CVE-2022-32821

CVE-2022-32821 is a memory corruption vulnerability addressed by Apple in multiple OS updates. The issue involved memory corruption that was mitigated by improved validation and is fixed in: watchOS 8.7, tvOS 15.6, iOS 15.6 / iPadOS 15.6, and macOS Monterey 12.5. The impact stated in the CVE note...

CVE-2022-32840

CVE-2022-32840 affects Apple systems and was addressed in macOS Monterey 12.5 (and related updates for iOS 15.6, iPadOS 15.6, watchOS 8.7). The vulnerability, described as a kernel-privilege arbitrary code execution risk, is tied to the Apple Neural Engine component and was mitigated by applying ...

CVE-2022-32849

CVE-2022-32849 is linked to an information disclosure in Apple iCloud Photo Library. Apple’s Apple KB HT213488 notes the issue affects iOS 15.6 / iPadOS 15.6 / macOS Big Sur 11.6.8 / macOS Monterey 12.5 / tvOS 15.6 / Security Update 2022-005 Catalina, resolved by removing vulnerable code. The NVD...

CVE-2024-23278

CVE-2024-23278 affects Apple platforms and was mitigated by updated checks to prevent sandbox escape. The NVD/NVD-derived entry states the fix is included in macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, and tvOS 17.4. The descripti...

CVE-2024-27826

CVE-2024-27826 is an Apple macOS kernel‑level memory handling vulnerability. The issue could allow an app to execute arbitrary code with kernel privileges. Apple’s advisories indicate the fix was applied via memory handling improvements and are effective for macOS versions: Ventura 13.6.8, Sonoma...

CVE-2024-27848

CVE-2024-27848 affects Apple platforms (macOS, iOS, iPadOS). The issue corresponds to an elevation of privileges via improved permissions checking, enabling a malicious local app to gain root privileges. The vulnerability is fixed in macOS Sonoma 14.5 and iOS/iPadOS 17.5. Related Apple security c...

CVE-2026-20643

CVE-2026-20643 is a WebKit/Web navigation cross-origin issue in Safari and Apple OS web rendering components. The fixed entry notes that processing maliciously crafted web content could bypass the Same Origin Policy due to an improved input validation in the Navigation API. Affected context inclu...

CVE-2017-13884

CVE-2017-13884 affects Apple products via the WebKit engine. The issue enables remote code execution or memory corruption crashes when processing specially crafted web content. Affected: iOS prior to 11.2, Safari prior to 11.0.2, iCloud on Windows, iTunes on Windows, tvOS prior to 11.2, watchOS p...

CVE-2017-7041

CVE-2017-7041 affects WebKit in multiple Apple platforms: iOS before 10.3.3, Safari before 10.1.2, iCloud on Windows before 6.2.2, iTunes on Windows before 12.6.2, and tvOS before 10.2.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service by visiting...

CVE-2018-4120

Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...

CVE-2018-4224

CVE-2018-4224 affects multiple Apple platforms (iOS <11.4, macOS <10.13.5, iCloud/Windows, iTunes/Windows, tvOS <11.4, watchOS

CVE-2019-8553

CVE-2019-8553 is a GeoServices memory corruption vulnerability in Apple iOS and tvOS, triggered by clicking a malicious SMS link. The issue is addressed by Apple in iOS 12.2 and tvOS 12.2 (watchOS 5.2). The root cause is described as a memory corruption risk that is mitigated by improved validati...

CVE-2019-8592

CVE-2019-8592 is a CoreAudio memory-corruption issue in Apple platforms. The vulnerability could be triggered by playing a malicious audio file, potentially enabling arbitrary code execution. The issue is fixed across multiple Apple OS updates, including macOS Catalina 10.15 and 10.15.1, macOS Mo...

CVE-2019-8827

CVE-2019-8827 affects WebKit-based browsers used in Apple products (Safari, iCloud for Windows, iTunes, tvOS, iPadOS/iOS) and Windows iCloud/WebKit pages. Root cause: processing maliciously crafted web content allowed leakage of visited sites via the HTTP referrer header; Apple downgraded third-p...

CVE-2019-8856

The CVE-2019-8856 issue affects Apple’s CallKit in iOS/iPadOS, watchOS, and macOS where Siri-initiated outgoing calls could use the wrong cellular plan on devices with two active plans. Root cause: an API/state handling flaw in outgoing Siri calls. Impact: potential misrouting of calls due to inc...

CVE-2020-29611

CVE-2020-29611 is an out-of-bounds write in ImageIO that could lead to arbitrary code execution when processing a malicious image. Apple lists fixes across multiple products/updates: tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 / iPad...

CVE-2020-9916

CVE-2020-9916 is a WebKit Page Loading vulnerability describing a URL Unicode encoding issue that could allow an attacker to conceal the destination of a URL. According to Apple advisories, this was addressed in Safari/WebKit, with fixes implemented in Safari 13.1.2 and related OS updates (iOS 13...

CVE-2021-1791

CVE-2021-1791 is an out-of-bounds read kernel vulnerability in Apple platforms. The issue could allow a malicious app to disclose kernel memory and was mitigated by improved input validation. Apple’s fixes affect macOS Big Sur 11.2 and Security Update 2021-001 for Catalina Mojave, as well as watc...

CVE-2021-1809

CVE-2021-1809 describes a memory corruption bug in Apple systems that allowed reading restricted memory due to insufficient validation. The issue is addressed by Apple security updates: macOS Catalina Security Update 2021-002, macOS Mojave Security Update 2021-003, iOS 14.5/iPadOS 14.5, watchOS 7...

CVE-2021-1843

CVE-2021-1843 affects Apple systems; the issue arises from processing a maliciously crafted image and could lead to arbitrary code execution. It is addressed by iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3, and Security Update 2021-002 (Catalina) / 2021-003 (Mojave). Root caus...

CVE-2021-30703

CVE-2021-30703 describes a double‑free memory management issue fixed in macOS Big Sur 11.4, tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, and watchOS 7.5. The vulnerability could allow an application to execute arbitrary code with kern...

CVE-2021-30707

The CVE-2021-30707 entry affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). The issue was fixed by improved checks and is triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public details in connecte...

CVE-2021-30841

CVE-2021-30841 is an Apple FontParser vulnerability. A crafted dfont file could trigger arbitrary code execution via font parsing. Affected products include iOS/iPadOS, macOS Big Sur, tvOS, watchOS, and related updates. The issue is addressed in iOS 14.8 / iPadOS 14.8, macOS Big Sur 11.6, Securit...

CVE-2022-22598

CVE-2022-22598 affects Apple's CoreMedia in iOS 15.4 and iPadOS 15.4. An app could learn information about the current camera view before obtaining camera access due to an access-control logic issue. Apple fixed this with iOS 15.4 / iPadOS 15.4, and Red Hat/NCSC references corroborate the camera-...

CVE-2022-22609

The CVE-2022-22609 issue affects Apple platforms and was caused by insufficient permissions checks that could allow a malicious application to read other apps’ settings. It is fixed in tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. Affected products are Apple’s mobile and...

CVE-2022-26744

CVE-2022-26744 describes a memory corruption issue in Apple platforms that was addressed via improved state management, fixing a condition where an application could execute arbitrary code with kernel privileges. Affected: iOS 15.5 and iPadOS 15.5 as the fixed versions. Root cause: memory corrupt...

CVE-2022-32802

CVE-2022-32802 is Apple’s vulnerability described as a logic issue that could allow arbitrary code execution when processing a maliciously crafted file. It affects Apple platforms including iOS, iPadOS, tvOS, and macOS Monterey, with the fixed versions listed as iOS 15.6, iPadOS 15.6, tvOS 15.6, ...

CVE-2023-27961

CVE-2023-27961 corresponds to multiple input-validation issues that affect Apple calendar invite handling across macOS, iOS, iPadOS, watchOS, and macOS Big Sur/Monterey/Ventura lineages. The fixed versions are macOS Ventura 13.3; macOS Monterey 12.6.4; macOS Big Sur 11.7.5; iOS/iPadOS 16.4 and 15...

CVE-2023-43000

CVE-2023-43000 is a use-after-free vulnerability in WebKit/Web content processing that can lead to memory corruption. Affected products include Apple's macOS/iOS/iPadOS and Safari/WebKit variants, with fixes shipped in macOS Ventura 13.5, iOS 16.6/iPadOS 16.6, Safari 16.6, and iOS 15.8.7/iPadOS 1...

CVE-2024-27817

CVE-2024-27817 is an Apple vulnerability where an app may execute arbitrary code with kernel privileges due to the issue being addressed with improved checks. Affected platforms include macOS (Ventura 13.6.7; Monterey 12.7.5; Sonoma 14.5), iOS and iPadOS (16.7.8 and 17.5), watchOS not specified, ...

CVE-2025-43343

CVE-2025-43343 involves a memory-handling issue in WebKitGTK/WebKit2GTK where processing malicious web content may crash the process. The initial advisory states the flaw is fixed in Safari 26, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26; Debian/AlmaLinux advisories confirm WebK...

CVE-2026-64781

CVE-2026-64781 is a vulnerability in WebKit , Apple's browser engine, where insufficient input validation allows processing of maliciously crafted web content to cause an unexpected Safari crash . The issue was addressed with improved input validation (WebKit Bugzilla: 321484, reported by Thomas ...

CVE-2011-2834

CVE-2011-2834 is a double-free flaw in libxml2 related to XPath handling. The vulnerability could allow a remote attacker to crash the application or, potentially, execute arbitrary code when processing crafted XML data. Public references in Debian and Red Hat advisories note that this issue affe...

CVE-2016-4767

CVE-2016-4767 affects WebKit used in Apple iOS (pre-10) , tvOS (pre-10) , iTunes (pre-12.5.1 on Windows) , and Safari (pre-10) . The root cause is memory corruption in WebKit that enables a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The availabl...

CVE-2017-13847

CVE-2017-13847 is a memory corruption/privilege escalation issue in Apple’s IOKit affecting iOS <11.2 and macOS

CVE-2017-13869

Affected software/hardware: Apple devices running iOS < 11.2, macOS < 10.13.2, tvOS < 11.2, watchOS

CVE-2017-7018

CVE-2017-7018 affects WebKit in Apple platforms (iOS before 10.3.3, Safari before 10.1.2, tvOS before 10.2.2; iCloud/iTunes on Windows) and can be triggered by processing malicious web content to cause arbitrary code execution or memory corruption leading to a crash. Connected documents indicate ...

CVE-2017-7165

CVE-2017-7165 affects WebKit in Apple products including iOS before 11.2, Safari before 11.0.2, iCloud for Windows, iTunes for Windows, tvOS before 11.2, and watchOS before 4.2. Description: Processing maliciously crafted web content may lead to arbitrary code execution or a denial of service via...

CVE-2019-8898

CVE-2019-8898 describes an information disclosure in WebKit related to the Storage Access API. The issue could allow a malicious site to infer visited sites by a user. Apple fixed this in iOS 13.3/iPadOS 13.3, tvOS 13.3, Safari 13.0.4, and iTunes 12.10.3 for Windows, with patches applied via the ...

CVE-2020-27911

CVE-2020-27911 is a libxml2-related issue addressed by an integer overflow fix via improved input validation. Publicly documented impact indicates potential remote code execution or application termination, but exploitation status is not detailed in the provided materials. Affected platforms incl...

CVE-2020-3910

CVE-2020-3910 is a libxml2 related buffer overflow (root cause: insufficient size validation) that Apple documents as fixed in multiple platforms. Affected products include macOS Catalina 10.15.3/10.15.4, iOS 13.x, iPadOS 13.x, tvOS 13.x, watchOS 6.x, and Apple Windows components (iTunes 12.10.5,...

CVE-2021-1743

CVE-2021-1743 describes an out-of-bounds read that was mitigated by improved bounds checking. The issue is fixed in Apple platforms: macOS Big Sur 11.2; macOS Security Update 2021-001 for Catalina and Mojave; watchOS 7.3; tvOS 14.4; iOS 14.4; and iPadOS 14.4. Affected action: processing a malicio...

CVE-2021-1772

CVE-2021-1772 (Apple OS family) involves a race-condition in the voucher subsystem used to manage user_data attributes. The non-atomic increment of the user_data element’s e_made counter, coupled with an in-flight revocation/redeem path, can create a window where a live user_data_value_element is...

CVE-2021-1875

CVE-2021-1875 involves a double free that can cause heap corruption. According to the provided documents, Apple fixed it via Security Update 2021-002 for Catalina, 2021-003 for Mojave, and corresponding updates on iOS 14.5 / iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The vulnera...

CVE-2021-30725

The CVE-2021-30725 entry concerns a memory corruption issue in Apple software when processing malicious USD files. Affected products include macOS Big Sur (fixed in 11.4) and Security Updates for Catalina (2021-003) and Mojave (2021-004), as well as iOS 14.6 and iPadOS 14.6. The root cause is des...

CVE-2021-30842

CVE-2021-30842 is an Apple FontParser vulnerability where processing a maliciously crafted dfont file could lead to arbitrary code execution. The CVE is addressed by Apple in multiple platform updates, including iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS...

CVE-2021-30896

CVE-2021-30896 is a logic-issue vulnerability in Apple’s Game Center that could allow a malicious app to read a user’s gameplay data. The initial entry states a logic issue addressed with improved restrictions and lists affected platforms as iOS/iPadOS 15.0.x, tvOS 15.x, watchOS 8.x, and macOS Mo...

CVE-2021-30958

CVE-2021-30958 is an out-of-bounds read indicating arbitrary code execution when a malicious audio file is played. Affected products include macOS Big Sur 11.6.2 and Monterey 12.1, tvOS 15.2, iOS 15.2/iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Catalina. Root cause is improved input va...

CVE-2022-32828

CVE-2022-32828 is an Apple memory-handling issue that could allow an app to disclose kernel memory. The vulnerability affects Apple platforms and was addressed in multiple OS updates: iOS/iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5, watchOS 8.7, and related Security Updates. The root cause is des...

CVE-2022-32941

This CVE (CVE-2022-32941) concerns a buffer overflow that could lead to arbitrary code execution. The affected products are Apple systems including iOS/iPadOS and macOS releases, with the issue fixed in: iOS 15.7.1 and iPadOS 15.7.1 , macOS Ventura 13 , iOS 16.1 and iPadOS 16 , macOS Monterey 12....