CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2022-42840

Technical details are not provided in the provided documents. The initial entry notes a memory handling fix affecting macOS/iOS versions but does not specify component, root cause, or remediation.

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2024-27796

CVE-2024-27796 is a local privilege-escalation vulnerability in Apple operating systems. The NVD entry notes that the issue was addressed with improved checks and is fixed in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. CVSS vectors indicate LOCAL access with required user interaction (NVD: AV:L...

CVE-2025-31203

Apple fixed an integer overflow by improving input validation in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6/18.4, macOS Sonoma 14.7.5, watchOS 11.4, and visionOS 2.4. The issue could allow a local-network attacker to cause a denial-of-service. Affected products and versions are listed in the CV...

CVE-2025-43368

CVE-2025-43368 is a use-after-free vulnerability in WebKitGTK/WebKit (webuikit) that can occur while processing malicious web content, potentially causing an unexpected crash in Safari when rendering content. Connected advisories (Debian, AlmaLinux, Amazon Linux 2, Astra Linux) confirm the issue ...

CVE-2016-4609

CVE-2016-4609 affects libxslt across Apple platforms: iOS prior to 9.3.3, OS X prior to 10.11.6, iTunes prior to 12.4.2 on Windows, iCloud prior to 5.2.1 on Windows, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. The vulnerability allows remote attackers to cause a denial of service via memory ...

CVE-2016-4624

Technical details for CVE-2016-4624 are not provided in the connected documents. The initial entry gives a high-level description only; no product/version/root-cause/impact or fixes are documented here. Monitor for updates in the sources

CVE-2016-4733

CVE-2016-4733 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. This is described as a distinct vulnerability from CVE-2016-4611, CV...

CVE-2016-4768

CVE-2016-4768 affects WebKit components across Apple platforms: iOS prior to 10, tvOS prior to 10, Safari prior to 10, and iTunes on Windows prior to 12.5.1. The vulnerability is triggered by a crafted web site and results in remote code execution or memory corruption, with impact on confidential...

CVE-2017-7157

CVE-2017-7157 affects WebKit components across Apple devices (iOS, Safari, tvOS, iCloud/iTunes on Windows). The root issue is multiple memory corruption vulnerabilities in WebKit that could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Affec...

CVE-2018-4243

CVE-2018-4243 is a kernel-level buffer overflow in Apple’s OS X/iOS kernel: a vulnerability in getvolattrlist affects iOS < 11.4, macOS < 10.13.5, tvOS < 11.4, and watchOS

CVE-2020-9794

CVE-2020-9794 is an out-of-bounds read that Apple fixed across multiple platforms. The advisory notes a malicious app could cause a denial of service or disclose memory contents. Affected/affected versions include iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and rela...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2022-26701

The CVE-2022-26701 issue is a race condition that was mitigated by improved locking in Apple software. It affects Apple platforms across multiple OS lines and versions, with the fixed versions/recipients listed as tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The documented impact st...

CVE-2023-23532

CVE-2023-23532 is an Apple vulnerability where a sandbox escape was addressed by Apple with improved checks. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS updates: iOS 16.4 and iPadOS 16.4, as well as iOS 15.7.6 and iPadOS 15.7.6. The description notes the fix involves enhanced valid...

CVE-2023-41981

CVE-2023-41981 affects Apple platforms (macOS/macOS Sonoma 14; Ventura 13.6; iOS 16.7/17; iPadOS 16.7/17; tvOS 17; watchOS 10). Root cause: a memory handling issue in the kernel that may allow bypass of kernel memory mitigations after kernel code execution. Impact per sources: attacker with kerne...

CVE-2024-23212

CVE-2024-23212 is a memory handling issue that could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS 10.3, tvOS 17.3, iOS 17.3 / iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, macOS Monterey 12.7.3, and iOS/iPadOS 16.7.5 or 17.3 depen...

CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2018-4240

CVE-2018-4240 affects Apple’s Messages component across iOS 11.4 and earlier, macOS 10.13.5 and earlier, tvOS 11.4 and earlier, watchOS 4.3.1 and earlier. The issue enables a remote denial of service via a crafted message. Apple’s security content entries (HT208848/HT208849/HT208850/HT208851) con...

CVE-2019-6224

CVE-2019-6224 is an Apple FaceTime vulnerability where a buffer overflow in the FaceTime component could let a remote attacker initiate a call and cause arbitrary code execution. The issue is documented as a memory handling/validation problem and is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS...

CVE-2020-29618

CVE-2020-29618 is an out-of-bounds read in ImageIO during processing of a malicious image, addressed by Apple with improved input validation. Vulnerable components include ImageIO across macOS Big Sur 11.1, tvOS 14.3, iOS 14.3 / iPadOS 14.3, watchOS 7.2, and iCloud for Windows 12.0. The issue can...

CVE-2020-9839

CVE-2020-9839 is a race-condition vulnerability across Apple platforms that was fixed by state-handling improvements. Public details show impact as potential privilege escalation. Fixes were released in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, with System Preferenc...

CVE-2020-9876

CVE-2020-9876 is an out-of-bounds write in Apple's ImageIO component that can be triggered by processing a malicious PDF. Affected products include macOS/iOSwatch/tvOS/watchOS families via ImageIO, and Windows (iCloud for Windows, iTunes for Windows) and tvOS updates. Public details in connected ...

CVE-2021-30779

CVE-2021-30779 affects Apple ImageIO handling where processing a maliciously crafted image could lead to arbitrary code execution. The issue is addressed with improved checks and is fixed in Apple OS updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. The initial description notes ...

CVE-2021-30785

CVE-2021-30785 involves a buffer overflow in Apple’s image processing path (ImageIO) that could be triggered by a maliciously crafted image and may lead to arbitrary code execution. The root cause is described as an overflow that was addressed with improved bounds checking. Affected fixes are ava...

CVE-2021-30847

CVE-2021-30847 affects Apple ImageIO on Windows (via iCloud for Windows 13). The vulnerability is a memory corruption issue triggered by processing a malicious image, leading to arbitrary code execution. Apple’s advisory lists the fix as part of iCloud for Windows 13 security content (HT212953) w...

CVE-2021-30916

CVE-2021-30916 is a memory corruption vulnerability in Apple’s Kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The initial description notes fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, Security Update 2021-007 Catalina,...

CVE-2022-22640

CVE-2022-22640 is a memory corruption in Apple’s kernel that was mitigated by improved validation. The vulnerability is fixed in tvOS 15.4, iOS 15.4/iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The affected component is the Kernel, with the explicit impact described as arbitrary code execut...

CVE-2022-22667

CVE-2022-22667 (Apple GPU Drivers) is a use-after-free memory corruption issue that could allow arbitrary code execution with kernel privileges. The vulnerability is fixed in iOS 15.4 / iPadOS 15.4; exploitation requires authenticated access. Affected component: GPU Drivers. Remediation: update t...

CVE-2022-32814

CVE-2022-32814 describes a type confusion issue that Apple fixed via updated state handling. The NVD entry states the vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected Apple platforms and versions for the fix are: watchOS 8.7, tvOS 15.6, iOS 15.6 and iPad...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2023-32359

CVE-2023-32359 is a WebKitGTK/WebKitGTK+-related vulnerability where a user password may be read aloud by a text-to-speech accessibility feature. The initial CVE entry notes a fix in iOS 16.7.2 and iPadOS 16.7.2. Connected advisories ( MiracleLinux, TencentOS Server, Alibaba Cloud Linux, Rocky Li...

CVE-2026-20652

CVE-2026-20652 is a remote DoS vulnerability in WebKit-based components (Apple Safari/WebKit and WebKitGTK family) caused by a memory handling issue when processing malicious web content. Affected products include Safari (macOS/iOS/iPadOS/watchOS/tvOS/visionOS) and WebKitGTK/WebKit2GTK in Linux d...

CVE-2018-4113

CVE-2018-4113 affects WebKit’s JavaScriptCore in multiple Apple platforms (iOS <11.3, Safari

CVE-2018-4125

CVE-2018-4125 concerns Apple WebKit in multiple OSs (iOS, Safari, tvOS, watchOS) and related Apple apps (iCloud for Windows, iTunes for Windows). A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service. Affected versions include iOS before...

CVE-2018-4190

CVE-2018-4190 concerns a WebKit issue across Apple platforms (iOS before 11.4, Safari before 11.1.1, iCloud/iTunes on Windows, tvOS) where credentials could be exposed during a fetch of CSS mask images. Nessus/OpenSUSE/NASL entries describe credential leakage via CSS mask image fetch in WebKit; A...

CVE-2020-3870

CVE-2020-3870 relates to an out-of-bounds read in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple fixed this via input-validation improvements and OS updates including iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30687

CVE-2021-30687 is an out-of-bounds read vulnerability in Apple platforms triggered by processing a maliciously crafted image, leading to potential disclosure of user information. Affected software includes tvOS 14.6; Security Updates 2021-004 Mojave; iOS 14.6 and iPadOS 14.6; Security Update 2021...

CVE-2022-22593

Technical details about CVE-2022-22593 are not publicly provided in the supplied documents. No specific affected products, root cause, impact, or fixes beyond the initial description are disclosed. Monitor for updates.

CVE-2022-26740

CVE-2022-26740 describes an out-of-bounds write issue that may allow an app to execute arbitrary code with kernel privileges. Affected products/versions: tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. Remediation is applying the fixed updates (Apple-supplied 15.5/12.4 releases). The c...

CVE-2022-32793

CVE-2022-32793 refers to multiple out-of-bounds write issues in Apple GPU drivers that could lead to kernel memory disclosure. The connected Apple advisory notes these issues affect GPU Drivers and are fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. The CVSS base s...

CVE-2023-23511

CVE-2023-23511 concerns a memory-handling issue in Apple platforms that could allow bypass of Privacy preferences. The CVE is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, and watchOS 9.3. Affected component details and root cause are described as improv...

CVE-2023-23535

CVE-2023-23535 affects Apple operating systems, with the vulnerability in ImageIO-related memory handling that may cause disclosure of process memory when processing a malicious image. Affected products/versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 15.7.4/i...

CVE-2025-31214

CVE-2025-31214 is an Apple vulnerability affecting iOS 18.5 and iPadOS 18.5. The issue stems from improper state management and is fixed in the 18.5 releases. An attacker connected to a privileged network could intercept network traffic due to this flaw. The NVD description confirms the fix and s...

CVE-2026-43722

CVE-2026-43722 affects Apple OS components (kernel) on macOS Tahoe and related iOS/iPadOS versions. The issue could allow an app to leak sensitive kernel state via malicious content processed locally; attack vector is local with required user interaction and no privileges, and exploitation status...