CVE-2016-4728

CVE-2016-4728 affects WebKit in Apple iOS (pre-10), tvOS (pre-10), iTunes for Windows (pre-12.5.1) and Safari (pre-10). Root cause: mishandling of error prototypes, enabling remote attackers to execute arbitrary code via a crafted webpage. Public fixes exist: iOS/tvOS Safari patches in subsequent...

CVE-2017-13865

CVE-2017-13865 is a kernel‑level memory read restriction bypass affecting Apple platforms (iOS before 11.2, macOS 10.13.x, watchOS/tvOS variants). The Initial Description states a crafted app can bypass kernel memory read protections. Connected documents provide concrete exploitation details: iOS...

CVE-2017-2493

CVE-2017-2493 corresponds to a WebKit/Safari vulnerability where loading an HTMLObjectElement could bypass Same Origin Policy via crafted objects and JavaScript URLs, enabling potential cross-origin information leakage. The Seebug writeup provides a PoC and notes SOP checks in HTMLPlugInImageElem...

CVE-2018-4128

Technical details for CVE-2018-4128 are not publicly provided in the connected documents; available sources list the vulnerability but do not describe affected products, versions, impact, or fixes.

CVE-2018-4198

CVE-2018-4198 affects UIKit in Apple platforms: iOS <11.4, macOS <10.13.5, tvOS <11.4, watchOS

CVE-2018-4326

CVE-2018-4326 is an Apple security issue affecting iOS before 12 and macOS Mojave 10.14, described as a memory corruption vulnerability addressed with improved memory handling. The related Apple advisories HT209193 (macOS Mojave 10.14.1/High Sierra/Sierra updates) and HT209139 (iOS 12) list CVE-2...

CVE-2019-8529

CVE-2019-8529 corresponds to a memory corruption issue that could allow arbitrary code execution with kernel privileges. Public sources confirm the vulnerability is addressed by input-validation improvements and is fixed in iOS 12.2 and macOS Mojave 10.14.4 (IOKit SCSI component). Apple security ...

CVE-2019-8828

CVE-2019-8828 is a memory-corruption vulnerability in Apple’s kernel components. Affected products/versions (per provided docs): iOS 13.3/iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra, tvOS 13.3. Root cause: memory corrup...

CVE-2019-8838

CVE-2019-8838 is a kernel memory corruption issue affecting Apple platforms. The vulnerability could allow an application to execute arbitrary code with kernel privileges. It is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra, tvOS 13.3, iOS ...

CVE-2020-27943

CVE-2020-27943 describes a memory corruption bug in FontParser when processing font files, leading to arbitrary code execution. Apple fixes apply to tvOS 14.3, iOS/iPadOS 14.3, macOS Big Sur 11.1, and corresponding Security Updates for Catalina/Mojave, plus watchOS 7.2. The root cause is a font p...

CVE-2020-3836

CVE-2020-3836 is an Apple kernel memory-management issue disclosed as an access problem that could allow a malicious, local app to determine the kernel memory layout. The vulnerability affects multiple Apple OSes: iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. ...

CVE-2020-3860

CVE-2020-3860 is a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. Root cause: memory corruption due to improper input handling. Affected: Apple devices running iOS 13.x (fixed in iOS 13.3.1 and iPadOS 13.3.1) and watchOS 6....

CVE-2020-9829

CVE-2020-9829 : A validation issue affecting CoreText in Apple platforms, mitigated by the iOS/iPadOS 13.5, tvOS 13.4.5, and watchOS 6.2.5 patches. The flaw stems from improper input handling of a text-message payload, described as a validation/improved input sanitization issue. Impact per docs i...

CVE-2020-9879

CVE-2020-9879 is an out-of-bounds write in Apple ImageIO that could allow arbitrary code execution when processing a malicious image. The vulnerability is documented across multiple Apple advisories and related Product entries, with fixed versions including iOS 13.6 / iPadOS 13.6, macOS Catalina ...

CVE-2020-9926

CVE-2020-9926 describes a use-after-free in memory management when processing XML, addressed in Apple updates. Affected products include iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, and Security Update 2020-004 for Mojave and High Sierra. ...

CVE-2020-9967

CVE-2020-9967 affects the macOS kernel. The issue is described as multiple memory corruption problems that were addressed by improved input validation, with fixes in macOS Big Sur 11.0.1 and 11.1, tvOS 14.0, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0...

CVE-2020-9969

CVE-2020-9969 affects macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. Description from Apple Security Advisories shows an access issue that allowed a local user to view sensitive information, addressed by applying additional sandbox restrictions. The remediation is upgradi...

CVE-2021-30733

CVE-2021-30733 affects Apple devices and platforms via a vulnerability in font processing that can cause an out-of-bounds read and disclose process memory. The issue is mitigated by input validation improvements and is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, an...

CVE-2021-30924

CVE-2021-30924 is a denial-of-service in the Kernel that can cause a device to unexpectedly restart. The initial description notes a remote attacker can trigger this DoS via kernel state handling issues; the connected Apple advisories confirm the impact, list Kernel as affected, and state the fix...

CVE-2022-32795

CVE-2022-32795 corresponds to an Apple Safari/WebKit issue where visiting a malicious website could lead to address bar spoofing. The vulnerability is fixed in iOS 16, iOS 15.7, and iPadOS 15.7. Affected component: Safari/WebKit on Apple mobile platforms; root cause described as an issue in how t...

CVE-2022-46720

CVE-2022-46720 affects Apple platforms (iOS 16.2, iPadOS 16.2, macOS Ventura 13.1). Root cause: integer overflow mitigated by improved input validation in dyld, with the issue described as allowing an app to break out of its sandbox. Impact: sandbox escape if exploited. Exploitation details are n...

CVE-2023-23528

CVE-2023-23528 corresponds to an out-of-bounds read in Core Bluetooth that could disclose process memory when processing a malicious Bluetooth packet. The vulnerability affects Apple devices running tvOS, iOS, and iPadOS and is addressed with improved bounds checking in the 16.4 updates. Affected...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2023-32396

The CVE-2023-32396 issue affects Apple platforms and is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17, iPadOS 17, and macOS Sonoma 14. The description states that an app may be able to gain elevated privileges and that the fix involved improved checks. No additional attack vectors or exploit det...

CVE-2023-41968

The CVE-2023-41968 issue affects Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, watchOS 10, iOS 17 and iPadOS 17. Root cause is improved validation of symlinks, enabling an app to read arbitrary files. Remediations are included in the listed OS versions; no ex...

CVE-2024-23287

CVE-2024-23287 concerns a privacy issue in Apple platforms where improved handling of temporary files fixes a vulnerability that could allow an app to access user-sensitive data. Affected products/versions (per provided documents): macOS Sonoma 14.4, iOS 17.4, iPadOS 17.4, watchOS 10.4. The entry...

CVE-2024-27835

CVE-2024-27835 affects Apple iOS and iPadOS where notes could be accessed from the lock screen due to a state-management issue in the Notes component. Root cause: improved state management in the affected UI path. Impact: local attacker with physical access could view notes on a locked device. Re...

CVE-2010-1812

The connected MiracleLinux advisory AXSA:2011-34:01 references CVE-2010-1812 (Use-after-free in WebKit) affecting WebKitGTK+ and webkitgtk-1.2.6-2.AXS4. The vulnerability allows remote code execution or a denial of service via selections, described alongside other WebKit issues; the advisory indi...

CVE-2016-1754

CVE-2016-1754 affects Apple platforms (iOS < 9.3, OS X < 10.11.4, tvOS < 9.2, watchOS

CVE-2016-1841

CVE-2016-1841 affects libxslt as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Connected advisories/plug...

CVE-2016-4766

CVE-2016-4766 affects WebKit-based components in Apple iOS (before 10), tvOS (before 10), iTunes (before 12.5.1 on Windows), and Safari (before 10). The issue allows an attacker to trigger remote code execution or a memory corruption-based denial of service via a crafted web site. The vulnerabili...

CVE-2017-13793

CVE-2017-13793 concerns WebKit in Apple products (iOS<11.1, Safari<11.0.1, iCloud on Windows, iTunes on Windows, tvOS

CVE-2017-13849

CVE-2017-13849 affects Apple devices running iOS before 11.1, tvOS before 11.1, and watchOS before 4.1, where the CoreText component can be triggered by a crafted text file to cause an application termination (DoS). A PoC/ exploits exist (TpwnT) demonstrating a denial-of-service effect via CoreTe...

CVE-2017-7030

CVE-2017-7030 affects WebKit components across Apple platforms (iOS Safari, tvOS, Windows iCloud/iTunes) and WebKitGTK+ ecosystems. The issue is a memory corruption/misdirected processing vulnerability in WebKit that can allow arbitrary code execution or memory corruption when visiting a crafted ...

CVE-2018-4166

CVE-2018-4166 is tied to Apple’s NSURLSession in multiple OSes (iOS before 11.3, macOS before 10.13.4, tvOS before 11.3, watchOS before 4.3). The issue is described as a race condition in NSURLSession that could allow an attacker’s crafted app to execute arbitrary code in a privileged context. Ap...

CVE-2018-4399

CVE-2018-4399 is a kernel/privilege-related issue affecting Apple platforms prior to the patches in iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat advisory confirms an access issue with privileged API calls and notes affected versions before those updates. The Apple advisories HT...

CVE-2020-3911

CVE-2020-3911 is a buffer overflow in libxml2 that was addressed by improved bounds checking and size validation. The issue affects multiple Apple platforms and components, with fixes shipped in iOS 13.4/iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, and related Apple updates for Wi...

CVE-2020-9785

CVE-2020-9785 affects Apple platforms including iOS 13.4, iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and watchOS 6.2. The issue is described as multiple memory corruption problems addressed with improved state management, enabling a malicious application to potentially execute arbitrary code...

CVE-2020-9891

CVE-2020-9891 corresponds to an out-of-bounds read in audio processing that could lead to arbitrary code execution when processing a maliciously crafted audio file. Apple fixed this issue in iOS/iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8 by improving bounds checking. The ...

CVE-2020-9936

CVE-2020-9936 is an out-of-bounds write issue addressed with improved bounds checking. Apple confirms fixes across multiple platforms: iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, and corresponding Windows updates (iTunes 12.10.8 for Windows, iCloud for Windows 11.3...

CVE-2020-9943

CVE-2020-9943 is an out-of-bounds read in Apple’s Audio stack (CoreAudio) that could allow a malicious app to read restricted memory. It was addressed by improved bounds checking and memory handling. The fixed versions include macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0, watchOS 7.0, and tvOS ...

CVE-2020-9950

CVE-2020-9950: A use-after-free issue addressed in WebKit that affects Apple platforms. According to the initial record, the vulnerability could be triggered by processing malicious web content and may lead to arbitrary code execution. Affected products/contexts include watchOS 7.0, tvOS 14.0, Sa...

CVE-2021-1787

CVE-2021-1787 corresponds to multiple Apple macOS/iOS/watchOS/tvOS/iPadOS vulnerabilities addressed by Apple in Security Update 2021-001 and related patches. The Initial description notes a set of issues fixed in macOS Big Sur 11.2, Catalina 11.2, Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4, an...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2021-30926

CVE-2021-30926 is a memory corruption issue in ICC profile processing that could lead to arbitrary code execution when handling a malicious image. Apple attributes the root cause to improper input validation during ICC profile processing, and fixes were released in macOS Monterey 12.1 and corresp...

CVE-2021-30946

CVE-2021-30946 is a logic issue in the macOS LaunchServices component that could allow a malicious app to bypass certain Privacy preferences. The vulnerability is fixed in macOS Monterey 12.1 and is listed as affecting LaunchServices on macOS Big Sur-era releases; related Apple advisories also re...

CVE-2022-26760

CVE-2022-26760 is a memory corruption issue in Apple's Wi‑Fi stack that was addressed with improved state management. Affected products are iOS and iPadOS; fixed in iOS 15.5 / iPadOS 15.5. Remediation: update to the 15.5 (or later) releases. Exploitation details are not provided in the supplied d...

CVE-2022-32855

CVE-2022-32855 is an Apple vulnerability affecting the iOS/iPadOS Home component, caused by a logic issue in state management that could allow a user to view restricted content from the lock screen. Apple fixed this with iOS 15.6 and iPadOS 15.6. The CVE is documented across multiple feeds (NVD, ...

CVE-2023-27949

CVE-2023-27949 describes an out-of-bounds read that was mitigated by improved input validation. Affected platforms include macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4; processing a maliciously crafted file may terminate the app or execute arbitrary code. The connected ...

CVE-2024-23255

CVE-2024-23255 describes an authentication issue in Apple devices where photos in the Hidden Photos Album could be viewed without authentication due to improved state management. Affected platforms include macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4; Apple patches are available in those versions...