CVE-2017-13860

CVE-2017-13860 concerns Apple Mail Drafts in iOS < 11.2 and macOS

CVE-2018-4145

CVE-2018-4145 is a memory-corruption vulnerability reported across Apple products. The consolidated description spans iOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows, indicating multiple memory corruption issues addressed through improved memory handling. Affected versions ...

CVE-2018-4174

CVE-2018-4174 affects Apple iOS <11.3 and macOS

CVE-2018-4277

CVE-2018-4277 is a URL spoofing vulnerability affecting Apple platforms (iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6). The issue arises from spoofing in URL handling and was addressed by improved input validation. Apple advis...

CVE-2018-4391

CVE-2018-4391 describes an inconsistent user-interface issue where processing a maliciously crafted text message may lead to UI spoofing due to improper state management. Apple fixes released in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, Security Update 2017-004 El Capitan, watch...

CVE-2019-6210

CVE-2019-6210 is a kernel memory corruption vulnerability affecting Apple TV devices (4th generation and Apple TV 4K). The tvOS 12.1.2 entry describes it as a memory corruption issue fixed by improved input validation, while the iOS 12.1.3 page notes a fix for the kernel issue via improved lock s...

CVE-2019-8550

CVE-2019-8550 concerns the FaceTime pausing behavior. According to the provided sources, an issue caused a user’s FaceTime video to fail to pause if they exited the FaceTime app while the call was ringing. The vulnerability is fixed by updated logic in the affected platforms: iOS 12.2, macOS Moja...

CVE-2019-8574

CVE-2019-8574 is a memory corruption vulnerability in the sysdiagnose component that affects multiple Apple platforms (iOS, macOS, watchOS, tvOS). The issue could allow an application to execute arbitrary code with system privileges and is mitigated by memory-handling improvements. Affected versi...

CVE-2019-8576

CVE-2019-8576 is an out-of-bounds read in Apple’s Kernel component. A local user could cause system termination or read kernel memory. Fixes were issued in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, and watchOS 5.2.1 per Apple advisories; related CVE entries and vendor advisories confirm the kern...

CVE-2019-8657

CVE-2019-8657 affects Apple operating systems (iOS 12.4; macOS Mojave 10.14.6; tvOS 12.4; watchOS 5.3). The issue is an out-of-bounds read resolved by improved input validation, triggered while parsing a maliciously crafted office document; implications include unexpected termination or arbitrary...

CVE-2019-8665

CVE-2019-8665 affects Apple iOS Messages and is listed as a denial-of-service issue resolved by the iOS 12.4 and watchOS 5.3 patches. The Connected Apple security content documents (HT210346 for watchOS 5.3 and HT210353 for iOS 12.4) describe an input/validation-related issue in Messages that cou...

CVE-2019-8709

CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...

CVE-2019-8796

CVE-2019-8796 is a logic-issue vulnerability affecting Apple devices where AirDrop transfers could be unexpectedly accepted in Everyone mode. The public details confirm the root cause as flawed validation and indicate fixes in macOS Catalina 10.15.1, Security Update 2019-001 and 2019-006, iOS 12....

CVE-2019-8803

CVE-2019-8803 describes an authentication issue that allows a local attacker to log in to a previously authenticated user’s account without valid credentials. The vulnerability is attributed to improper state management in Apple's App Store account flow. Affected products include Apple platforms ...

CVE-2020-3883

CVE-2020-3883 affects Apple platforms (iOS/iPadOS, macOS Catalina, tvOS, watchOS) and concerns an entitlement issue where an application may be able to use arbitrary entitlements. The vulnerability is addressed by Apple with fixes in iOS 13.4 / iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and ...

CVE-2020-9814

CVE-2020-9814 is a memory-corruption vulnerability in Apple’s kernel logic, fixed by improved state management. It affects multiple Apple platforms and is capable of allowing a malicious app to execute arbitrary code with kernel privileges. Affected versions are addressed in iOS 13.5/iPadOS 13.5,...

CVE-2020-9871

CVE-2020-9871: An out-of-bounds write in ImageIO (openEXR handling) may allow arbitrary code execution when processing a malicious image. Affected products include Apple OSes and related apps; Apple’s mitigations are in security updates. Remediation: patch in iOS 13.6/iPadOS 13.6, macOS Catalina ...

CVE-2020-9980

CVE-2020-9980 is an out-of-bounds write vulnerability in FontParser that could allow arbitrary code execution when parsing a malicious font file. The connected Apple advisories show affected components across multiple Apple platforms (macOS, iOS/iPadOS, tvOS, watchOS) and specify the fix in iOS 1...

CVE-2020-9989

CVE-2020-9989 is a local information‑disclosure issue in Apple Messages where a local user may discover another user’s deleted messages. The CVE entry is represented in Apple advisories for macOS Big Sur 11.0.1 and relevant iOS/iPadOS/watchOS updates, with the issue described as fixed by improved...

CVE-2021-30798

CVE-2021-30798 is a logic issue (state management) fixed on Apple platforms. The vulnerability could allow a malicious app to bypass certain Privacy preferences. Affected products include iOS, macOS Big Sur, and watchOS; fixes are in iOS 14.7, macOS Big Sur 11.5, and watchOS 7.6. The initial desc...

CVE-2021-30871

CVE-2021-30871 affects Apple platforms (iOS, watchOS, macOS Big Sur 11.5) where a local attacker could access analytics data due to a change in entitlement. Mitigation: Apple addressed the issue with updates to iOS 14.7, watchOS 7.6, and macOS Big Sur 11.5. Technical details in the provided docum...

CVE-2021-30914

CVE-2021-30914 affects Apple iOS/iPadOS GPU Drivers. The issue is a memory corruption vulnerability caused by improper input handling, with potential for an application to execute arbitrary code with kernel privileges. Apple confirms the fix in iOS 15.1 and iPadOS 15.1. In the available documents...

CVE-2022-22673

CVE-2022-22673 affects Apple iOS/iPadOS Notes input handling. The issue is an input-validation weakness that can cause a denial of service when processing a large input. Apple fixed it in iOS 15.5 / iPadOS 15.5. In public sources, the vulnerability is described as a processing of oversized input ...

CVE-2022-32949

CVE-2022-32949 : Apple lists this as an issue affecting iOS/iPadOS with the impact that an app may be able to execute arbitrary code with kernel privileges. The Apple security content for iOS 15.7.1 / iPadOS 15.7.1 (and tvOS 16) states the issue is fixed by updated checks and memory handling. The...

CVE-2022-42846

CVE-2022-42846 concerns a memory handling issue in the Apple graphics driver exposed when parsing a maliciously crafted video file. Affected products include iOS and iPadOS versions prior to the fixed releases (Apple indicates fixes in iOS 16.2 and iPadOS 16.2, and iOS 15.7.2 and iPadOS 15.7.2). ...

CVE-2023-27956

The CVE-2023-27956 issue concerns the FontParser component on Apple platforms. It describes a memory handling flaw that, when processing a maliciously crafted image, could disclose process memory. Affected products/versions include macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPad...

CVE-2023-28194

The CVE-2023-28194 issue pertains to Apple iOS/iPadOS where an app may be able to unexpectedly create a bookmark on the Home Screen via Safari/WebKit handling. The connected documents indicate a vulnerability in Safari (CVE-2023-28194) with the root cause described as issues addressed by improved...

CVE-2023-42941

The CVE-2023-42941 issue affects Bluetooth handling in iOS 17.2 and iPadOS 17.2. The root cause is insufficient checks in Bluetooth packet processing that allow an attacker in a privileged network position to trigger a denial-of-service condition. Affected software is Apple iOS 17.2 and iPadOS 17...

CVE-2024-23262

The CVE-2024-23262 issue affects Apple visionOS (and related iOS/iPadOS versions). Root cause: the vulnerability stems from insufficient entitlement checks that could allow an app to spoof system notifications and UI. Impact is described in Apple advisories as an ability to impersonate UI element...

CVE-2024-23292

CVE-2024-23292 affects Apple platforms: macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The issue allows an app to access information about a user’s contacts due to inadequate data protection. The root cause is addressed in these updates with improved data protection, and Apple lists the fixed vers...

CVE-2024-27811

CVE-2024-27811 affects Apple platforms and is described as a privilege-escalation issue resolved by Apple in versions: tvOS 17.5, visionOS 1.2, iOS 17.5 & iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. The description indicates the fix involved improved checks. Connected sources (Apple security co...

CVE-2024-40786

CVE-2024-40786 is an Apple vulnerability addressed by state-management improvements. The issue affects Apple devices and is fixed in iOS 16.7.9, iPadOS 16.7.9, iOS 17.6, iPadOS 17.6, and macOS Ventura 13.6.8. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low...

CVE-2025-24202

CVE-2025-24202 affects Apple operating systems (iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). Root cause: a logging issue with insufficient data redaction in the logging subsystem. Impact: an app may access sensitive user data due to improper logging handling. Remediation: fixed in the listed patch...

CVE-2025-24211

CVE-2025-24211 affects Apple media processing related to handling a crafted video file. The issue stems from memory management in video processing, which could lead to an app termination or memory corruption. Apple has addressed the vulnerability in multiple platforms and versions: visionOS 2.4, ...

CVE-2025-30425

CVE-2025-30425 affects Apple Safari and related OS components. A state-management issue in Safari’s handling of private browsing could allow a malicious website to track users in Private Browsing mode. The root cause is described as an issue with state management; no exploitation details are prov...

CVE-2025-30467

CVE-2025-30467 affects Apple Safari (and related Apple platforms) with an address bar spoofing vulnerability. The available documents indicate the issue occurs when visiting a malicious website that can spoof the address bar, potentially confusing users about the site they are on. Apple’s patches...

CVE-2025-43392

CVE-2025-43392 is a cross-origin image data exfiltration vulnerability in WebKitGTK/WebKitGTK-based components. Connected advisories confirm the issue affects webkitgtk4 and related WebKitGTK/WPE WebKit deployments, with fixes in downstream package updates. The vulnerability description states th...

CVE-2026-64719

CVE-2026-64719 is an out-of-bounds access issue in WebRTC within WebKit used by Safari/WebKit on macOS Sonoma/Sequoia and iOS/iPadOS/tvOS/visionOS/watchOS. The root cause is improper bounds handling when processing web content, leading to a potential Safari crash. Apple’s security content for Saf...

CVE-2011-0981

CVE-2011-0981 affects Google Chrome (WebKit/Chromium) prior to 9.0.597.94, where improper event handling for animations can lead to a stale pointer, enabling remote denial-of-service or other unspecified impact via unknown vectors. The entry attributes the issue to WebKit/Chromium components and ...

CVE-2011-1449

Technical details for CVE-2011-1449 are not provided in the connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2011-3050

CVE-2011-3050 affects Google Chrome

CVE-2017-13795

CVE-2017-13795 affects Apple WebKit across multiple platforms (iOS, Safari, tvOS, iCloud/Windows, iTunes for Windows). Root issue is memory corruption in WebKit leading to remote code execution or memory-based DoS when processing crafted web content. Affected versions include iOS before 11.1, Saf...

CVE-2018-4115

CVE-2018-4115 affects iOS <11.3, macOS <10.13.4, tvOS <11.3, and watchOS

CVE-2019-8540

CVE-2019-8540 describes a memory initialization issue that could allow a malicious app to determine kernel memory layout. The issue is fixed in Apple platforms as follows: iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The root cause is a memory initialization problem related to impr...

CVE-2020-10016

CVE-2020-10016 is a memory corruption issue addressed via improved state management. It is fixed in macOS Big Sur 11.0.1, iOS 14.2 / iPadOS 14.2, tvOS 14.2, and watchOS 7.1, with potential for arbitrary code execution with kernel privileges as described by Apple advisories and related Red Hat enr...

CVE-2020-29610

CVE-2020-29610 is an out-of-bounds read vulnerability in Apple's media stack, specifically impacting AudioToolboxCore MP4 parsing. The issue could disclose restricted memory when processing a maliciously crafted audio file. Affected products include Apple platforms on macOS Big Sur 11.1, watchOS ...

CVE-2020-3828

CVE-2020-3828 is an Apple iOS/iPadOS vulnerability where physical access to a locked device could allow a user to access contacts due to a lock-screen state-management issue. The issue is resolved in iOS 13.3.1 and iPadOS 13.3.1, as documented by Apple (HT210918) and reflected in multiple CVE ind...

CVE-2020-3853

CVE-2020-3853 describes a type confusion issue that was addressed by improved memory handling. Apple Security updates indicate this vulnerability, which could allow a malicious application to execute arbitrary code with system privileges, has been fixed in: iOS 13.3.1 and iPadOS 13.3.1, macOS Cat...

CVE-2020-9880

CVE-2020-9880 describes a buffer overflow in Apple’s Model I/O handling of USD files. The root cause is an overflow that was addressed by improved bounds checking. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS: specifically iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6,...

CVE-2020-9962

CVE-2020-9962 is associated with Apple macOS FontParser. The vulnerability allowed a buffer overflow when processing a malicious font file, due to insufficient size validation in the FontParser component. This could enable arbitrary code execution. The issue is fixed in macOS Big Sur 11.0.1, with...