CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2024-23255

CVE-2024-23255 describes an authentication issue in Apple devices where photos in the Hidden Photos Album could be viewed without authentication due to improved state management. Affected platforms include macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4; Apple patches are available in those versions...

CVE-2024-27821

CVE-2024-27821 is a path-handling vulnerability affecting Apple Shortcuts on macOS Sonoma 14.5 and iOS/iPadOS 17.5 (and related watchOS/macOS versions). The issue allowed a shortcut to output sensitive user data without user consent due to insufficient validation. Apple’s security content indicat...

CVE-2024-27839

The CVE-2024-27839 entry describes a Find My privacy vulnerability in iOS/iPadOS where a malicious app could determine a user’s current location. impact is privacy leakage; root cause relates to how location data is handled for Find My. Apple fixed this in iOS 17.5 and iPadOS 17.5. Affected produ...

CVE-2024-27841

CVE-2024-27841 describes a memory handling issue in Apple platforms that may allow an app to disclose kernel memory. The vulnerability is addressed in iOS 17.5, iPadOS 17.5, and macOS Sonoma 14.5. Impact is described as potential kernel memory disclosure; no exploitation details are provided in t...

CVE-2024-27884

CVE-2024-27884 affects Apple platforms (macOS Sonoma 14.5, watchOS 10.5, visionOS 1.2, tvOS 17.5, iOS 17.5 and iPadOS 17.5). Description in multiple sources indicates the issue was addressed with a new entitlement, enabling an app to access user-sensitive data. In visionOS security content, CVE-2...

CVE-2024-40836

CVE-2024-40836 relates to a logic issue in Shortcuts on Apple platforms. Affected products include watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, and iOS 16.7.9 / iPadOS 16.7.9. The issue could allow a shortcut to access sensitive data via certain actions without prompting the user. I...

CVE-2025-24214

CVE-2025-24214: A privacy issue where text-field contents were logged; fixed in visionOS 2.4, iOS 18.4/iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The CVSS details indicate a LOCAL attack with LOW complexity and USER INTERACTION required, and the impact is confidentiality loss. The issue coul...

CVE-2025-31192

Summary: CVE-2025-31192 is an Apple Safari-related issue resolved by updated software. The vulnerability could allow a website to access sensor information without user consent. Affected/Root Cause (as per connected docs): Apple Safari and WebKit components exposed a sensor-access behavior that c...

CVE-2026-43726

CVE-2026-43726 is a WebKit-related use-after-free vulnerability addressed by Apple in Safari 26.5.2, iOS 26.5.2/iPadOS 26.5.2, and macOS Tahoe 26.5.2. The initial description indicates a use-after-free in processing malicious web content, with fixes described as improved memory management. Connec...

CVE-2026-65340

CVE-2026-65340 is a WebKit state management vulnerability in Apple's Safari browser. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed through improved state management (WebKit Bugzilla: 316996). Affected products includ...

CVE-2011-3439

CVE-2011-3439 affects FreeType in CoreGraphics on Apple iOS prior to 5.0.1. An attacker could craft a font in a document to trigger memory corruption, enabling remote code execution or a denial of service. Affected component: FreeType/CoreGraphics; impact: code execution and memory corruption. Re...

CVE-2016-1755

CVE-2016-1755 affects Apple products including iOS prior to 9.3, OS X prior to 10.11.4, tvOS prior to 9.2, and watchOS prior to 2.2. The issue is a kernel memory disclosure caused by an out-of-bounds read in the Kernel, as described by Apple’s security content. The root cause is an out-of-bounds ...

CVE-2016-1854

Technical details about CVE-2016-1854 are not publicly provided in the supplied documents. Monitor for updates from authoritative advisories (vendor/standard CVE trackers) for affected products, impact, and remediation.

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2017-13794

CVE-2017-13794 relates to WebKit/WebKitGTK+ vulnerabilities discovered in 2017. Multiple memory-corruption issues in WebKit allow remote attackers to execute arbitrary code or cause a denial of service when a user visits crafted web content. Affected products include WebKitGTK+ (Linux distributio...

CVE-2017-13803

CVE-2017-13803 concerns WebKit in multiple Apple OS components (iOS <11.1, Safari <11.0.1, tvOS

CVE-2017-7040

CVE-2017-7040 affects Apple devices using WebKit: iOS <10.3.3, Safari <10.1.2, iCloud/Win with older iCloud/iTunes, and tvOS

CVE-2018-4419

CVE-2018-4419 is a memory corruption issue addressed by Apple and Red Hat advisories. Affected products include Apple platforms prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1 and watchOS 5.1, where an underlying memory handling flaw was mitigated. The public documents state that the fix invol...

CVE-2019-8516

CVE-2019-8516 describes a validation issue in processing a malicious string that could lead to a denial of service. Affected Apple platforms include iOS, macOS Mojave, tvOS, and watchOS with fixes in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The underlying cause is a validation ...

CVE-2019-8734

CVE-2019-8734 involves memory corruption issues that Apple and related platforms addressed by memory management fixes. Publicly documented fixes include iOS 13, iCloud for Windows 7.14 and 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The description notes that processing m...

CVE-2020-27933

CVE-2020-27933 is a memory corruption issue affecting Apple ImageIO (notably in iCloud for Windows 7.20 and related macOS/iOS/watchOS/tvOS updates). The root cause is memory corruption when processing a maliciously crafted image, addressed by Apple via improved input validation and memory handlin...

CVE-2020-3872

CVE-2020-3872 is a memory initialization issue in Apple platforms causing an application to read restricted memory. It is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. Affected components are kernel/memory handling across Apple OS releases; remedia...

CVE-2020-3874

The CVE-2020-3874 entry concerns an issue in the naming of Screenshots within Messages on iOS/iPadOS. According to the Apple security content, an issue allowed Screenshots to reveal additional message content, and this was fixed in iOS 13.3.1 / iPadOS 13.3.1. The core problem is described as a mi...

CVE-2020-9780

CVE-2020-9780 affects Apple iOS/iPadOS Mail: a local attacker may view deleted content in the app switcher due to previews not being cleared when content is deleted. Root cause: previews weren’t cleared, allowing visibility of deleted mail content in the app switcher. Impact is limited to a local...

CVE-2020-9932

CVE-2020-9932 is a memory corruption issue in Apple’s WebKit/Web content handling that could allow arbitrary code execution when processing malicious web content. Root cause described as memory corruption due to improved validation. Affected software includes Safari 13.0.1, iOS 13.1 and iPadOS 13...

CVE-2020-9937

CVE-2020-9937 is documented as an out-of-bounds write vulnerability that could allow arbitrary code execution when processing a malicious image. The connected Apple advisories specify affected products and fixed versions: iOS 13.6 and iPadOS 13.6; macOS Catalina 10.15.6; tvOS 13.4.8; watchOS 6.2....

CVE-2020-9938

CVE-2020-9938: An out-of-bounds read was addressed with improved input validation. Affects Apple platforms and apps processing images: iOS/iPadOS 13.6, macOS Catalina 10.15.x, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3/7.20. Processing a maliciously crafted im...

CVE-2021-1781

CVE-2021-1781 is a privacy issue in how Apple devices handle Contact cards. The flaw could allow a malicious application to leak sensitive user information. The vulnerability is mitigated by state-management improvements and is fixed in macOS Big Sur 11.2, Security Update 2021-001 for Catalina an...

CVE-2021-30825

CVE-2021-30825 concerns Apple’s CoreML MLMODEL parsing. The ZDI advisory (ZDI-22-354) describes an out-of-bounds read in CoreML’s MLMODEL file processing, which can be leveraged to cause arbitrary code execution and information disclosure. Apple’s security content for iOS 15/iPadOS 15 states the ...

CVE-2021-30947

CVE-2021-30947 affects Apple platforms (macOS Big Sur, Monterey; iOS/iPadOS 15.2; tvOS 15.2; watchOS 8.3). Root cause: an access issue addressed by implementing additional sandbox restrictions, potentially allowing an application to access a user’s files. Fixes are in macOS Big Sur 11.6.2, macOS ...

CVE-2022-22578

CVE-2022-22578 is an Apple platform logic issue related to insufficient validation that could allow a malicious app to gain root privileges. The vulnerability is addressed by patches in tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, and macOS Monterey 12.2. Technical sources (Apple security updat...

CVE-2022-32898

CVE-2022-32898 is an Apple Kernel/Apple Neural Engine memory‑handling issue that could allow arbitrary code execution with kernel privileges. The connected exploit notes describe a memory corruption path in ANE’s program creation (ANE_ProgramCreate_gated) via an overflow of a planes array, contro...

CVE-2022-42820

CVE-2022-42820 is a memory corruption issue affecting Apple IOHIDFamily components, addressed by Apple in the macOS Ventura 13 security updates and iOS 16.1 / iPadOS 16. The issue could lead to an app termination or arbitrary code execution. The official Apple advisory references IOHIDFamily and ...

CVE-2022-42849

CVE-2022-42849 is an Apple platform privilege-elevation issue where privileged API calls could allow a user to gain higher privileges. The record indicates an access issue in Apple’s software stack that is addressed by applying restrictions and updating to specific releases: iOS 16.2, iPadOS 16.2...

CVE-2022-46725

CVE-2022-46725 is a WebKitGTK/WebKit URL handling spoofing vulnerability. The advisory notes a spoofing issue in URL handling that could mislead users via address bar manipulation and indicates it was mitigated by improved input validation. Affected software inclusion (via the Alibaba Cloud Linux...

CVE-2023-32389

CVE-2023-32389 is an Apple kernel memory disclosure vulnerability affecting multiple Apple platforms (iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4). The issue is described as an information disclosure that could allow an app to disclose kernel memory. The CVE entry lists a...

CVE-2023-32394

CVE-2023-32394 affects Apple devices and is fixed in iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, and macOS Ventura 13.4. The issue allowed viewing contact information from the lock screen when the device is physically accessed; Apple attributes this to improved checks in the security content. A...

CVE-2023-40399

Apple CVE-2023-40399 affects multiple Apple platforms (tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14). The issue is described as a memory handling defect that may allow an app to disclose kernel memory. The fixed versions are explicitly listed in the NVD entry and Apple advisory content...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2023-42914

CVE-2023-42914 is an Apple sandbox-related issue addressed by improved memory handling. Affected platforms include macOS Ventura 13.6.3, macOS Monterey 12.7.2, macOS Sonoma 14.2, iOS 16.7.3 and 17.2 (and iPadOS 16.7.3 and 17.2), watchOS 10.2, and tvOS 17.2. The fixed versions indicate a sandbox e...

CVE-2024-27810

CVE-2024-27810 is a path handling issue fixed by improved validation. Affected platforms: iOS/iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Impact stated: an app may read sensitive location information. Remediation: upgrade to the fixed OS versions (iOS/iPadOS 17.5, tvOS 17.5, watchOS ...

CVE-2024-40784

CVE-2024-40784 involves an integer overflow that was addressed by improved input validation. The issue affects Apple platforms when processing a maliciously crafted file, potentially causing an unexpected app termination. Public disclosures in connected sources (Red Hat, CIRCL, Nessus/OPENVAS sum...

CVE-2024-40785

CVE-2024-40785 is addressed in SUSE/openSUSE webkit2gtk3 updates. The vulnerability is fixed by upgrading webkit2gtk3 to version 2.44.3 (SUSE-SU-2024:3109-1 / SUSE-SU-2024:3091-1), with CVEs including 40776, 40779, 40780, 40782, 40785, 40789, 40794, 4558. The OSV entry confirms the fix in the web...

CVE-2024-44241

CVE-2024-44241 affects Apple iOS and iPadOS components in DCP firmware. Connected sources confirm that the vulnerability was addressed by improved bounds checks and is fixed in iOS 18.1 and iPadOS 18.1. The CVE is described as enabling a potential attacker to cause unexpected system termination o...

CVE-2025-24238

CVE-2025-24238 is an Apple vulnerability tied to a logic issue in the libxpc/privilege checks that could allow an app to obtain elevated privileges. The issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5, and on iOS/iPadOS 18.4 and tvOS 18.4. Connected documents expli...

CVE-2025-30429

CVE-2025-30429 : A path handling issue with insufficient validation allowed an app to break out of its sandbox. The vulnerability is addressed in Apple platforms: visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. T...

CVE-2026-28941

Apple fixed CVE-2026-28941 across macOS Sequoia 15.7.7, macOS Tahoe 26.5, iOS 18.7.9 and iPadOS 18.7.9. The issue involves processing a maliciously crafted file that may cause denial of service or disclose memory contents. The root cause is described as an improved checks/validation in the affect...

CVE-2026-43663

CVE-2026-43663 affects WebKit/Web content handling on Apple platforms. The issue is a memory handling defect that could let processing malicious web content cause an unexpected process crash. Apple fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Remediation is to upgrad...

CVE-2026-64733

CVE-2026-64733 is an Apple platform vulnerability affecting the Accounts framework on iOS/iPadOS, with fingerprinting of the user possible prior to the 26.6 releases. The issue is addressed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected adviso...