo without authentication. In the pu...

CVE-2024-54468

CVE-2024-54468 affects Apple platforms and concerns a sandbox escape. The initial description notes: “An app may be able to break out of its sandbox,” and that the issue was addressed with improved checks. The fixed versions span multiple Apple OS families: macOS Ventura 13.7.2, macOS Sonoma 14.7...

CVE-2025-31206

The CVE-2025-31206 entry describes a type confusion issue in WebKit content processing that can cause an unexpected process crash. Connected advisories confirm this vulnerability affects WebKitGTK/WebKit-based components across multiple Linux distros (e.g., webkit2gtk) and related packages, with ...

CVE-2025-31251

CVE-2025-31251 affects Apple platforms (watchOS, macOS Sonoma, tvOS, iPadOS, iOS, macOS Sequoia, visionOS, macOS Ventura) where maliciously crafted media processing could lead to unexpected app termination or memory corruption. The vulnerability is addressed with fixes in specific updates: watchO...

CVE-2017-2370

CVE-2017-2370 is a kernel vulnerability affecting iOS (pre-10.2.1), macOS (pre-10.12.3), tvOS (pre-10.1.1) and watchOS (pre-3.1.3). It stems from a linear heap buffer overflow in the kernel, triggered via an attacker-controlled length argument in a copyin-like path within mach_voucher_extract_att...

CVE-2021-30723

CVE-2021-30723 describes an information-disclosure bug where processing a malicious USD file could reveal memory contents due to an issue in state management. The vulnerability affects Apple platforms and is fixed in macOS Big Sur 11.4, macOS Catalina Security Update 2021-003, macOS Mojave Securi...

CVE-2022-26714

CVE-2022-26714 is a memory corruption flaw addressed by Apple across multiple platforms (tvOS, iOS, iPadOS, watchOS, macOS). The issue involves improper validation that could allow an attacker to execute arbitrary code with kernel privileges. Affected software updates include tvOS/iOS/iPadOS 15.5...

CVE-2023-42956

CVE-2023-42956 is a WebKit/WebKitGTK memory-handling issue that may cause a denial-of-service when processing web content. The connected advisories confirm the vulnerability affects WebKitGTK/WebKit components and note fixes in Safari 17.2, iOS 17.2/iPadOS 17.2, and macOS Sonoma 14.2, with multip...

CVE-2017-2355

CVE-2017-2355 affects WebKit in Apple ecosystems (iOS before 10.2.1; Safari before 10.0.3; iCloud before 6.1.1; iTunes before 12.5.5; tvOS before 10.1.1). The issue enables remote code execution or a denial of service via crafted web content, due to multiple memory corruption and related reliabil...

CVE-2017-7156

CVE-2017-7156 affects WebKit in Apple platforms: iOS <11.2, Safari <11.0.2, tvOS <11.2, iCloud for Windows 7.2, and iTunes for Windows

CVE-2018-4280

CVE-2018-4280 is a memory-corruption issue in Apple’s libxpc that affected iOS prior to 11.4.1 and macOS High Sierra 10.13.6 (and related tvOS/watchOS). The vulnerability is described as addressed with improved memory handling; no exploit details or fixed version beyond the affected ranges are pr...

CVE-2019-8718

CVE-2019-8718 is an IOUSBDeviceFamily memory corruption vulnerability in Apple devices. The issue could allow an attacker to execute arbitrary code with kernel privileges via a local exploit, as described in Apple advisories. Affected components include IOUSBDeviceFamily on iOS/watchOS/tvOS; root...

CVE-2020-9789

CVE-2020-9789 is an out-of-bounds write issue in Apple image processing paths that was fixed by Apple in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and corresponding Windows/iCloud components. The vulnerability could allow arbitrary code execution when processing a ...

CVE-2022-22653

CVE-2022-22653 corresponds to a logic issue in iOS/iPadOS that could allow a malicious website to access information about the user and their devices. The NVD/NIST entry notes the fix in iOS 15.4 and iPadOS 15.4, with CVSS v3.1 base score 7.5 (Network, High impact on confidentiality; no impact on...

CVE-2022-32837

CVE-2022-32837 is an Apple vulnerability addressed in macOS Monterey 12.5, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The tvOS security content lists CVE-2022-32837 under Wi‑Fi indicating: an app may be able to cause unexpected system termination or write kernel memory. The base Apple advisories descri...

CVE-2022-32838

CVE-2022-32838 is a logic-issue vulnerability fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, and iOS/iPadOS 15.6. The issue could allow an app to read arbitrary files due to improved state management. These details come from connected documents that list th...

CVE-2022-42842

CVE-2022-42842 affects Apple platforms and is tied to a kernel memory handling issue that could allow remote code execution. The CVE is listed among Apple TV vulnerabilities in the Apple TV 16.2 and related macOS/iOS/watchOS updates as fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1...