CVE-2026-64733

CVE-2026-64733 is an Apple platform vulnerability affecting the Accounts framework on iOS/iPadOS, with fingerprinting of the user possible prior to the 26.6 releases. The issue is addressed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected adviso...

CVE-2026-64783

CVE-2026-64783 relates to a use-after-free in WebKit/Safari memory handling. The issue affects Apple platforms where processing malicious web content could crash Safari; vulnerable component is memory management within WebKit-based rendering. Apple indicates fixes are included in Safari 26.6 (and...

CVE-2016-4765

CVE-2016-4765 is described in the initial document as affecting WebKit components across multiple Apple platforms: iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10. The vulnerability enables an attacker to remotely execute arbitrary code or cause a denial of se...

CVE-2017-2521

CVE-2017-2521 affects Apple WebKit in iOS, Safari, tvOS, and watchOS. Root cause is memory corruption in WebKit when rendering crafted web content, enabling remote code execution or memory corruption that can crash the app. Affected: iOS before 10.3.2; Safari before 10.1.1; tvOS before 10.2.1; wa...

CVE-2018-4414

CVE-2018-4414 is a memory corruption issue addressed by Apple with improved input validation. It affected multiple Apple platforms prior to their 2018 security updates: iOS 12 and earlier, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The Apple advis...

CVE-2018-4420

CVE-2018-4420 describes a memory corruption issue resolved by removing the vulnerable code. The vulnerability affected Apple platforms up to the listed patches and versions: iOS

CVE-2019-7293

CVE-2019-7293 describes a memory corruption issue in Apple’s kernel components. The vulnerability could allow a local user to read kernel memory. It is addressed in multiple Apple platform updates: iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Connected documents also reflect Red Ha...

CVE-2019-8525

CVE-2019-8525 is a memory corruption issue described as fixed by Apple in multiple updates (macOS Mojave 10.14.4/10.14.5, High Sierra/Sierra Security Updates, watchOS 5.2, iOS 12.2). The description states that an application may be able to execute arbitrary code with kernel privileges and ties t...

CVE-2020-27948

The CVE-2020-27948 entry concerns an out-of-bounds write vulnerability in CoreAudio that could allow arbitrary code execution when processing a malicious audio file. Affected Apple platforms and releases include watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2...

CVE-2020-29614

CVE-2020-29614 affects Apple platforms and is described as a heap corruption issue triggered by processing a maliciously crafted file. The description lists affected releases and a fixed status: macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; macOS Big Sur 11.1; Security Update ...

CVE-2020-29639

CVE-2020-29639 concerns an out-of-bounds read issue in the Apple font parsing component (FontParser) across Apple platforms. The public docs from Apple reference fixes via improved input validation for FontParser, with citations in iOS 14.0/iPadOS 14.0 and watchOS 7.0 advisories. Specifically, in...

CVE-2020-3919

CVE-2020-3919 corresponds to a memory initialization issue in Apple IOHIDFamily that could allow a malicious application to execute arbitrary code with kernel privileges. Concrete details in connected documents show the vulnerability affecting Apple platforms and components across multiple OS lin...

CVE-2020-9792

CVE-2020-9792 affects the Apple USB Audio component across iOS/iPadOS/macOS. A validation issue in the USB Audio handling could allow a plugged-in USB device to cause a denial of service. Exploitation would be local (physical USB connection). Apple resolved this with fixes in iOS 13.5, iPadOS 13....

CVE-2020-9797

CVE-2020-9797 is an information-disclosure issue in Apple OS components (notably kernel-related paths) that could allow a malicious app to determine another app’s memory layout. Public guidance across Connected Apple advisories shows the fix implemented by removing vulnerable code, with updates d...

CVE-2020-9890

CVE-2020-9890 is an out-of-bounds read in the Apple Audio stack that could allow code execution when processing a maliciously crafted audio file. It is fixed in iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The linked Apple and NVD entries confirm the vulnerabili...

CVE-2020-9906

CVE-2020-9906 (Apple iOS/macOS/watchOS) - AWDL SyncTree TLV heap overflow, remote kernel impact The issue arises in the iOS/macOS AWDL kernel parser (IO80211AWDLPeer). The SyncTree TLV (type 0x14) length is validated with a 1024-byte upper bound when TLVs are parsed, but the code copies 6-byte MA...

CVE-2020-9919

CVE-2020-9919 describes a buffer overflow in image processing surfaces across Apple platforms. The issue affects components such as ImageIO and CoreGraphics (and related image-processing paths) and is triggered by processing maliciously crafted images, potentially allowing arbitrary code executio...

CVE-2021-1777

CVE-2021-1777 affects Apple macOS/iOS/watchOS/tvOS image processing, with the issue fixed in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, plus corresponding watchOS/tvOS/iOS updates. The vulnerability description states that processing a maliciously crafted image may l...

CVE-2021-30894

CVE-2021-30894 affects Apple devices (iOS/iPadOS/tvOS) in the Image Processing component. It describes a memory corruption issue that could allow an attacker to execute arbitrary code with kernel privileges. The exploitation is described as local, requiring authentication, with fixes delivered in...

CVE-2021-30966

CVE-2021-30966 is a logic issue in CFNetwork Proxies that could cause user traffic to be leaked to a proxy server despite PAC configurations. Public details in Apple security updates show the issue affects macOS Monterey 12.1 (and related updates for other Apple platforms) and was addressed in Mo...

CVE-2021-30968

CVE-2021-30968 is a validation issue in hard link handling that Apple fixed via sandbox restrictions across multiple OS updates. Public details show the bug being addressed in macOS Big Sur 11.6.2, macOS Monterey 12.1, tvOS 15.2, iOS 15.2/iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Cat...

CVE-2021-30993

CVE-2021-30993 involves a kernel-level buffer overflow in Apple’s OS stack. The description confirms a memory handling issue that could allow an attacker in a privileged network position to execute arbitrary code. Publicly documented fixes target macOS Monterey 12.1 and Apple OS updates for watch...

CVE-2023-32420

CVE-2023-32420 is an out-of-bounds read vulnerability reported in Apple’s IOSurfaceAccelerator (noted within watchOS/WebKit-related advisories) that can allow an app to cause unexpected system termination or read kernel memory. The issue is mitigated by improved input validation and is fixed in i...

CVE-2023-42936

CVE-2023-42936 affects Apple platforms and is connected to Apple’s update fixing an issue where an app may access user-sensitive data due to improved redaction of sensitive information. The public entry lists fixes in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2, iPadOS 17.2, tvOS 17.2, ...

CVE-2023-42969

CVE-2023-42969 describes a sandbox escape whereby an app may break out of its sandbox due to improper handling of caches. Affected platforms include iOS and iPadOS prior to 17, and macOS prior to the listed versions ( Sonoma 14, Ventura 13.6, Monterey 12.7). Apple fixed the issue in iOS 17/iPadOS...

CVE-2024-23214

CVE-2024-23214 involves multiple memory corruption issues in Web content handling. Root cause: improved memory handling fixed in macOS Sonoma 14.3, iOS 16.7.5/iPadOS 16.7.5, and iOS 17.3/iPadOS 17.3, with arbitrary code execution impact if exploited. Connected Nessus entry notes some Linux distri...

CVE-2024-40829

CVE-2024-40829 affects Apple platforms (watchOS, iOS/iPadOS, macOS) where an attacker may view restricted content from the lock screen. Root cause is described as the issue being addressed with improved checks. Remediations are available via patches: watchOS 10.6; iOS 17.6/iPadOS 17.6; iOS 16.7.9...

CVE-2024-54550

CVE-2024-54550 concerns Apple platforms: macOS Sequoia, iOS, and iPadOS. The issue arises from the Contact Information Handler, enabling an app to view autocompleted contact information from Messages/Mail in system logs. Root cause described as improved redaction in macOS/iOS/iPadOS updates. Affe...

CVE-2024-54564

The CVE-2024-54564 issue concerns Apple platforms, where a file received over AirDrop may not have the quarantine flag applied due to an improved state-management approach. This affects visionOS 1.3, macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6, where the quarantine handling was addressed and fix...

CVE-2025-24129

CVE-2025-24129 is a type confusion vulnerability in Apple AirPlay that affects iOS 18.3/iPadOS 18.3, visionOS 2.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Root cause: type confusion in AirPlay code leading to potential application termination. Impact: a remote attacker on the local netwo...

CVE-2025-24243

CVE-2025-24243 is an Apple memory-management issue where processing a maliciously crafted file may lead to arbitrary code execution. It affects multiple platforms and is fixed in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, vision...

CVE-2025-43342

CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...

CVE-2026-28864

CVE-2026-28864 concerns a permissions-checking issue in Apple OS components that could allow a local attacker to access a user’s Keychain items. The CVE is addressed in iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, an...

CVE-2026-28950

CVE-2026-28950 describes a logging issue in Apple’s Notification Services where copies of notifications marked for deletion could be retained in the device’s storage. The vulnerability is addressed by patches in iOS 18.7.8 and iPadOS 18.7.8, and iOS 26.4.2 and iPadOS 26.4.2. Affected products inc...

CVE-2011-1293

The CVE-2011-1293 entry concerns a use-after-free vulnerability in Google Chrome’s HTMLCollection implementation, affecting Chrome versions prior to 10.0.648.204. The vulnerability allows remote attackers to cause a denial of service and potentially other impact via unknown vectors. The provided ...

CVE-2017-13862

CVE-2017-13862 is a kernel memory corruption flaw affecting Apple devices running iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2. The issue allows an app crafted to run locally to execute arbitrary code in kernel context or cause memory corruption (privileged code...

CVE-2017-7043

CVE-2017-7043 affects Apple WebKit in multiple products (iOS before 10.3.3, Safari before 10.1.2, tvOS before 10.2.2; also iCloud/iTunes on Windows). It allows remote attackers to execute arbitrary code or cause memory corruption and crashes via a crafted website. Apple mitigations include iOS 10...

CVE-2017-7172

CVE-2017-7172 affects the CFNetwork Session component across Apple products (iOS, macOS, tvOS, watchOS, and Windows iCloud/iTunes) with a memory corruption flaw that could allow an attacker to execute arbitrary code in a privileged context via a crafted app, or cause a denial of service. Apple’s ...

CVE-2018-4130

CVE-2018-4130 is a WebKit-based remote code execution/memory corruption vulnerability reported by Apple, affecting iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3. The issue enables arbitrary code execution or me...

CVE-2018-4187

CVE-2018-4187 affects Apple’s LinkPresentation component in iOS < 11.3.1 and macOS

CVE-2018-4311

CVE-2018-4311 is a WebKit-related issue mitigated by removing origin information. Affected products/versions include iOS <12, watchOS <5, Safari <12, iTunes on Windows <12.9, and iCloud for Windows

CVE-2018-4371

CVE-2018-4371 is an out-of-bounds read issue mitigated by improved input validation in Apple products. The public descriptions show multiple affected components (IPSec, Kernel) across platforms including iOS, macOS Mojave, tvOS, and watchOS, with the vulnerability present in versions prior to iOS...

CVE-2019-8530

CVE-2019-8530 affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2). A malicious application may overwrite arbitrary files due to improved checks that were addressed. Patch status: fixed in the listed versions. Exploitation requires local access with user interaction (per CVSS: LOCA...

CVE-2019-8598

CVE-2019-8598 is an input-validation issue identified in Apple platforms. The supplied documents show the vulnerability affecting Apple iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12, with the impact described as a malicious applic...

CVE-2019-8740

CVE-2019-8740 is a memory corruption vulnerability in Apple’s kernel components. The vulnerability allows an application to potentially execute arbitrary code with kernel privileges. Apple fixes this in iOS 13.1/iPadOS 13.1, watchOS 6, and tvOS 13 by improving locking in the related kernel code. ...

CVE-2019-8809

The CVE-2019-8809 entry describes a validation issue in the kernel that could allow a local application to read a persistent account identifier. It is fixed in macOS Catalina 10.15, iOS 13.1 / iPadOS 13.1, tvOS 13, watchOS 6, and iOS 13. Root cause: a validation logic flaw in kernel pathways. Imp...

CVE-2019-8833

CVE-2019-8833 affects Apple’s kernel component and describes a memory corruption vulnerability. The issue was mitigated by removing the vulnerable code and is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra, tvOS 13.3, iOS 13.3, and iPadOS 13...

CVE-2020-27908

CVE-2020-27908 is an Apple macOS/audio issue where an out-of-bounds read in CoreAudio during processing of a maliciously crafted audio file could lead to arbitrary code execution. The vulnerability affects macOS and iOS-family OS updates and was addressed by input-validation hardening and memory ...

CVE-2020-3887

CVE-2020-3887 is a legitimate vulnerability tied to multiple Apple products. A download origin could be incorrectly associated due to a logic/restrictions handling issue in WebKit-based components. The CVE is addressed in Apple updates: iOS 13.4 / iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for W...

CVE-2020-9812

CVE-2020-9812 is an information-disclosure flaw in Apple platforms where a local user could read kernel memory due to an issue with state management in the kernel. Affected: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Impact: local read of kernel memory; no remote vector ...