3192 matches found
CVE-2022-32903
CVE-2022-32903 is a use-after-free vulnerability in Apple’s memory management that affects tvOS (prior to 16) and could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in tvOS 16, iOS 16, and watchOS 9. Exploitation would require local access with user interactio...
CVE-2022-32913
CVE-2022-32913 affects Apple platforms where the issue is fixed by adding restrictions on observability of app states to determine which app is using the camera. Publicly documented fixes include macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, watchOS 9, and tvOS 16. The vulner...
CVE-2022-32928
CVE-2022-32928 describes a logic issue in Apple systems that could allow a user in a privileged network position to intercept mail credentials. The vulnerability is fixed in iOS 16, macOS Ventura 13, and watchOS 9. Connected sources confirm the issue relates to Apple software components and the v...
CVE-2022-32944
CVE-2022-32944 is a memory corruption vulnerability that can allow an app to execute arbitrary code with kernel privileges. The issue is addressed by fixes across multiple Apple platforms: tvOS 16.1, iOS 15.7.1/iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1/iPadOS 16, macOS Monterey 12.6....
CVE-2022-42790
CVE-2022-42790 is a logic/state-management issue in Apple platforms that could allow a user to view restricted content from the lock screen. Affected products/versions include macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, iOS 15.7, and iPadOS 15.7. The patch guidance in the p...
CVE-2022-42813
CVE-2022-42813 concerns a certificate validation issue in WKWebView. It affects Apple platforms and is addressed in tvOS 16.1, iOS 16.1 / iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vulnerability could allow processing a malicious certificate to execute arbitrary code. Affected component: W...
CVE-2022-42844
CVE-2022-42844 affects Apple iOS and iPadOS via a memory-handling issue that could allow an app to break out of its sandbox. The Red Hat and NVD entries corroborate the same description and indicate the fix is included in iOS 16.2 and iPadOS 16.2. Connected sources do not reveal additional exploi...
CVE-2022-46709
CVE-2022-46709 is a memory corruption issue addressed with improved state management in macOS Ventura 13 and iOS 16. The vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected components/contexts are not detailed beyond the Apple security updates references, a...
CVE-2023-32399
CVE-2023-32399 concerns a Core Location information disclosure in Apple platforms. The issue allows an app to read sensitive location data due to inadequate handling of caches and was fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, and macOS Ventura 13.4. Affected components include Co...
CVE-2024-23217
CVE-2024-23217 is a privacy issue affecting Apple platforms where improved handling of temporary files prevents bypassing certain Privacy preferences. The vulnerability is fixed in macOS Sonoma 14.3, watchOS 10.3, iOS 17.3 and iPadOS 17.3. The provided documents describe the issue as a privacy by...
CVE-2024-23291
CVE-2024-23291 describes a privacy issue where a malicious app could observe user data in log entries related to accessibility notifications. Apple devices affected include tvOS 17.4, iOS 17.4, iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4, which addressed this through improved private data re...
CVE-2025-24131
CVE-2025-24131 is an AirPlay vulnerability affecting Apple devices. A memory handling issue could allow a privileged attacker on the local network to cause a denial-of-service. The vulnerability is addressed in Apple security updates: iOS/iPadOS 18.3, visionOS 2.3, macOS Sonoma 14.7.5 (and relate...
CVE-2025-30430
CVE-2025-30430 affects Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Description states password autofill may fill in passwords after a failed authentication, due to an issue in state management. The CVE’s matrix (CVSS v3.1) indicates a critical impact (base score ...
CVE-2025-30432
Technical details about CVE-2025-30432 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories for confirmed impact, affected products, and remediation.
CVE-2025-43342
CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...
CVE-2026-28940
CVE-2026-28940 affects Apple platforms via a memory-corruption flaw when processing maliciously crafted images. According to connected advisories, the vulnerability is addressed in: iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5; macOS Sequoia 15.7.7; macOS Tahoe 26.5; tvOS 26.5; and visi...
CVE-2026-64780
In WebKit, CVE-2026-64780 stems from improper input validation (WebKit Bugzilla 316918) allowing crafted web content to crash Safari. Fixed in Safari 26.6.1, iOS/iPadOS 18.7.10 and 26.6.1, macOS Tahoe 26.6.2. No in-the-wild exploitation reported; CVSS 4.3 (Medium) reflects availability-only impact.
CVE-2011-1293
The CVE-2011-1293 entry concerns a use-after-free vulnerability in Google Chrome’s HTMLCollection implementation, affecting Chrome versions prior to 10.0.648.204. The vulnerability allows remote attackers to cause a denial of service and potentially other impact via unknown vectors. The provided ...
CVE-2011-1296
Technical details for CVE-2011-1296 are not provided in the connected documents. The initial description notes a Chrome SVG text handling issue leading to DoS, but no concrete product/version/impact specifics are given beyond that.
CVE-2012-1521
CVE-2012-1521: A use-after-free in the XML parser affected Google Chrome prior to 18.0.1025.168, enabling remote denial of service or other impact via unknown vectors. The vulnerability is addressed by the Chrome update to 18.0.1025.168 or newer.
CVE-2017-7065
CVE-2017-7065 affects Apple devices via the Wi‑Fi chip (Broadcom) with memory corruption that can allow remote code execution in proximity. Public documentation confirms affected platforms (iOS 10.x prior to 10.3.3, macOS prior to 10.12.6, tvOS prior to 10.2.2) and that Apple released fixes in iO...
CVE-2017-7151
CVE-2017-7151 is a race condition addressed by Apple through additional validation, affecting multiple Apple platforms prior to their updates (iOS 11.2, macOS High Sierra 10.13.2/10.13.4, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows). The connected Apple advisories attribute the CVE to CoreF...
CVE-2018-4104
CVE-2018-4104 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS
CVE-2018-4157
CVE-2018-4157 affects Apple: iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS
CVE-2018-4185
CVE-2018-4185 affects Apple OS X/iOS family (iOS before 11.3, tvOS before 11.3, watchOS before 4.3, macOS before High Sierra 10.13.4). The issue is an information disclosure in the transition of program state, addressed by improved state handling. Public documents confirm the kernel/state-transit...
CVE-2018-4311
CVE-2018-4311 is a WebKit-related issue mitigated by removing origin information. Affected products/versions include iOS <12, watchOS <5, Safari <12, iTunes on Windows <12.9, and iCloud for Windows
CVE-2018-4341
CVE-2018-4341 is a memory corruption vulnerability addressed by Apple with improved memory handling in the I/O subsystem. The affected surface includes Apple OS components (notably macOS/iOS variants mapping to macOS Mojave 10.14 and iOS 12-era builds) as listed in Apple security content: the iss...
CVE-2018-4354
CVE-2018-4354 is a memory corruption issue that affected Apple devices prior to the macOS Mojave 10.14, iOS 12, tvOS 12, and watchOS 5. The vulnerability was addressed by improved memory handling. The Red Hat entry mirrors the description, stating a memory corruption issue addressed with improved...
CVE-2019-6230
CVE-2019-6230 is a memory initialization issue in CoreAnimation that could allow a sandboxed application to break out of its sandbox. Apple documents indicate the flaw is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3, with affected entries appearing under Apple CoreAni...
CVE-2019-8637
CVE-2019-8637 is an Apple iOS/watchOS/tvOS vulnerability: an input validation issue could allow a malicious app to gain root privileges. Affected: Apple platforms with this CVE entry are fixed in iOS 12.3, tvOS 12.3, and watchOS 5.2.1; the vulnerability is addressed by improved input validation. ...
CVE-2019-8728
CVE-2019-8728 involves multiple memory corruption issues fixed by Apple in iOS 13, iCloud for Windows 7.14/10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The CVE affects processing maliciously crafted web content, which may lead to arbitrary code execution. The underlying ca...
CVE-2019-8836
CVE-2019-8836 is a memory corruption vulnerability reported by Apple, affecting Apple devices including iOS/iPadOS, watchOS, tvOS. The issue is fixed in iOS 13.3.1, iPadOS 13.3.1, watchOS 6.1.2, and tvOS 13.3.1. Apple’s security content lists CVE-2019-8836 under entries for components such as IOU...
CVE-2020-9772
CVE-2020-9772 involves a logic issue that allowed a sandboxed process to potentially circumvent sandbox restrictions. Apple states this vulnerability affects multiple platforms and was fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and watchOS 6.2. The description emphasize...
CVE-2020-9811
CVE-2020-9811 is an information-disclosure issue on Apple platforms where a local user could read kernel memory due to a state-management flaw. Affected products include iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. The vulnerability is fixed in these releases,...
CVE-2020-9852
CVE-2020-9852 — A kernel integer overflow issue was addressed in Apple platforms. The vulnerability was triggered by improper input validation, allowing a malicious app to potentially execute arbitrary code with kernel privileges. The fix is included in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tv...
CVE-2020-9973
CVE-2020-9973 is an out-of-bounds read vulnerability in Apple’s Model I/O handling of USD files. The issue allows processing a maliciously crafted USD file to potentially terminate the application or execute arbitrary code. Apple attributes the fix to improved bounds checking, and remediation is ...
CVE-2020-9993
CVE-2020-9993 describes an issue where Safari/iOS/watchOS/iPadOS UI handling could allow address bar spoofing when visiting a malicious site. The vulnerability is addressed by updates: watchOS 7.0, Safari 14.0, iOS 14.0, and iPadOS 14.0. The description does not specify exploit details beyond UI-...
CVE-2021-30763
CVE-2021-30763 involves an input-validation issue in ActionKit on Apple iOS/iPadOS. Affected: iOS 14.7 and iPadOS 14.7; impact described as a shortcut that may bypass Internet permission requirements. Root cause: improved input validation fixes address the issue. Mitigation: apply iOS 14.7 / iPad...
CVE-2022-42800
CVE-2022-42800 affects Apple platforms including iOS, iPadOS, macOS, watchOS and related OS updates. The issue is mitigated by Apple through updated builds: iOS/iPadOS 15.7.1, iOS 16.1, macOS Ventura 13 (and Monterey 12.6.1, Big Sur 11.7.1), watchOS 9.1, with the fix described as improved checks ...
CVE-2023-27940
CVE-2023-27940 affects Apple platforms (iOS 15.7.6 and iPadOS 15.7.6; macOS Monterey 12.6.6; macOS Ventura 13.4). The issue is due to insufficient permissions checks in a kernel component, allowing a sandboxed app to observe system-wide network connections. Apple’s bulletin states the vulnerabili...
CVE-2023-32384
CVE-2023-32384 affects Apple operating systems including watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and 16.5, and iPadOS 15.7.6 and 16.5. The issue is a buffer overflow triggered during image processing, with the root cause stated as improv...
CVE-2024-23211
CVE-2024-23211 concerns a privacy issue in Apple software where a user’s private browsing activity could be visible in Settings. The issue is addressed in updates across multiple Apple platforms: watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, and iOS 16.7.5 / iPadOS 16.7.5, Safari 17....
CVE-2024-23241
CVE-2024-23241 affects Apple platforms and is an information disclosure issue addressed by Apple in a coordinated update. The NVD entry states improved state management fixes the vulnerability, with the fix shipping in macOS Sonoma 14.4 and iOS/tvOS/iPadOS 17.4. The vulnerability could allow an a...
CVE-2024-27799
CVE-2024-27799 affects Apple OSes: macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, and iOS 16.7.8 / iPadOS 16.7.8. The issue arises from insufficient entitlement checks, allowing an unprivileged app to log keystrokes in other apps, including those using secure input mode. Apple’s ...
CVE-2025-30471
CVE-2025-30471 is a validation issue addressed by Apple across multiple platforms. The advisory indicates a remote attacker may cause a denial-of-service, with fixes shipped in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma...
CVE-2026-43740
CVE-2026-43740 affects Safari/WebKit components used on macOS Tahoe and iOS/iPadOS, with memory-handling issues in processing malicious web content that may disclose process memory. The public records indicate fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Remediation ...
CVE-2026-43812
CVE-2026-43812 is described as a memory-management use-after-free issue fixed in Apple OS updates: iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The initial entry states exploitation could cause an unexpected system termination, with a CVSSv3.1 base score ...
CVE-2011-3073
Technical details for CVE-2011-3073 are not publicly provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates.
CVE-2015-3741
CVE-2015-3741 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Root c...