CVE-2021-1863

CVE-2021-1863 affects Apple iOS/iPadOS with an NFC tag action authentication flaw. The issue could allow a person with physical access to an iOS device to place calls to any number. Apple fixed it in iOS 14.5 / iPadOS 14.5 by improving action authentication. Connected sources corroborate the vuln...

CVE-2021-30781

CVE-2021-30781 concerns Apple devices where a local attacker could cause unexpected application termination or arbitrary code execution due to issues addressed by “improved checks.” The entry notes fixes in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, and...

CVE-2021-30788

CVE-2021-30788 affects Apple platforms and is triggered by processing a maliciously crafted TIFF file.根 The issue leads to denial-of-service or memory disclosure and is mitigated by fixes in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-005 Mojave/2...

CVE-2022-22615

CVE-2022-22615 describes a use-after-free vulnerability that Apple addressed through memory-management fixes. The issue could allow an application to execute arbitrary code with kernel privileges. Affected platforms and fixed versions are: tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5...

CVE-2022-22618

CVE-2022-22618 concerns iOS/iPadOS/watchOS where the Emergency SOS passcode prompt could be bypassed. The Apple advisories attribute the issue to insufficient or inadequate checks, with the fix implemented in watchOS 8.5, iOS 15.4, and iPadOS 15.4. The vulnerability is discussed with references t...

CVE-2022-32841

The CVE-2022-32841 issue is an Apple image-processing memory disclosure vulnerability. According to the sources, it is addressed by Apple with fixes in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6, and is caused by improved memory handling while processing a maliciously crafted imag...

CVE-2022-42843

CVE-2022-42843 is an information-disclosure vulnerability fixed in Apple OS updates. According to the provided documents, applying updates to iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2 mitigates the issue, which allowed a user to view sensitive user information. The ...

CVE-2023-23536

The CVE-2023-23536 issue is an Apple kernel privilege escalation fixed by improved bounds checks. Affected products include macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5, iOS 16.4 and 15.7.4/iPadOS 16.4 and 15.7.4, tvOS 16.4, and watchOS 9.4. It can allow an app to execute arbit...

CVE-2024-23289

CVE-2024-23289 affects Apple devices (iOS, iPadOS, macOS, watchOS) with a lock-screen issue where Siri could reveal private calendar data when physical access is available. Technical details across connected docs show affected versions and fixed releases: iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 an...

CVE-2024-40778

The CVE-2024-40778 issue is an authentication-related flaw fixed by Apple in macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and iOS 16.7.9 / iPadOS 16.7.9. The root cause is described as an authentication issue mitigated by improved state management, with the consequence that Photos in the Hidden Phot...

CVE-2024-54523

CVE-2024-54523 affects Apple OS families (macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, iPadOS 18.2). The issue, described as a memory handling/bounds problem, could allow an app to corrupt coprocessor memory. The publicly documented fix is “improved bounds checks” implemented in the lis...

CVE-2025-31238

The CVE-2025-31238 issue affects Apple Safari and related OS versions: Safari 18.5; iOS 18.5/iPadOS 18.5; macOS Sequoia 15.5; tvOS 18.5; visionOS 2.5; watchOS 11.5. The vulnerability arises from processing maliciously crafted web content, leading to memory corruption. The fix is described as an i...

CVE-2025-43211

CVE-2025-43211 is corroborated across multiple advisories (Debian DSA-5978-1, DEBIAN:DSA-5978-1, Fedora package advisories, AlmaLinux ALSA notes) as a WebKitGTK/webkit2gtk vulnerability where processing web content may lead to a denial-of-service. Connected documents identify the affected compone...

CVE-2026-39868

CVE-2026-39868 affects Apple platforms (macOS Tahoe, iOS, iPadOS) and centers on a risk from improper input validation in the kernel pathway that could allow an app to cause an unexpected system termination or kernel memory corruption. The vulnerability is addressed in macOS Tahoe 26.5.2 and iOS/...

CVE-2026-43731

The CVE-2026-43731 entry documents a use-after-free vulnerability in components used by WebKit/Web content handling that could allow memory corruption. Affected products include Safari, iOS, iPadOS, and macOS Tahoe, with the fix applied in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe...

CVE-2016-4759

CVE-2016-4759 affects WebKit in Apple iOS prior to 10, tvOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) through a crafted web site. It is described as a...

CVE-2017-13784

CVE-2017-13784 affects Apple WebKit in multiple products (iOS <11.1, Safari <11.0.1, iCloud for Windows <7.1, iTunes for Windows <12.7.1, tvOS

CVE-2017-2476

CVE-2017-2476 affects WebKit in Apple products (iOS pre-10.3, Safari pre-10.1, tvOS pre-10.2). Root cause: type confusion in WebKit; exploit via crafted web content can trigger remote code execution, memory corruption, or application crash. Remediation: update to patched versions per Apple adviso...

CVE-2018-4225

CVE-2018-4225 affects multiple Apple platforms including iOS before 11.4, macOS before 10.13.5, iCloud for Windows before 7.5, iTunes for Windows before 12.7.5, and watchOS before 4.3.1. The issue, in the Security/Keychain component, allows a local user to bypass restrictions on Keychain state mo...

CVE-2019-6207

CVE-2019-6207 is an out-of-bounds read in kernel memory handling that could let a malicious app determine kernel memory layout. Apple fixes: iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, via/improved input validation. Public documentation shows affected components (Kernel and related su...

CVE-2019-6218

CVE-2019-6218 is an Apple Kernel memory corruption vulnerability that could allow a malicious, local app to execute arbitrary code with kernel privileges. Apple documentation confirms the issue and its remediation: it was fixed in iOS 12.1.3, macOS Mojave 10.14.3, and tvOS 12.1.2. Public referenc...

CVE-2019-8528

CVE-2019-8528 describes a use-after-free vulnerability in Apple's kernel code that could allow an attacker to execute arbitrary code with kernel privileges. The initial entry notes the issue is fixed in watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 for High Sierra and Sierra, and iO...

CVE-2019-8600

CVE-2019-8600 concerns memory corruption in Apple platforms (iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12) triggered by a maliciously crafted SQL query, leading to arbitrary code execution. Connected Apple advisories indicate the fix...

CVE-2019-8628

CVE-2019-8628 describes memory corruption issues in WebKit affecting Apple platforms. The vulnerability could allow arbitrary code execution when processing malicious web content. It is addressed by memory-handling improvements and patches across multiple products: iOS 12.3, macOS Mojave 10.14.5,...

CVE-2019-8752

CVE-2019-8752 is a memory corruption issue in WebKit that affects Safari and related Apple platforms (Safari/WebKit stack handling malicious web content). The root cause is memory corruption in WebKit components, with the published impact: arbitrary code execution if a user visits a maliciously c...

CVE-2019-8773

CVE-2019-8773 describes memory corruption issues in WebKit affecting how malicious web content is processed across Apple platforms. The root cause is multiple memory corruption vulnerabilities in WebKit, addressed by improved memory handling. Impact: processing maliciously crafted web content may...

CVE-2020-27912

CVE-2020-27912: A memory-unsafe out-of-bounds write in ImageIO when processing a maliciously crafted image could lead to arbitrary code execution. Public details in the Apple advisory HT211931/HT211929 indicate the issue affected macOS Big Sur (fixed in 11.0.1) and related iOS/watchOS/iPadOS upda...

CVE-2020-9816

CVE-2020-9816 is an out-of-bounds write in FontParser that could cause termination or arbitrary code execution when parsing a malicious PDF. The issue affects Apple platforms and was addressed in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. Apple describes the pat...

CVE-2021-30691

CVE-2021-30691 is an information-disclosure issue fixed by Apple in macOS Big Sur 11.4 and corresponding Security Updates ( Catalina 11.4- 2021-003, Mojave 11.4- 2021-004 ) and iOS/iPadOS 14.6. The vulnerability arises when processing a maliciously crafted USD file, which may disclose memory cont...

CVE-2021-30748

CVE-2021-30748 is a memory corruption vulnerability in Apple platforms that could allow arbitrary code execution with kernel privileges. The issue is addressed in iOS 14.7 and macOS Big Sur 11.5. Documentation consistently attributes the root cause to memory corruption with improved state managem...

CVE-2021-30760

CVE-2021-30760 describes an integer overflow in Apple’s font processing that could allow arbitrary code execution when handling a malicious font file. The issue is mitigated by input validation improvements and is fixed in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Secur...

CVE-2023-23543

CVE-2023-23543 affects Apple platforms (macOS Ventura 13.3; iOS 15.7.4/iPadOS 15.7.4; iOS 16.4/iPadOS 16.4; watchOS 9.4). A sandboxed app may be able to determine which other app is currently using the camera due to restricted observability of app states. Root cause: privacy-related observability...

CVE-2023-27931

CVE-2023-27931 affects Apple OS family components where an app may access user-sensitive data. The issue was mitigated by removing the vulnerable code and is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, macOS Big Sur 11.7.3, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Connected sour...

CVE-2023-40427

CVE-2023-40427 affects Apple platforms (macOS, iOS/iPadOS, tvOS, watchOS) where an issue in cache handling allowed an app to read sensitive location information. The root cause is described as improved handling of caches, with fixes applied in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma...

CVE-2023-41073

CVE-2023-41073 describes an authorization issue resolved by improved state management. Affected platforms include macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS 16.7 and 17, iPadOS 16.7 and 17, tvOS 17, and watchOS 10. The vulnerability could allow an app to access protected user d...

CVE-2023-42962

CVE-2023-42962 is a denial-of-service issue affecting Apple iOS/iPadOS involving the CallKit component. Public sources indicate the vulnerability can be triggered remotely (no user interaction) and is fixed in iOS 17.2/iPadOS 17.2 and in iOS 16.7.3/iPadOS 16.7.3. Practical impact is DoS; no explo...

CVE-2024-23207

CVE-2024-23207 affects Apple platforms and is associated with an issue where an app may access sensitive user data due to improved redaction of sensitive information. Remediation is provided by updates: watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, and macOS Mon...

CVE-2024-27836

CVE-2024-27836 affects Apple’s ImageIO component in Apple Vision Pro stack, with the issue described as: processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions include visionOS 1.2, macOS Sonoma 14.5, iOS 17.5, and iPadOS 17.5. The Apple security c...

CVE-2024-44204

CVE-2024-44204 affects Apple iOS/iPadOS Passwords: a logic issue addressed by improved validation that could allow a user’s saved passwords to be read aloud by VoiceOver. Affected products include iPhone XS and later, iPad Pro models, iPad Air, iPad mini, and iPad versions compatible with iOS 18....

CVE-2025-24167

CVE-2025-24167 affects Safari and related Apple platforms. The issue stems from incorrect association of a download’s origin due to state-management problems. It is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The CVSS 3.1 vector indicates network access, no user interacti...

CVE-2025-30463

The CVE-2025-30463 entry concerns Apple platforms (iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). It describes an issue where an app may access sensitive user data, mitigated by an improved restriction of data container access. The vulnerability is addressed in the published security content for the...

CVE-2011-3046

CVE-2011-3046 affects Google Chrome’s extension subsystem prior to 17.0.963.78, where history navigation handling enables a Universal XSS (UXSS) that could allow remote code execution. Connected sources corroborate the vulnerability in Chrome/Chromium (UXSS and bad history navigation) and note pa...

CVE-2017-13867

CVE-2017-13867 is linked to memory corruption in the Apple Kernel across iOS <11.2, macOS <10.13.2, tvOS <11.2, and watchOS

CVE-2017-13904

CVE-2017-13904 affects Apple devices (iOS <11.2, macOS <10.13.2, tvOS <11.2, watchOS

CVE-2017-2479

CVE-2017-2479 affects Apple's WebKit stack across several OSes (iOS, Safari, iCloud/Windows, iTunes/Windows, tvOS). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. The connected Apple security entries indicate remediation...

CVE-2017-7046

CVE-2017-7046 affects WebKit components in Apple products (iOS, Safari, tvOS, iCloud/iTunes on Windows). The issue is described as memory corruption that can be triggered by processing crafted web content, leading to remote arbitrary code execution or a crash. The Apple advisories confirm affecte...

CVE-2017-7052

CVE-2017-7052 affects Apple’s WebKit-based stack across multiple Apple platforms: iOS <10.3.3, Safari <10.1.2, iCloud on Windows <6.2.2, iTunes on Windows <12.6.2, and tvOS

CVE-2017-7153

CVE-2017-7153 affects WebKit in multiple Apple platforms. The issue allows a crafted website to spoof UI by sending a 401 Unauthorized redirect, potentially deceiving users about TLS session validity. Affected products/versions include iOS prior to 11.2, Safari prior to 11.0.2, iCloud on Windows ...

CVE-2019-6221

CVE-2019-6221 affects Apple Core Media (and is referenced in iTunes 12.9.3 for Windows) as an out-of-bounds read vulnerability that could allow a malicious app to elevate privileges. Apple advisories indicate fixes in iOS 12.1.3, macOS Mojave 10.14.3, and iTunes 12.9.3 for Windows through improve...

CVE-2019-8560

CVE-2019-8560 affects Apple Disk Images: an out-of-bounds read could allow a malicious app to read restricted memory. Affected platforms include iOS 12.3+, macOS Mojave 10.14.5+, tvOS 12.3, and watchOS 5.2.1. Fixes are implemented via improved bounds checking and memory handling in the listed upd...