3131 matches found
CVE-2017-2373
CVE-2017-2373 concerns a memory-related issue in WebKit used by Apple products. The advisory states that iOS < 10.2.1, Safari < 10.0.3, and tvOS
CVE-2017-7056
CVE-2017-7056 is a WebKit issue affecting multiple Apple platforms (iOS, macOS, Apple TV, Windows iCloud/iTunes components in related feeds) where an attacker-controlled website could exfiltrate cross-origin data by abusing SVG filters in a crafted web page. Descriptions in the connected docs ind...
CVE-2019-8660
CVE-2019-8660 is a memory corruption issue that Apple fixed by improving input validation. The vulnerability could allow a remote attacker to cause an application termination or arbitrary code execution. It is addressed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3, per NVD detail...
CVE-2020-9844
CVE-2020-9844 is a double free vulnerability in the Wi-Fi component of Apple's operating systems. A remote attacker can exploit it to cause unexpected system termination or kernel memory corruption , rated CVSS 7.5 (High) with a network attack vector requiring no privileges or user interaction. T...
CVE-2021-30705
CVE-2021-30705 describes a memory-disclosure issue when Processing a maliciously crafted ASTC file. Apple states this was fixed by improved checks and updates across multiple platforms: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, plus Security Updates Mojave 2021-004 and...
CVE-2021-30843
CVE-2021-30843 affects Apple FontParser; processing a maliciously crafted dfont file may lead to arbitrary code execution. Public documents consistently tie the issue to font parsing in macOS/iOS/watchOS/tvOS components and indicate root cause as memory/validation issues in font handling. Impact ...
CVE-2022-32872
CVE-2022-32872 affects the Shortcuts component in iOS/iPadOS. A logic issue with restricted access allowed a person with physical access to an iOS device to view photos from the lock screen. Apple fixed this in iOS 16 and iOS 15.7 / iPadOS 15.7. The patch updates/restrictions close the gap; no ex...
CVE-2023-39434
CVE-2023-39434 is described in connected documents as a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. The issue is associated with WebKit/WebKitGTK ecosystem and is addressed in Apple platforms (iOS 17/iPadOS 17/watchOS 10/macOS Sonoma 14) per t...
CVE-2024-44296
CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...
CVE-2024-54542
CVE-2024-54542 affects Apple Safari Private Browsing in iOS 18.2/iPadOS 18.2 (and related Safari 18.2) where Private Browsing tabs could be accessed without authentication. The NVD/Red Hat-Reddit Apple entries confirm an authentication issue fixed by the 18.2 rollups across iOS/macOS/watchOS/tvOS...
CVE-2025-24206
CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...
CVE-2018-4241
CVE-2018-4241 is an intra-object linear heap buffer overflow in Apple’s XNU kernel, specifically in mptcp_usr_connectx. The issue affects iOS prior to 11.4, macOS prior to 10.13.5, tvOS prior to 11.4, and watchOS prior to 4.3.1, and can lead to arbitrary code execution in kernel context via a cra...
CVE-2020-3842
CVE-2020-3842 is a memory corruption vulnerability affecting Apple platforms (iOS, iPadOS, macOS, tvOS, watchOS) that can allow an application to execute arbitrary code with kernel privileges. The issue is fixed in iOS 13.3.1 / iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2...
CVE-2021-1744
CVE-2021-1744 affects Apple platforms including macOS Big Sur 11.2, macOS Catalina/Mojave with Security Update 2021-001, iOS 14.4, iPadOS 14.4, watchOS 7.3 and tvOS 14.4. The issue is an out-of-bounds write in the ImageIO (and related image-processing) path triggered by processing a maliciously c...
CVE-2021-30917
CVE-2021-30917 describes a memory corruption issue in the processing of ICC profiles in Apple software. The vulnerability is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1....
CVE-2022-22632
CVE-2022-22632 involves a logic issue in state management that could allow privilege escalation. Apple fixed it in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, and macOS Monterey 12.3. A malicious application may be able to elevate privileges; the vulnerability is addre...
CVE-2022-22636
CVE-2022-22636 is an out-of-bounds write vulnerability in Apple’s AVEVideoEncoder component that could allow an application to execute arbitrary code with kernel privileges. The issue is fixed in Apple’s 15.4 updates for tvOS, iOS, and iPadOS (tvOS 15.4, iOS 15.4, iPadOS 15.4). The vulnerability ...
CVE-2022-22659
CVE-2022-22659 – Apple iOS/iPadOS NetworkExtension information disclosure Affected products: iPhone and iPad running iOS/iPadOS. The vulnerability is described as a logic issue in NetworkExtension causing potential leakage of sensitive user information when the device is in a privileged network p...
CVE-2022-32908
CVE-2022-32908 is a memory corruption issue addressed by improved input validation in Apple software. It affects macOS Big Sur 11.x, macOS Monterey 12.6, iOS 15.7 and iOS 16, and iPadOS 15.7, with a local privilege escalation risk. A fix is provided in the listed macOS/iOS/iPadOS updates; exploit...
CVE-2023-32413
CVE-2023-32413 describes a race condition (TOCTOU) in Apple XNU logic that may allow an app to gain root privileges. Public details in the primary CVE entry state a fix in multiple Apple OS releases: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6/iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS...
CVE-2023-42961
CVE-2023-42961 describes a path-handling issue in Apple OS components that could allow a sandboxed process to circumvent sandbox restrictions. The flaw is mitigated by updated validations and is fixed in iOS 17/iPadOS 17, iOS 16.7/iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, and macOS Monter...
CVE-2026-65335
CVE-2026-65335 is a WebKit state-management flaw in Safari/iOS/iPadOS/macOS that causes an unexpected Safari crash when processing malicious web content. Fixed in Safari 26.6.1, iOS/iPadOS 18.7.10 and 26.6.1, and macOS Tahoe 26.6.2. No exploitation observed; CVSS 3.1 base score 4.3 (Medium).
CVE-2026-65343
CVE-2026-65343 is a use-after-free vulnerability in the Kernel component of Apple's operating systems. A remote attacker may be able to cause unexpected system termination (denial of service). The issue was addressed with improved memory management. Fixed in iOS 26.6.1 , iPadOS 26.6.1 , and macOS...
CVE-2011-2821
CVE-2011-2821 is a libxml2 double-free vulnerability triggered by crafted XPath expressions. The description notes impact as a denial of service and potential unspecified effects, with affected product usage including Google Chrome before 13.0.782.215. Connected documents corroborate this CVE acr...
CVE-2017-2354
CVE-2017-2354 affects WebKit in multiple Apple products (iOS, Safari, iCloud, iTunes, tvOS). A memory-corruption/remote-code-execution vector via crafted web content could crash or execute arbitrary code. Affected versions include iOS prior to 10.2.1, Safari prior to 10.0.3, iCloud prior to 6.1.1...
CVE-2018-4161
CVE-2018-4161 concerns WebKit in Apple's iOS (≤11.3), Safari (≤11.1), iCloud/iTunes on Windows, tvOS, watchOS. It allows remote code execution or memory corruption causing app crash via a crafted website; root cause is memory corruption in WebKit. Affected products are Apple devices using WebKit/...
CVE-2018-4199
CVE-2018-4199 affects Apple WebKit components across multiple Apple products (iOS before 11.4, Safari before 11.1.1, tvOS before 11.4, iCloud/iTunes/WebKit on Windows). The description specifies that remote attackers may exploit a crafted web site to execute arbitrary code or cause a denial of se...
CVE-2019-8848
CVE-2019-8848 is an elevation-of-privilege issue in Apple CFNetwork Proxies (and related components) that could allow a local attacker to gain higher privileges. It is fixed by updates across macOS/macOS Catalina 10.15.2, Mojave Security Update 2019-002, High Sierra Security Update 2019-007, tvOS...
CVE-2020-9790
CVE-2020-9790 is an out-of-bounds write issue in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple’s advisories indicate the vulnerability was fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and related Wind...
CVE-2020-9954
CVE-2020-9954 affects Apple media components across iOS/iPadOS 14, watchOS 7.0, tvOS 14 and macOS Catalina 10.15.7. The root cause is a buffer/memory handling issue in CoreAudio: Playing a malicious audio file may lead to arbitrary code execution. The vulnerability is addressed by updates on the ...
CVE-2021-1811
CVE-2021-1811 is a logic/state-management issue in Apple software where processing a maliciously crafted font can disclose process memory. Connected sources specify the affected products and versions: iTunes 12.11.3 for Windows; Security Update 2021-002 for Catalina; Security Update 2021-003 for ...
CVE-2021-1857
CVE-2021-1857 describes a memory initialization issue that Apple fixed via multiple platform updates. Affected components include memory handling across iTunes for Windows (12.11.3), Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, w...
CVE-2021-30715
This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...
CVE-2022-22613
CVE-2022-22613 describes an out-of-bounds write that, if triggered, could allow an attacker to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3....
CVE-2022-26768
CVE-2022-26768 is a memory corruption issue that could allow an app to execute arbitrary code with kernel privileges on Apple platforms. The NVD entry notes it is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6, watchOS 8.6, and tvOS 15.5, with the underlying cause described as improved state ...
CVE-2022-32889
CVE-2022-32889 is an Apple vulnerability affecting iOS and watchOS where a memory handling issue could allow an app to execute arbitrary code with kernel privileges. Apple and Red Hat sources indicate the root cause is memory handling, and fixes are in iOS 16 and watchOS 9. The impact is high (ke...
CVE-2022-42805
CVE-2022-42805 is an Apple-related vulnerability where an integer overflow occurred due to insufficient input validation. The issue could allow an app to execute arbitrary code with kernel privileges. Public references indicate fixes in iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The Red Hat ...
CVE-2024-27791
The CVE-2024-27791 issue concerns Apple OSs where an app may be able to corrupt coprocessor memory. Affected software includes iOS and iPadOS up to 17.3, tvOS up to 17.3, macOS Ventura up to 13.6.4, macOS Monterey up to 12.7.3, and macOS Sonoma up to 14.3, with fixes in the listed estar versions ...
CVE-2024-27840
CVE-2024-27840 affects Apple platforms including macOS (Ventura 13.x, Monterey 12.x), iOS/iPadOS, tvOS, visionOS, and watchOS. The issue is described as a memory handling problem where an attacker who already has kernel code execution may bypass kernel memory protections. The vulnerability is fix...
CVE-2009-1692
CVE-2009-1692 affects WebKit (as used in Apple Safari, Mobile Safari on iPhone OS 1.0–2.2.x, iPod touch; and related WebKit-based apps). The issue is triggered by a large length attribute on an HTMLSelectElement, causing memory consumption or device reset (denial of service). Root cause: improper...
CVE-2017-7000
CVE-2017-7000 is identified in connected advisories as an information-disclosure vulnerability within the sqlite library used by Chromium (chromium-browser). Debian’s security advisory for chromium-browser lists CVE-2017-7000 among affected issues and states fixes are available in stretch 60.0.31...
CVE-2018-4119
CVE-2018-4119 affects Apple’s WebKit component across multiple platforms (iOS prior to 11.3, Safari prior to 11.1, iCloud/Windows and tvOS variants). The issue allows remote attacker code execution or a memory-corruption–driven DoS via a crafted website, caused by memory handling/memory-corruptio...
CVE-2019-8663
CVE-2019-8663 is a memory-leak/memory-corruption issue tied to NSKeyedUnarchiver/NSSecureCoding handling in iOS/macOS (Core Data/NSKeyedArchiver paths). The vulnerability arises from the deserialization of the SGBigUTF8String subclass of NSString during remote data processing, which can produce a...
CVE-2021-1754
CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...
CVE-2021-30859
CVE-2021-30859 is a Kernel-type confusion vulnerability in Apple products. According to Apple advisories, it could allow a malicious application to execute arbitrary code with kernel/system privileges. The issue was addressed by Apple in macOS Big Sur 11.6 and Security Update 2021-005 Catalina, a...
CVE-2022-22599
CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...
CVE-2022-26738
CVE-2022-26738 describes an out-of-bounds write vulnerability that was addressed by Apple through bounds checking improvements. The issue could allow an affected application to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and ...
CVE-2022-32787
CVE-2022-32787 is an out-of-bounds write vulnerability in how maliciously crafted web content is processed. Root cause: improved bounds checking fixes an out-of-bounds write that could lead to arbitrary code execution. Affected products/versions per the initial description are Apple platforms inc...
CVE-2022-32919
CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...