3154 matches found
CVE-2026-64757
CVE-2026-64757 describes a memory corruption issue addressed by Apple through improved state management. The vulnerability affects multiple Apple platforms and applications, most notably Safari and WebKit components, with fixes in Safari 26.6 and OS updates for iOS 26.6, iPadOS 26.6, macOS Tahoe ...
CVE-2017-13855
CVE-2017-13855 concerns a kernel-type confusion vulnerability affecting Apple platforms: iOS <11.2, macOS <10.13.2, tvOS <11.2, watchOS
CVE-2018-4122
CVE-2018-4122 involves memory-corruption in WebKit/JIT on Apple platforms. Affected: iOS < 11.3, Safari < 11.1, iCloud for Windows < 7.4, iTunes < 12.7.4, tvOS < 11.3, watchOS
CVE-2018-4218
CVE-2018-4218 concerns a use-after-free in Apple WebKit affecting WebKit in iOS (and Safari on macOS) and related components (iCloud, iTunes on Windows, tvOS/watchOS) via a crafted web site triggering @generatorState. The issue can allow remote arbitrary code execution or cause a denial of servic...
CVE-2019-8685
CVE-2019-8685 affects Apple’s WebKit components used by Safari and related iOS/macOS/watchOS/tvOS/iCloud/iTunes software. The issue is described as multiple memory corruption problems resolved by improved memory handling, with an explicit fix in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS ...
CVE-2020-9991
CVE-2020-9991 is an Apple vulnerability addressed across multiple Apple platforms. The issue was fixed by "improved checks" and affects macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iCloud for Windows 7.21, and tvOS 14.0. A remote attacker may be able to cause a denial of service. ...
CVE-2021-1815
CVE-2021-1815 is a path-traversal vulnerability in macOS Big Sur and related Apple platforms caused by a parsing issue in directory path handling. A local user could modify protected parts of the file system. The fixed versions include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4 and tv...
CVE-2021-30710
CVE-2021-30710 describes a memory corruption issue in Apple platforms that is mitigated by updated state management. The vulnerability affects tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious ...
CVE-2021-30736
CVE-2021-30736 involves a buffer overflow that was mitigated by improved size validation. The advisory states that the issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, and iPadOS 14.6. The impact is that an application may be able to execute arbitrary code with kernel privi...
CVE-2021-30835
CVE-2021-30835 is referenced in multiple sources and is disclosed in the Apple iCloud for Windows 13 advisory as part of a set of vulnerabilities affecting ImageIO (memory corruption), WebKit, Foundation, and CoreGraphics with variant CVEs. Apple notes that processing maliciously crafted images o...
CVE-2021-30881
CVE-2021-30881 is an Apple vulnerability where unpacking a maliciously crafted archive could lead to arbitrary code execution due to an input validation/memory handling issue. Publicly disclosed remediation lists fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Securi...
CVE-2022-22635
CVE-2022-22635 is an out-of-bounds write in AVEVideoEncoder. Apple fixes it in tvOS 15.4, iOS 15.4, and iPadOS 15.4, with the impact described as an app potentially gaining elevated privileges. Affected product/component: AVEVideoEncoder (Apple TV/iOS/iPadOS stack). Root cause: out-of-bounds writ...
CVE-2022-32924
CVE-2022-32924 affects Apple platforms (tvOS 16.1; macOS Big Sur 11.7; macOS Ventura 13; watchOS 9.1; iOS 16.1; iPadOS 16). Root cause: improved memory handling exposed a vulnerability that could allow an app to execute arbitrary code with kernel privileges. Impact is kernel-level code execution....
CVE-2023-23537
CVE-2023-23537 affects Apple platforms via a privacy issue where log entries could reveal sensitive location data. The vulnerability is fixed by Apple in: macOS Ventura 13.3, iOS 16.4/iPadOS 16.4, iOS 15.7.4/iPadOS 15.7.4, watchOS 9.4, and macOS Big Sur 11.7.5. Root cause (as described) is improv...
CVE-2024-44258
CVE-2024-44258 affects Apple’s ManagedConfiguration framework and the profiled daemon. The issue arises during backup restoration when the destination path’s symlink status is not validated, potentially allowing written files to migrate into restricted, protected areas and modify system files. A ...
CVE-2026-43778
CVE-2026-43778 is a use-after-free issue addressed with improved memory management that can allow an app to terminate the system or corrupt kernel memory. Affected products/versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26....
CVE-2026-65329
CVE-2026-65329 affects the Telephony framework on iOS 26.6.1/iPadOS 26.6.1 (iPhone 11+), where an authentication issue in IPSec state management allowed a privileged-network-position attacker to bypass IPSec authentication and intercept network traffic; fixed via improved state management. No exp...
CVE-2026-65338
CVE-2026-65338 is a memory handling vulnerability in WebKit , the browser engine powering Safari. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed with improved memory handling (WebKit Bugzilla 318348). Affected product...
CVE-2016-4735
CVE-2016-4735 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The vulnerability allows an attacker to trigger remote code execution or a denial of service via a crafted web site, caused by memory corruption. Connected sources confirm the affected platforms and failure...
CVE-2019-6213
CVE-2019-6213 is a kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges. Apple’s advisories (HT209447 for tvOS/iOS 12.1.2/12.1.3, HT209443 for iOS 12.1.3, and related Apple security notes) describe a memory corruption issue resolved ...
CVE-2019-8552
CVE-2019-8552 is an Apple memory-init issue that is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The vulnerability could allow a malicious application to elevate privileges due to improved memory handling. Affected products are iOS, macOS Mojave, tvOS, and watchOS as liste...
CVE-2019-8647
CVE-2019-8647 is a use-after-free vulnerability that was addressed with improved memory management and is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. The CVE entry notes that a remote attacker may have been able to cause arbitrary code execution. Apple’s advisories (HT210346/HT210351/HT210353)...
CVE-2020-3841
CVE-2020-3841 affects Safari Login AutoFill. The issue, tied to UI handling, allowed a local user to send a password unencrypted over the network. Apple fixed this with Safari 13.0.5 and iOS/iPadOS 13.3.1 (and related security content), addressing the vulnerability by improved input/UI handling. ...
CVE-2021-1851
CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...
CVE-2021-30653
CVE-2021-30653 is an Apple image-processing vulnerability addressed by Apple in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The public description states that processing a maliciously crafted image may lead to arbitrary code execution due to improved checks, with the fi...
CVE-2021-30911
CVE-2021-30911 describes an out-of-bounds read caused by insufficient bounds checking when processing a maliciously crafted USD file. Impact: potentially disclosing memory contents. Affected platforms and fixed versions include macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an...
CVE-2022-26764
CVE-2022-26764 is a memory corruption issue in Apple platforms that is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. The root cause is improved validation reducing memory corruption; an attacker who already has kernel code execution could potentially bypass kerne...
CVE-2023-40391
CVE-2023-40391 affects Apple platforms with a memory handling issue that may allow an app to disclose kernel memory. Publicly documented fixes apply to tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14 (and Xcode 15). No exploitation status is stated in the provided sources. The vulnerability is ad...
CVE-2024-23257
Technical details about CVE-2024-23257 are not publicly provided in the supplied documents; monitor for updates.
CVE-2025-43216
CVE-2025-43216 is a use-after-free in WebKitGTK/WebKit processing of malicious web content that can cause an unexpected Safari crash. The CVE is referenced in multiple advisories tied to WebKitGTK/WebKit, with fixes implemented in Safari 18.6 and corresponding WebKitGTK updates (e.g., WebKitGTK/W...
CVE-2026-43725
CVE-2026-43725 affects WebKit/Web content handling in Apple platforms prior to patch: Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2. Root cause is insufficient input validation that could allow a malicious website to process restricted web content outside the sandbox. Apple securit...
CVE-2018-4114
CVE-2018-4114 concerns the WebKit component in multiple Apple platforms. A memory corruption issue via a crafted website could allow remote code execution or a denial of service, affecting: iOS<11.3, Safari<11.1, iCloud<7.4 on Windows, iTunes<12.7.4 on Windows, tvOS<11.3, and watchOS
CVE-2018-4227
CVE-2018-4227 affects Apple Mail in iOS prior to 11.4 and macOS prior to 10.13.5, enabling remote attackers to read the cleartext contents of S/MIME encrypted messages via direct exfiltration. The Apple advisory notes the issue relates to handling of S/MIME and MIME isolation within Mail, with mi...
CVE-2019-8834
The CVE-2019-8834 entry affects Apple’s CFNetwork (and related iCloud/WebKit contexts in Apple OS releases). Description: a configuration issue may allow an attacker in a privileged network position to bypass HSTS for a limited set of top‑level domains not previously in the HSTS preload list. Aff...
CVE-2021-1776
CVE-2021-1776 describes an out-of-bounds write vulnerability in the way a font file is processed. Apple documents that this could lead to arbitrary code execution and notes the issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, and correspond...
CVE-2021-1885
CVE-2021-1885 affects Apple platforms: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. It is an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution. The issue was addressed by improved bounds checking and is fixed in the listed OS ...
CVE-2021-30886
CVE-2021-30886 is a kernel-use-after-free in Apple OS kernels (macOS, iOS/iPadOS, watchOS, tvOS) that could allow a local attacker to execute arbitrary code with kernel privileges. Apple fixes claim improved memory management in the kernel; affected products include macOS Monterey 12.0.1, iOS 15....
CVE-2021-30939
CVE-2021-30939 is an out-of-bounds read vulnerability fixed by Apple in multiple OS updates. The issue occurs when processing a maliciously crafted image, potentially allowing arbitrary code execution. According to the sources, the fix applies to macOS Big Sur 11.6.2, macOS Monterey 12.1, macOS C...
CVE-2022-32830
CVE-2022-32830 is an out-of-bounds read vulnerability in ImageIO affecting tvOS/iOS/iPadOS up to version 15.6; exploitation through processing a malicious image could disclose user information. Other Apple components listed in tvOS 15.6/ iOS 15.6/ iPadOS 15.6 have separate CVEs. Remediation: upda...
CVE-2022-32845
CVE-2022-32845 is a signature-check bypass vulnerability in Apple’s Neural Engine model loading (model.hwx) that can enable sandbox escapes via manipulated HWX files. The issue arises in how ANE threads bind and process inputs, allowing an attacker to bypass Apple’s signature checks during aned m...
CVE-2022-32945
CVE-2022-32945 affects macOS, with Apple noting an access issue that could allow an app to record audio via paired AirPods. The root cause is tied to sandbox restrictions on third‑party apps; Apple states the vulnerability is fixed in macOS Ventura 13. The CVE appears in multiple Apple advisories...
CVE-2022-46690
CVE-2022-46690 is an Apple family issue described as an out-of-bounds write that was addressed with improved input validation. The Apple security content lists multiple components affected across platforms (iOS, iPadOS, macOS, tvOS, watchOS), with the kernel and several subsystems (e.g., IOMobile...
CVE-2023-23494
CVE-2023-23494 affects Apple iOS and iPadOS 16.4 releases. The issue is described as a buffer overflow that was addressed by improved bounds checking, with the fix available in iOS 16.4 and iPadOS 16.4. The documented impact is that a user in a privileged network position may cause a denial-of-se...
CVE-2024-23270
The CVE-2024-23270 issue affects macOS (Monterey 12.7.4; Ventura 13.6.5; Sonoma 14.4) and iOS/iPadOS/tvOS (17.4) where an app may execute arbitrary code with kernel privileges due to improved memory handling. Affected components are not explicitly named in the provided documents; the vulnerabilit...
CVE-2025-24160
CVE-2025-24160 is a vulnerability in Apple platforms (CoreAudio) where parsing a file may lead to an unexpected app termination. It is addressed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Base metrics show CVSS 3.1 ...
CVE-2025-24161
CVE-2025-24161 affects Apple platforms and multiple components involved in parsing files. Apple’s security content shows this CVE being addressed in iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3, and tvOS 18.3. The underlying issue is a ...
CVE-2025-24230
An out-of-bounds read issue in Apple media handling (triggered by playing a malicious audio file) was fixed via input-validation improvements. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4/iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Exploitation status...
CVE-2026-64787
CVE-2026-64787 is a use-after-free vulnerability in WebKit (Bugzilla 313703), addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination . The issue is fixed in Safari 26.6.1 , iOS 26.6.1 , iPadOS 26.6.1 , and macOS Tahoe 26...
CVE-2017-7048
CVE-2017-7048 affects WebKit components across Apple products (iOS 10.x, Safari 10.x, tvOS 10.x, iCloud/iTunes on Windows) and WebKitGTK+ before 2.16.6. In Apple products, the issue is described as memory corruption leading to remote code execution or a crash via a crafted web site; WebKitGTK+ re...