CVE-2021-1783

CVE-2021-1783 is an Apple ImageIO-related vulnerability affecting macOS Big Sur 11.2 and prior macOS versions with corresponding Security Updates (Catalina 11.2, Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4, iPadOS 14.4). The issue is described as an access/memory management problem in ImageIO w...

CVE-2021-1786

CVE-2021-1786 describes a logic issue addressed with improved state management that could allow a local user to create or modify system files. Affected products/versions include macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, as well as watchOS 7.3, tvOS 14.4, iOS 14.4, a...

CVE-2021-30814

CVE-2021-30814 affects Apple ImageIO (and related image-processing paths) across tvOS, iOS, iPadOS, and watchOS. The root cause is a memory corruption issue triggered by processing a maliciously crafted image, addressed by input-validation/memory-handling fixes in the updates. Affected platforms:...

CVE-2022-22663

CVE-2022-22663: A vulnerability where a malicious application may bypass Gatekeeper checks is addressed in certain Apple updates. The description notes that improved checks prevent unauthorized actions and that fixes are included in iOS 15.4, iPadOS 15.4, Security Update 2022-004 for Catalina, ma...

CVE-2022-32940

CVE-2022-32940 affects Apple platforms (tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, watchOS 9.1). The issue enables an app to potentially execute arbitrary code with kernel privileges due to a bounds-checking flaw; Apple notes this is fixed in the listed OS versions. The CVE entry provides ...

CVE-2022-42795

CVE-2022-42795 describes a memory consumption vulnerability tied to processing a malicious image that could lead to arbitrary code execution. The issue affects Apple platforms (tvOS 16, iOS 16, macOS Ventura 13, watchOS 9) and is mitigated by memory handling improvements in the respective updates...

CVE-2022-42832

CVE-2022-42832 is a race condition in Apple OS components. The descriptor states a race condition was addressed with improved locking, and that the issue could let an app with root privileges execute arbitrary code with kernel privileges. Affected: iOS/iPadOS (fixed in iOS 16.1 and iPadOS 16), ma...

CVE-2023-27959

CVE-2023-27959 affects Apple iOS and iPadOS kernels. The vulnerability could allow an app to execute arbitrary code with kernel privileges due to memory handling issues. Apple’s advisories confirm the fix is implemented in iOS 16.4 and iPadOS 16.4. Affected component: Apple Neural Engine entries ...

CVE-2023-28178

CVE-2023-28178 is a logic-issue vulnerability in Apple platforms where an app may bypass Privacy preferences due to insufficient validation. The issue is addressed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, and watchOS 9.4. The CVSS-like metrics indicate Lo...

CVE-2023-40384

CVE-2023-40384 describes a permissions issue where an app may read sensitive location information. Apple fixed it by improving redaction of sensitive data. The fix courses include tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14. The Connected documents confirm the vulnerability and the affected O...

CVE-2024-23246

This CVE-2024-23246 affects Apple platforms where sandbox escapes were possible in the affected components. According to the public description, the issue was addressed by removing the vulnerable code and is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, and iOS...

CVE-2024-23290

CVE-2024-23290 is a logic issue fixed by platform updates: tvOS 17.4, iOS 17.4, and iPadOS 17.4; macOS Sonoma 14.4; watchOS 10.4. The issue could allow an app to access user‑sensitive data due to improved restrictions. No exploitation details are provided beyond the remediation versions.

CVE-2024-44252

Summary: CVE-2024-44252 describes a logic issue in Apple's backup/file handling that could allow restoration of a maliciously crafted backup to modify protected system files. The vulnerability is addressed in Apple security updates across multiple platforms, with fixes in iOS 18.1, iPadOS 18.1, i...

CVE-2025-24097

The CVE-2025-24097 entry concerns a permissions issue that could allow an app to read arbitrary file metadata. Affected products include macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is a permissions restriction flaw described as “additional rest...

CVE-2025-30447

CVE-2025-30447 affects multiple Apple platforms (visionOS, macOS Ventura, tvOS, iPadOS, iOS, macOS Sequoia, macOS Sonoma). The issue stems from inadequate handling in logging that could allow an app to access sensitive user data; the root cause is described as improper sanitization of logging. It...

CVE-2026-43723

CVE-2026-43723 describes a path handling issue fixed by improved input validation. The vulnerability affects Apple platforms and is mitigated by updates to iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be ...

CVE-2026-64726

CVE-2026-64726 relates to memory handling issues in Apple OS components that may allow an attacker in physical proximity to corrupt process memory. Public sources consolidate this as a set of memory-management defects across macOS, iOS/iPadOS, tvOS, visionOS, and watchOS. The NVD/NCSC entries ind...

CVE-2026-65331

CVE-2026-65331 is a WebKit state management vulnerability in Apple's Safari browser. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed through improved state management (WebKit Bugzilla 317611), reported by OpenAI Codex ...

CVE-2018-4118

CVE-2018-4118 affects Apple's WebKit stack used by iOS ≤11.2/11.2.x and related components on macOS/tvOS, iCloud for Windows, and iTunes for Windows. Affected: WebKit-based rendering; vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted websit...

CVE-2018-4144

CVE-2018-4144 involves a buffer overflow in the Security component that can allow arbitrary code execution in a privileged context via a crafted app. Affected products include iOS before 11.3, macOS before 10.13.4, iCloud for Windows before 7.4, iTunes for Windows before 12.7.4, tvOS before 11.3,...

CVE-2018-4226

CVE-2018-4226 affects Apple products including iOS before 11.4, macOS before 10.13.5, iCloud before 7.5 on Windows, iTunes before 12.7.5 on Windows, and watchOS before 4.3.1. Issue: local user can bypass restrictions to read sensitive user information. Remediation (as per Apple advisories): apply...

CVE-2018-4394

The CVE-2018-4394 entry describes a memory corruption issue that was addressed with improved input validation. Affected products/versions include iOS versions prior to 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, and iTunes 12.9.1. Connected Apple advisories map this CVE to the Security Co...

CVE-2018-4425

CVE-2018-4425 describes a memory corruption issue fixed by Apple with improved memory handling. The vulnerability affected Apple platforms prior to macOS Mojave 10.14, iOS 12, tvOS 12, and watchOS 5. The Red Hat entry and Apple advisories confirm the issue’s presence across multiple OS components...

CVE-2019-8585

CVE-2019-8585 concerns Apple CoreAudio: an out-of-bounds read was triggered while processing a maliciously crafted movie file, leading to potential arbitrary code execution. Root cause: insufficient input validation in CoreAudio handling; fixed by improved input validation. Affected/affected upda...

CVE-2020-9955

CVE-2020-9955 is an ImageIO out-of-bounds write vulnerability in Apple platforms. Apple reports that processing a maliciously crafted image may lead to arbitrary code execution. Concrete details across connected sources show the issue affecting ImageIO on iOS 14.0 / iPadOS 14.0, tvOS 14.0, watchO...

CVE-2020-9978

CVE-2020-9978 is an Apple macOS/iOS family issue: a memory/setting-propagation flaw that could allow an attacker in a privileged network position to unexpectedly alter application state. Affected products include macOS Big Sur (11.0.1, 11.1), macOS Catalina (Security Update 2020-001), macOS Mojav...

CVE-2021-1832

CVE-2021-1832 concerns copied files potentially not receiving the expected file permissions. The NVD entry notes this was addressed by improved permissions logic and is fixed in Apple Security Update 2021-002 for Catalina, and in iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11....

CVE-2021-30695

The CVE-2021-30695 issue is an out-of-bounds read that was addressed by improved bounds checking. Affected products include macOS Big Sur 11.4 and iOS/iPadOS 14.6, with older macOS releases receiving Security Update 2021-003 (Catalina) and 2021-004 (Mojave). The vulnerability arises from processi...

CVE-2021-30708

CVE-2021-30708 describes an out-of-bounds read that is mitigated by improved input validation. Affected platforms include macOS Big Sur 11.4, macOS Security Updates 2021-003 (Catalina) and 2021-004 (Mojave), and iOS/iPadOS 14.6. Processing a maliciously crafted USD file may cause an unexpected ap...

CVE-2021-30743

CVE-2021-30743 affects Apple ImageIO across macOS/ iOS platforms. The issue is an out-of-bounds write when processing a maliciously crafted image, leading to arbitrary code execution. Apple fixed it in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, and Security Update 2021-003 Catalina/macOS B...

CVE-2021-30808

CVE-2021-30808 is an Apple sandbox vulnerability. A malicious application could modify protected parts of the file system. Patched in tvOS 15, watchOS 8, iOS 15, and iPadOS 15; root cause described as an issue in Sandbox with improved checks. Exploitation status is not provided in the supplied do...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2021-30980

CVE-2021-30980 describes a use-after-free vulnerability that affects Apple OS stack. The issue, fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, tvOS 15.2, iOS 15.2, iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Catalina, can allow an application to execute arbitrary code with kernel ...

CVE-2022-26771

CVE-2022-26771 describes a memory corruption issue that could allow a malicious app to execute arbitrary code with kernel privileges. Affected Apple platforms include watchOS (fixed in 8.6), tvOS (fixed in 15.5), iOS (fixed in 15.5), and iPadOS (fixed in 15.5). The description notes improved stat...

CVE-2022-32819

The CVE-2022-32819 entry describes a logic issue that could allow an app to gain root privileges. It is addressed in Apple software updates across multiple platforms: iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina...

CVE-2022-42848

CVE-2022-42848 affects Apple platforms (iOS, iPadOS, tvOS) with a logic flaw that could allow an app to execute arbitrary code with kernel privileges. The issue is mitigated by updates: fixed in iOS 16.2 and iPadOS 16.2, and iOS 15.7.2 / iPadOS 15.7.2, plus tvOS 16.2. No exploit details are provi...

CVE-2023-27941

CVE-2023-27941 describes a validation issue addressed by improved input sanitization, with a fix released across multiple Apple platforms: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, iOS 15.7.4, and iPadOS 15.7.4. The issue could allow an app to disclose kernel memory. The pr...

CVE-2023-32390

CVE-2023-32390 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup. The issue stems from insufficient checks in the Photos/Visual Lookup flow, enabling access to hidden photos. Devices affected include iOS 16.5, iPadOS 16.5, watch...

CVE-2023-40442

The CVE-2023-40442 issue affects Apple platforms (iOS, iPadOS, macOS) where privacy data could be exposed via log entries containing sensitive location information. Root cause: inadequate redaction of private data in logs. Impact: information disclosure risk on affected builds. Affected versions ...

CVE-2023-41995

CVE-2023-41995 describes a use-after-free vulnerability in Apple kernel components surfaced as memory-management issue. Affected products include iOS 17, iPadOS 17, and macOS Sonoma 14. The flaw may allow an app to execute arbitrary code with kernel privileges, with a local attack vector and user...

CVE-2024-0258

CVE-2024-0258 is an Apple memory-handling fix that affects multiple platforms. Connected sources indicate the issue is fixed in tvOS 17.4, iOS 17.4, iPadOS 17.4, macOS Sonoma 14.4 and watchOS 10.4. Apple security notes describe that an app may be able to execute arbitrary code outside its sandbox...

CVE-2024-23205

CVE-2024-23205 describes a privacy issue in Apple platforms where an app may be able to access sensitive user data due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. Affected components are tied to log handling, w...

CVE-2024-27815

The CVE-2024-27815 entry describes an out-of-bounds write vulnerability that was addressed by Apple with improved input validation. Affected platforms and fixed versions include tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. The issue could allow an app to...

CVE-2025-31183

The CVE-2025-31183 issue affects Apple platforms as described in connected documents, with fixes in macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is improved restriction of data container access, and the vulnerability could allow an app to access se...

CVE-2018-4194

CVE-2018-4194 is an out-of-bounds read vulnerability that was addressed with improved input validation across multiple Apple products: iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.13.5. The description note...

CVE-2018-4374

CVE-2018-4374 is a logic issue in Safari Reader (WebKit) that was addressed by improved input/URL validation. Affected products include iOS prior to 12.1, watchOS prior to 5.1, Safari prior to 12.0.1, iTunes prior to 12.9.1, and iCloud for Windows prior to 7.8. Apple’s security notes for iOS 12.1...

CVE-2019-8577

CVE-2019-8577 affects Apple platforms via SQLite. Root cause: input validation issue addressed by improved memory handling. Fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12. Impact: an application may be able to gain elevate...

CVE-2019-8787

CVE-2019-8787 is an out-of-bounds read vulnerability addressed by Apple in iOS 13.2/iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1. Description from multiple sources states the issue arises from insufficient input validation in the accounts component, enabling a remote attacker t...

CVE-2020-27946

CVE-2020-27946 is an information-disclosure vulnerability tied to FontParser in Apple platforms. The issue arises when processing a maliciously crafted font, potentially allowing disclosure of process memory. Apple’s advisories indicate this affects watchOS 7.2 and various macOS/iOS/iPadOS/tvOS u...

CVE-2020-36521

CVE-2020-36521 is an out-of-bounds read in the ImageIO path triggered by processing a malicious TIFF, fixed via input validation improvements. Affected products include Apple iCloud for Windows (11.4 and 7.21) and iOS/iPadOS 14.0+, watchOS 7.0, tvOS 14.0, and iTunes for Windows 12.10.9. Impact pe...