CVE-2022-42855

CVE-2022-42855 concerns a logic/entitlements parsing issue in Apple’s DER-entitlements handling. The root cause, as discussed by Project Zero, is in libCoreEntitlements’ DER traversal: three paths handled entitlement sequences differently, causing hidden/unused entitlements to surface under CECon...

CVE-2022-42866

CVE-2022-42866 affects Apple platforms and is tied to improved handling of caches that could allow an app to read sensitive location information. The NVD entry notes fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2. The accompanying Apple security content lists affec...

CVE-2022-46695

Technical details about CVE-2022-46695 are not publicly provided in the connected documents. Available sources only reiterate that a UI spoofing issue was fixed in specific Apple OS versions. Monitor for updates.

CVE-2023-23504

CVE-2023-23504 is an Apple vulnerability where a memory-handling issue could allow an app to execute arbitrary code with kernel privileges. The fixed versions include macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3, iPadOS 15.7.3, tvOS 16.3, iOS 16.3, and iPadOS 16.3. Sources c...

CVE-2023-32357

CVE-2023-32357 is an authorization issue affecting Apple platforms. The root cause is improved state management that prevents proper revocation of access, allowing an app to retain access to system configuration files after permissions are revoked. Affected products include watchOS, tvOS, and var...

CVE-2023-32391

CVE-2023-32391 affects Apple Shortcuts on multiple Apple platforms. The issue allowed a shortcut to access sensitive data via certain actions without user prompts. It is fixed in iOS 15.7.6/iPadOS 15.7.6, watchOS 9.5, iOS 16.5/iPadOS 16.5, and macOS Ventura 13.4. No exploitation details are provi...

CVE-2023-38136

CVE-2023-38136 affects Apple platforms (iOS, iPadOS, watchOS) and is tied to memory handling issues that could allow an app to execute arbitrary code with kernel privileges. Affected entries in public advisories specify that the fix is included in iOS 16.6, iPadOS 16.6, and watchOS 9.6. Practical...

CVE-2026-65332

CVE-2026-65332 is a state management vulnerability in WebKit , the browser engine powering Safari . Processing maliciously crafted web content can lead to an unexpected Safari crash (denial of service). The issue was reported by OpenAI Codex Security (Amy Burnett) and tracked under WebKit Bugzill...

CVE-2016-4623

Technical details for CVE-2016-4623 are not provided in the connected documents; monitor for updates.

CVE-2017-7047

CVE-2017-7047 affects Apple platforms (iOS <10.3.3, macOS <10.12.6, tvOS <10.2.2, watchOS

CVE-2017-7162

CVE-2017-7162 is an IOKit memory-corruption vulnerability affecting Apple devices (iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, watchOS before 4.2) that could allow a crafted app to execute arbitrary code with kernel/privileged privileges or cause a denial of service. The Apple securi...

CVE-2019-6208

CVE-2019-6208 involves a memory initialization issue in Apple platforms. Apple fixed it in iOS 12.1.3, macOS Mojave 10.14.3, and tvOS 12.1.2, addressing memory corruption risks where a malicious or misbehaving sandboxed process could cause unexpected changes in memory shared between processes. Th...

CVE-2019-6209

CVE-2019-6209 is an Apple kernel vulnerability affecting iOS, macOS, tvOS, and watchOS where an out-of-bounds read could disclose kernel memory layout. Root cause: insufficient input validation leading to a memory disclosure. Impact: a malicious application may determine kernel memory layout. Rem...

CVE-2019-6214

CVE-2019-6214 is a type confusion issue in IOKit that can allow a sandboxed process to escape sandbox restrictions. The root cause is memory handling/initialization related to type handling in IOKit. Fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3, per Apple security upd...

CVE-2019-8613

CVE-2019-8613 is a use-after-free in the iOS Mail Message Framework (IMAP/NAMESPACE handling) that can lead to arbitrary code execution. It was fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1. The vulnerability arises during deserialization/processing of IMAP namespace data, creating memory corru...

CVE-2019-8746

CVE-2019-8746 is an out-of-bounds read vulnerability that Apple documents as addressed by improved input validation. The CVE affects multiple Apple platforms in the 2019 timeframe, with specific fixes noted for macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud for Windows 7.14/...

CVE-2019-8825

CVE-2019-8825 is a memory corruption vulnerability in Apple's CoreMedia framework, triggered while processing malicious web content. Public documentation across Apple security pages (HT210634) and Red Hat's CVE entry confirms the issue can lead to arbitrary code execution and memory corruption. A...

CVE-2019-8829

CVE-2019-8829 is a memory corruption vulnerability that Apple addressed by improved locking. The advisory notes that an attacker may cause arbitrary code execution with kernel privileges. Affected products include macOS Catalina 10.15.1 and Security Update 2019-001/2019-006, watchOS 6.1, tvOS 13....

CVE-2019-8832

CVE-2019-8832 is a memory corruption vulnerability in Apple platforms. The issue could allow an application to execute arbitrary code with system privileges. It affects multiple Apple operating systems, with fixes in iOS 13.3, iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 20...

CVE-2020-29619

CVE-2020-29619 is an out-of-bounds read vulnerability in ImageIO that was fixed by Apple in multiple 2020-2021 updates. The issue, triggered by processing a maliciously crafted image, is described as leading to heap corruption. Affected products include tvOS 14.3; macOS Big Sur 11.1; Security Upd...

CVE-2020-3838

CVE-2020-3838 affects Apple platforms with a local-privilege escalation via improved permissions logic. The issue allows an application to execute arbitrary code with system/kernel privileges. Fixed in iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. Connected doc...

CVE-2020-9875

CVE-2020-9875 concerns an integer overflow that was addressed by improving input validation. The published details indicate the issue affects Apple’s ImageIO (and related image-processing paths) across macOS/iOS/watchOS/tvOS platforms and associated Windows/iCloud components. The vulnerability co...

CVE-2020-9966

CVE-2020-9966 is an out-of-bounds read issue that Apple fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0, and iPadOS 14.0. The underlying vulnerability stemmed from improper input validation, and Apple notes that an application may be able to execute arbitrary code with kernel priv...

CVE-2020-9981

CVE-2020-9981 is a use-after-free vulnerability in Apple platforms, with specifics shown across connected docs: Apple’s watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, macOS Catalina 10.15.7, and related security updates address the issue by improving memory management. The vulnerability is descr...

CVE-2021-1767

CVE-2021-1767 : Apple fixed this issue in macOS Big Sur 11.2, macOS Security Updates for Catalina/Mojave, and iOS/iPadOS 14.4. The vulnerability allowed processing a maliciously crafted image to cause heap corruption, with an affected component implied to relate to image handling in macOS/iOS, pe...

CVE-2021-1795

CVE-2021-1795 is a Bluetooth-related out-of-bounds write in iOS/iPadOS components, addressed by Apple in iOS 14.4 and iPadOS 14.4 via improved input validation. Attack vector is remote over Bluetooth; impact described as potential arbitrary code execution. The Apple HT212146 security content conf...

CVE-2021-1808

CVE-2021-1808 is a memory corruption issue in Apple platforms that could allow an application to read restricted memory. The authenticated root cause is improved validation that fixes a vulnerability in specific system updates. Affected software includes macOS (Catalina 2021-002, Mojave 2021-003)...

CVE-2021-30659

CVE-2021-30659 affects Apple platforms (iOS 14.5, iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3). A validation issue was addressed with improved logic, reducing the risk that a malicious application could leak sensitive user information. The fix is included in the listed OS updates (iOS 14.5/iPadO...

CVE-2021-30692

CVE-2021-30692 describes an information-disclosure vulnerability in Apple platforms triggered by processing a maliciousUSD file, due to improved state management. The issue affects macOS releases, specifically macOS Big Sur 11.4 and Security Updates for Catalina 2021-003 and Mojave 2021-004, as w...

CVE-2021-30773

CVE-2021-30773 describes a code-signature validation issue in Apple Identity Services that could allow a malicious application to bypass code signing checks. Affected products include iOS, iPadOS, tvOS, and watchOS; root cause is improved validation checks in the code-signing path. Impact is limi...

CVE-2021-30791

CVE-2021-30791 is an Apple vulnerability described as an out-of-bounds read that was addressed by improved bounds checking. The NVD entry notes the issue is fixed in iOS 14.7 and macOS Big Sur 11.5, with processing a maliciously crafted file potentially disclosing user information. Connected sour...

CVE-2021-30927

CVE-2021-30927 is a use-after-free memory vulnerability in Apple platforms that is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, and watchOS 8.3. The issue may allow an application to execute arbitrary code with kernel ...

CVE-2022-32785

CVE-2022-32785 describes a null pointer dereference in Apple’s image processing flow. Public sources (NVD/NASL/PRION references) state this issue is fixed by macOS Monterey 12.5, macOS Big Sur 11.6.8, macOS Security Update 2022-005 Catalina, and iOS 15.6/iPadOS 15.6. The root cause is a null poin...

CVE-2022-32833

CVE-2022-32833 describes an issue with the file paths used to store website data on Apple iOS. The root cause is an insecure handling of website data paths, which could allow an unauthenticated user to access browsing history. The vulnerability is mitigated by Apple’s fix in iOS 16. Connected sou...

CVE-2022-32860

CVE-2022-32860 is a local kernel‑level vulnerability described as an out‑of‑bounds write caused by improved input validation. Root cause: a faulty input path allows arbitrary code execution with kernel privileges. Affected platforms/versions per the sources: iOS 15.6, iPadOS 15.6, macOS Monterey ...

CVE-2023-23526

CVE-2023-23526 involves Gatekeeper bypass via a file downloaded from an iCloud Shared by Me folder. The issue arises from insufficient checks in Gatekeeper, allowing a file from that folder to bypass the gatekeeping checks. Apple fixed this by addressing the vulnerability with additional checks, ...

CVE-2023-27970

CVE-2023-27970 refers to an out-of-bounds write in Apple software that could allow an app to execute arbitrary code with kernel privileges. The available connected data specifies the vulnerability as fixed in iOS 16.4 and iPadOS 16.4, with Apple stating that improved bounds checking addresses the...

CVE-2023-40417

CVE-2023-40417 affects Safari/WebKit window management when visiting framed content, enabling potential UI spoofing. Root cause: improved state management fixes a window-management issue. Impact per sources: UI spoofing risk if a website frames malicious content. Affected products/versions: Safar...

CVE-2023-41232

CVE-2023-41232 affects Apple platforms (macOS and iOS/iPadOS). It is an out-of-bounds read vulnerability fixed by improved bounds checking. Affected: macOS Monterey 12.7; macOS Ventura 13.6; iOS/iPadOS 16.7 and 17. An app may disclose kernel memory via a local vulnerability. Remediation: apply up...

CVE-2024-27876

CVE-2024-27876 describes a race condition in Apple’s archive unpacking that could allow writing arbitrary files when a malicious archive is unpacked. The issue is addressed by improved locking and is fixed in: macOS Ventura 13.7; macOS Sonoma 14.7; macOS Sequoia 15; iOS 17.7 and iPadOS 17.7; iOS ...

CVE-2025-24117

CVE-2025-24117 affects Apple platforms via LaunchServices, enabling an app to fingerprint the user. The issue is tied to improved redaction of sensitive information and is fixed in Apple updates: iPadOS 17.7.4, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, and watchOS 11.3. The publ...

CVE-2016-4734

CVE-2016-4734 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The connected Nessus entries describe the vulnerable component as WebKit and state that exploitation via a crafted web site can lead to remote code execution or memory corruption resulting in a denial of se...

CVE-2017-7152

CVE-2017-7152 affects the Mail Message Framework in iOS 11.2 and earlier. Root cause: an inconsistent UI state allowed address bar spoofing when visiting a malicious site. Impact: an attacker could spoof the address bar. Remediation: Apple released a fix with iOS 11.2 (described in Apple security...

CVE-2019-6205

CVE-2019-6205 is a local kernel memory corruption issue in Apple platforms where memory shared between processes could be unexpectedly modified due to insufficient lock state checking in the kernel vm_map handling. Affected products include iOS, macOS, and tvOS. Impact stated as memory corruption...

CVE-2020-3909

CVE-2020-3909 is a buffer overflow in libxml2 described across Apple advisories as part of multiple libxml2 issues remediated in Apple OS updates. Public details confirm affected platforms include macOS High Sierra 10.13.6, macOS Mojave 10.14.6, and macOS Catalina 10.15.3, with Apple stating fixe...

CVE-2020-9956

CVE-2020-9956 is an out-of-bounds/memory handling issue affecting Apple font parsing components (FontParser/CoreText) where processing a maliciously crafted font file could lead to arbitrary code execution. The vulnerability is addressed in Apple security updates for macOS Big Sur 11.0.1, macOS B...

CVE-2021-1750

CVE-2021-1750 affects Apple OS updates: macOS Big Sur 11.2, macOS Catalina 10.15.x (Security Update 2021-001), macOS Mojave 10.14.x (Security Update 2021-001), watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. Root cause described as a logic issue in the kernel that may allow an application to e...

CVE-2021-1758

CVE-2021-1758 is described in the public records as an out-of-bounds read that was addressed with improved bounds checking. It is fixed in macOS Big Sur 11.2, macOS Security Update 2021-001 Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. The issue could allow a remote attac...

CVE-2021-1760

CVE-2021-1760 is a memory-corruption issue in Apple software that Apple fixed with macOS Big Sur 11.2 and Security Update 2021-001 Catalina/Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. The description attributes the vulnerability to memory corruption and notes that a malicious appli...

CVE-2021-1863

CVE-2021-1863 affects Apple iOS/iPadOS with an NFC tag action authentication flaw. The issue could allow a person with physical access to an iOS device to place calls to any number. Apple fixed it in iOS 14.5 / iPadOS 14.5 by improving action authentication. Connected sources corroborate the vuln...