CVE-2022-42859

CVE-2022-42859 concerns Apple platforms. According to Apple and related security notes, multiple issues were addressed by removing the vulnerable code, and the fix is shipped in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, and watchOS 9.2. The underlying effect is that an app may be able to bypass ...

CVE-2023-23525

CVE-2023-23525 is an Apple vulnerability describing a local privilege-escalation where an app may gain root privileges. Public records indicate fixes in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, and macOS Big Sur 11.7.5. The provided documents list these OS versions as the affected and patched t...

CVE-2023-23527

CVE-2023-23527 is an Apple OS vulnerability addressed by updates across multiple platforms. The issue allows a user to gain access to protected parts of the file system and is mitigated by patches in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4...

CVE-2023-28181

CVE-2023-28181 affects Apple platforms (notably CoreCapture and Kernel-related components) with a memory handling flaw that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in macOS Ventura 13.3, iOS 16.4 / iPadOS 16.4, iOS 15.7.6 / iPadOS 15.7.6, macOS Mont...

CVE-2026-43795

A WebKit memory-handling flaw (CVE-2026-43795) causes Safari crashes when processing malicious web content. CVSS 4.3 (Medium). Patched in Safari 26.6.1, iOS/iPadOS 18.7.10 & 26.6.1, macOS Tahoe 26.6.2. No known exploitation; CISA assesses partial technical impact.

CVE-2010-2807

CVE-2010-2807 affects FreeType up to version 2.4.2, where improper integer bounds checking in the font processing code can lead to a crash or potentially arbitrary code execution via a crafted font file. Connected advisories reference the 2.4.2 release as the fix. Remediation: upgrade to FreeType...

CVE-2017-7006

CVE-2017-7006 affects Apple WebKit components used in iOS, Safari, and tvOS prior to patches (iOS 10.3.3, Safari 10.1.2, tvOS 10.2.2). The issue is a timing side-channel vulnerability that allows a remote attacker to bypass the Same Origin Policy and exfiltrate cross-origin data via a crafted web...

CVE-2017-7034

CVE-2017-7034 concerns WebKit/WebKitGTK+ components used in Apple platforms and WebKitGTK+ on Linux. The issue is described as memory corruption during processing of maliciously crafted web content, enabling arbitrary code execution on affected systems and potentially memory corruption leading to...

CVE-2018-4214

CVE-2018-4214 concerns a memory corruption issue in WebKit used by Apple platforms. The vulnerability affects Apple products where WebKit handles crafted web content, notably iOS before 11.4 and Safari before 11.1.1, as well as iCloud/iTunes/watchOS/tvOS variants listed in Apple advisories. The d...

CVE-2019-8554

CVE-2019-8554 describes a permissions issue in the handling of motion and orientation data that could allow a website to access sensor information without user consent. The issue is addressed with restrictions and is fixed in iOS 12.2. Related entries indicate this vulnerability affects Safari’s ...

CVE-2019-8706

CVE-2019-8706 is a memory corruption issue in Apple’s audio stack (CoreAudio) that is triggered by processing a maliciously crafted audio file. Root cause: memory corruption in the audio processing path. Affected: macOS/macOS Catalina, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6; fixes implement...

CVE-2019-8741

CVE-2019-8741 is a denial-of-service issue tied to a CoreCrypto input-validation vulnerability. Public document sets describe the root cause as an input-validation deficiency leading to DoS, affecting multiple Apple platforms (macOS Catalina 10.15, iOS 13, watchOS 6, tvOS, and Apple TV 4K/HD). Pa...

CVE-2019-8751

Summary of CVE-2019-8751 (Apple WebKit/WebKit-Engine) : This CVE corresponds to memory corruption vulnerabilities in WebKit that could be triggered by processing malicious web content, potentially allowing arbitrary code execution. Apple’s security content ties CVE-2019-8751 to Safari/WebKit comp...

CVE-2019-8784

CVE-2019-8784 is a memory corruption vulnerability affecting WebKit-related components in Apple software. The public records show that an application could potentially execute arbitrary code with system privileges due to memory handling issues in WebKit used by Apple’s iCloud for Windows (7.15 an...

CVE-2019-8850

CVE-2019-8850 describes an out-of-bounds read in an audio processing component. Root cause: improper input validation leading to memory disclosure when processing a maliciously crafted audio file. Affected products include Apple platforms: macOS Catalina 10.15 (and 10.15.1), iOS 13.1 / iPadOS 13....

CVE-2020-9783

CVE-2020-9783 is confirmed with concrete details in connected documents: a use-after-free vulnerability in WebKit-related processing of malicious web content that can lead to code execution. Apple states this was addressed with memory-management improvements and lists affected products/versions: ...

CVE-2021-1747

CVE-2021-1747 is an Apple macOS/iOS/tvOS/watchOS vulnerability describing an out-of-bounds write mitigated by improved input validation. Affected products include macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; iOS 14.4 / iPadOS 14.4; watchOS 7.3; tvOS 14.4. Impact: processing m...

CVE-2021-1849

CVE-2021-1849 concerns an issue in code signature validation that allowed bypassing Privacy preferences. It affects Apple platforms and was fixed in macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The vulnerability’s root cause is described as insufficient checks in code sig...

CVE-2021-1883

CVE-2021-1883 is a heap corruption issue in the Heimdal component triggered while processing maliciously crafted server messages. Apple’s security content (HT212531) shows it being fixed in macOS Mojave via Security Update 2021-004, with related fixes listed for other macOS versions (e.g., Catali...

CVE-2021-30660

This CVE is a true issue: an out-of-bounds read vulnerability in Apple platforms. Root cause: insufficient bounds checking allowed reading beyond allocated kernel memory. Affected products/versions: macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5. Impact: potential disclosure of ...

CVE-2021-30831

CVE-2021-30831 concerns Apple’s FontParser, where processing a maliciously crafted font could cause an out-of-bounds read leading to disclosure of process memory. The connected Apple Watch content explicitly ties this CVE to FontParser and notes the underlying issue as an out-of-bounds read addre...

CVE-2021-30918

CVE-2021-30918 affects Apple iOS/iPadOS lock screen: a flaw in lock-screen state management could allow viewing restricted content. Apple fixed it in iOS 14.8.1/iPadOS 14.8.1 and iOS 15.0.1/iPadOS 15.0.1. The NVD notes a low-severity impact with local access and no authentication required for exp...

CVE-2021-30995

CVE-2021-30995 is a race-condition vulnerability in Apple platforms. The issue concerns improved state handling that could allow a malicious application to elevate privileges. Publicly listed fixes include macOS Big Sur 11.6.2; macOS Monterey 12.1; tvOS 15.2; Security Update 2021-008 Catalina; iO...

CVE-2022-32946

CVE-2022-32946 affects iOS and iPadOS where an entitlement-related issue could allow an app to record audio via connected AirPods. The vulnerability is described as a local issue with low attack complexity and requires user interaction; its impact is possible audio recording without explicit micr...

CVE-2022-42845

CVE-2022-42845 is an Apple-related vulnerability addressed by memory-management improvements. The CVE affects multiple Apple OSes and devices (tvOS, macOS Monterey Big Sur Ventura, iOS/iPadOS, watchOS) and is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS...

CVE-2022-46696

The CVE-2022-46696 entry describes a memory corruption vulnerability caused by insufficient input validation in web content processing. It affects Apple platforms where the issue is fixed: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. Successful exploitation ...

CVE-2023-41984

CVE-2023-41984 is a kernel-level code-execution issue addressed by Apple through improved memory handling. The vulnerability is fixed in multiple Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS 16.7/17, iPadOS 16.7/17, tvOS 17, and watchOS 10. The description indica...

CVE-2024-23201

CVE-2024-23201 is an Apple macOS/iOS vulnerability described as a permissions issue that, if exploited by an app, could cause a denial-of-service. The issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3, and iPadOS 17.3. Related docu...

CVE-2024-23264

CVE-2024-23264 describes a validation issue addressed by improved input sanitization. Affected software includes macOS versions (Monterey 12.7.4; Ventura 13.6.5; Sonoma 14.4), visionOS 1.1, iOS 17.4 and iPadOS 17.4, and older iOS/iPadOS 16.7.6, as well as tvOS 17.4. The issue may allow an applica...

CVE-2024-23288

CVE-2024-23288 affects Apple platforms and is fixed by removing the vulnerable code in tvOS 17.4, iOS 17.4 / iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4. The issue could allow an app to elevate privileges. The connected documents confirm the remediation versions and the privilege-elevation i...

CVE-2024-27832

CVE-2024-27832 (Disk Images) affects Apple platforms. The issue allowed an app to elevate privileges and was addressed with improved checks. Fixes are in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Exploitation details are not provided in the available ...

CVE-2024-40815

CVE-2024-40815 describes a race condition addressed by added validation. Apple states the issue is fixed in macOS Ventura 13.6.8, macOS Sonoma 14.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, and tvOS 17.6. A malicious attacker with arbitrary read/write access could potentially bypass Pointer Authentica...

CVE-2026-43721

CVE-2026-43721 : A clipboard data hijack vulnerability addressed by Apple through improved state management. Remediated in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. No exploitation details are provided in the supplied documents. Users should apply the indicated updates to...

CVE-2026-65337

WebKit in Safari, iOS/iPadOS, and macOS Tahoe had a state management flaw exploitable by malicious web content, causing an unexpected Safari crash. CVSS 4.3 (Medium) reflects network access with user interaction required and low availability impact. No in-the-wild exploitation is reported. Fixes ...

CVE-2009-2816

Technical details for CVE-2009-2816 are not provided in the connected documents. The materials mention WebKit/CORS context and related products, but no concrete exploit specifics, impacted versions, or fixes are included. Monitor for updates.

CVE-2010-2806

CVE-2010-2806 affects FreeType before 2.4.2 due to an array index error in t42_parse_sfnts (type42/t42parse.c). Exploitation could crash the application or possibly enable arbitrary code execution via negative size values in FontType42 font files, resulting in a heap-based buffer overflow. The Co...

CVE-2010-2808

CVE-2010-2808 : A buffer overflow in FreeType’s Mac_Read_POST_Resource (base/ftobjs.c) on vulnerable builds prior to 2.4.2 allows remote attackers to crash the application due to memory corruption and may permit arbitrary code execution via a crafted Adobe Type 1 Mac Font File (LWFN). Impact is a...

CVE-2011-3919

CVE-2011-3919 is a heap-based buffer overflow in libxml2 used by Chrome up to v16.0.912.75. The flaw occurs when decoding entity references with long names, potentially crashing the application or allowing arbitrary code execution. Public advisories across multiple vendors (Red Hat/CentOS RHSA-20...

CVE-2014-8130

CVE-2014-8130 affects LibTIFF 4.0.3 (tif_unix.c). The _TIFFmalloc function does not reject a zero size, enabling a crafted TIFF image to trigger a divide-by-zero in TIFFWriteScanline/tif_write.c and cause a remote denial of service (crash). Public documentation also shows broader libTIFF advisori...

CVE-2017-13868

CVE-2017-13868 affects Apple’s kernels across iOS, macOS, tvOS, and watchOS: memory-read restrictions bypassed by a crafted app via the Kernel component. Reported in iOS < 11.2, macOS < 10.13.2, tvOS < 11.2, and watchOS

CVE-2017-7039

CVE-2017-7039 is a WebKit vulnerability affecting Apple WebKit-based products (iOS Safari, macOS Safari, tvOS, etc.). The issue arises from memory corruption in WebKit when processing maliciously crafted web content, allowing a remote attacker to execute arbitrary code or cause a memory corruptio...

CVE-2020-3846

CVE-2020-3846 is a buffer overflow vulnerability described as being mitigated by improved size validation. Public details in the provided documents indicate Apple platforms are affected, including iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows...

CVE-2020-9877

CVE-2020-9877 concerns an out-of-bounds read that was addressed in Apple’s security updates. According to the vendor-supplied details, processing a maliciously crafted image could lead to arbitrary code execution. The fixed versions across affected platforms include iOS 13.6 and iPadOS 13.6, macO...

CVE-2021-1746

CVE-2021-1746 affects Apple platforms (macOS Big Sur 11.2, Catalina 11.x/Pro, Mojave, watchOS, tvOS, iOS/iPadOS 14.4) where a maliciously crafted image could lead to arbitrary code execution. The issue is resolved via Apple security updates listed in the sources (e.g., HT212149/HT212147/HT212146/...

CVE-2021-1757

CVE-2021-1757 is an out-of-bounds read vulnerability addressed with improved bounds checking. It affects Apple OS components and is fixed in macOS Big Sur 11.2, Catalina 11.1 security updates (Security Update 2021-001 for Catalina), Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A loca...

CVE-2021-1813

CVE-2021-1813 is a local privilege-escalation vulnerability in Apple software addressed by the 2021-002/2021-003 security updates for Catalina/Mojave and iOS 14.5/iPadOS 14.5 (and related watchOS/tvOS/macOS Big Sur 11.3). Connected sources describe it as a validation issue fixed by improved logic...

CVE-2021-1881

CVE-2021-1881 describes an out-of-bounds read caused by insufficient input validation when processing a font file. The issue is fixed in Apple Security Updates: 2021-002 Catalina, 2021-003 Mojave, and in iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. Impact is described as ...

CVE-2022-32810

CVE-2022-32810 is an Apple kernel/memory-management issue addressed by Apple in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. The description states that an app may be able to execute arbitrary code with kernel privileges due to improved memory handling. The connected documents corr...

CVE-2022-42808

CVE-2022-42808 is an out-of-bounds write in Apple's kernel that could allow a remote attacker to achieve kernel code execution. Affected products include tvOS, iOS, iPadOS, macOS Ventura, and watchOS, with fixed versions: tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vuln...

CVE-2022-42855

CVE-2022-42855 concerns a logic/entitlements parsing issue in Apple’s DER-entitlements handling. The root cause, as discussed by Project Zero, is in libCoreEntitlements’ DER traversal: three paths handled entitlement sequences differently, causing hidden/unused entitlements to surface under CECon...