CVE-2024-27823

CVE-2024-27823 involves a race condition that Apple fixed by improved locking. It affects Apple platforms (macOS Sonoma 14.5; macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS/iPadOS 16.7.8 and 17.5; watchOS 10.5; visionOS 1.3; tvOS 17.5). An attacker in a privileged network position may be able t...

CVE-2020-9880

CVE-2020-9880 describes a buffer overflow in Apple’s Model I/O handling of USD files. The root cause is an overflow that was addressed by improved bounds checking. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS: specifically iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6,...

CVE-2020-9962

CVE-2020-9962 is associated with Apple macOS FontParser. The vulnerability allowed a buffer overflow when processing a malicious font file, due to insufficient size validation in the FontParser component. This could enable arbitrary code execution. The issue is fixed in macOS Big Sur 11.0.1, with...

CVE-2021-1762

CVE-2021-1762 affects Apple platforms (notably iOS/iPadOS, macOS Big Sur, and related Security Updates) and is caused by an out-of-bounds write when processing malicious USD files. The issue could terminate the application or allow arbitrary code execution. It has been fixed in iOS 14.4 / iPadOS ...

CVE-2021-30764

CVE-2021-30764 is an Apple ImageIO vulnerability that may allow arbitrary code execution when parsing a malicious image/file. The issue is described across Apple OS updates (iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5) with fixes implemented via improved input validation and checks. Connected do...

CVE-2021-31001

According to the sources, CVE-2021-31001 is an access issue in iOS/iPadOS Telephony that could allow an attacker in a privileged network position to leak sensitive user information. The vulnerability is addressed in iOS 15 and iPadOS 15. Connected documents (Red Hat, PT Security, CNNVD, etc.) con...

CVE-2022-22584

CVE-2022-22584 is a memory corruption vulnerability in Apple software where improved validation addresses the issue. The flaw could allow arbitrary code execution when processing a maliciously crafted file. Fixed in the following official updates: tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, an...

CVE-2023-40392

The CVE-2023-40392 entry concerns a privacy issue in macOS where an app may be able to read sensitive location information due to inadequate redaction in log entries. The Red Hat/Apple/NVD entries align on: affected platform is macOS, specifically macOS Ventura 13.5 and earlier in the context of ...

CVE-2023-40441

CVE-2023-40441 describes a resource-exhaustion (DoS) issue caused by processing web content, mitigated by improved input validation. The fixed versions are: iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability affects Apple devices when handling web content (GPU/WebGL contexts) and can lead ...

CVE-2023-42846

CVE-2023-42846 relates to a vulnerability in Apple devices where the mDNSResponder component could allow passive tracking of a device by its Wi-Fi MAC address. The issue was mitigated by removing the vulnerable code and is fixed in watchOS 10.1, iOS 16.7.2 / iPadOS 16.7.2, tvOS 17.1, and iOS 17.1...

CVE-2023-42893

CVE-2023-42893 is a permissions issue on Apple platforms that could allow an app to access protected user data. The root cause involved vulnerable code and insufficient checks, which Apple fixed by removing the vulnerable code and adding additional checks. Affected and fixed versions (per provide...

CVE-2024-44155

CVE-2024-44155 affects Apple Safari and related OS components via a custom URL scheme handling issue. The root cause is improved input validation, addressing a vulnerability that could allow malicious web content to violate the iframe sandboxing policy. Public details indicate the fix is applied ...

CVE-2024-44274

CVE-2024-44274 is an Apple OS vulnerability affecting the Accessibility component that could allow an attacker with physical access to a locked device to view sensitive user information. The issue is mitigated by improved authentication and is fixed in: iOS 17.7.1, iPadOS 17.7.1, watchOS 11.1, iO...

CVE-2024-54526

CVE-2024-54526 affects Apple platforms and is described as a privacy risk where a malicious app could access private information. Connected sources confirm fixes in specific OS updates: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7...

CVE-2025-24086

CVE-2025-24086 affects Apple image processing via the ImageIO component. The Apple advisory notes that processing an image may lead to a denial-of-service, caused by a memory handling issue, and lists affected platforms as iPadOS/iPadOS 17.x, macOS Ventura/ Sonoma, visionOS, iOS/iPadOS 18.x, macO...

CVE-2025-30454

CVE-2025-30454 is a macOS/iOS/tvOS security issue: a path handling problem addressed by improved validation. Affected software includes macOS Sonoma 14.7.5, macOS Sequoia 15.4, and iOS/iPadOS 18.4, tvOS 18.4. Root cause involves path handling with insufficient validation, allowing a malicious app...

CVE-2025-31184

CVE-2025-31184 affects Apple platforms: Safari 18.4, visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. Root cause: improved permissions checking that may allow an app to gain unauthorized access to the Local Network. Impact is high (CVE metrics: CVSS v3.1 base score 7.8, Confidentialit...

CVE-2026-43743

CVE-2026-43743 is a race condition addressed by Apple in macOS Tahoe 26.5.2 and iOS/iPadOS 26.5.2. The issue affects the IOGPUFamily entry (Impact: a user-level app may cause an unexpected system termination) and is mitigated by the patched state handling. The CVE references confirm the fix in ma...

CVE-2009-1698

CVE-2009-1698 affects WebKit-based components (Safari before 4.0 and iPhone OS/iPod touch up to 2.2.1). The issue is an uninitialized pointer during handling of a CSS attr() function with a large numeric argument, enabling remote code execution or memory-corruption-induced denial of service via a...

CVE-2009-1725

CVE-2009-1725 is a vulnerability in WebKit-based rendering used by Apple Safari (and KDE’s khtml/kdelibs, QtWebKit, and related WebKit-powered components) where improper handling of numeric character references can allow remote attackers to cause memory corruption, potentially executing code or c...

CVE-2011-1203

CVE-2011-1203 affects Google Chrome prior to 10.0.648.127. It arises from improper handling of SVG cursors, which can allow a remote attacker to cause a denial of service or possibly other unspecified impact via a stale pointer. The vulnerability is tied to Chrome/Chromium’s SVG rendering behavio...

CVE-2011-2825

CVE-2011-2825 concerns a use-after-free in Google Chrome prior to 13.0.782.215 tied to font handling, allowing remote attackers to cause a denial of service or potentially other impact via custom-font vectors. The Connected documents confirm affected software (Chrome before 13.0.782.215) and the ...

CVE-2017-13880

The CVE-2017-13880 entry describes a memory corruption vulnerability in Apple iOS/watchOS components, fixed in iOS 11.2 and watchOS 4.2. Affected: kernel-space context (kernel privilege). Root cause: memory handling issues leading to memory corruption. Impact: an attacker may be able to execute a...

CVE-2017-7012

CVE-2017-7012 affects WebKit Web Inspector in certain Apple products (iOS < 10.3.3; Safari < 10.1.2; iCloud on Windows < 6.2.2; iTunes on Windows

CVE-2017-7020

CVE-2017-7020 affects WebKit components across multiple Apple platforms (iOS prior to 10.3.3, Safari prior to 10.1.2, iCloud on Windows prior to 6.2.2, iTunes on Windows prior to 12.6.2, tvOS prior to 10.2.2). The issue allows a remote attacker to execute arbitrary code or cause a denial of servi...

CVE-2017-7059

CVE-2017-7059 is a WebKit/DOMParser logic issue that enables cross-site scripting when processing malicious web content. Public details indicate affected products include Apple iOS before 10.3.3, Safari before 10.1.2, and tvOS before 10.2.2, all tied to the WebKit component. The vulnerability is ...

CVE-2018-4096

CVE-2018-4096 is a WebKit memory-corruption issue exploited via a crafted web site, affecting multiple Apple platforms (iOS <11.2.5, macOS <10.13.3, Safari <11.0.3, iCloud/iTunes on Windows, tvOS <11.2.5, watchOS

CVE-2018-4331

CVE-2018-4331 is a memory corruption issue addressed by Apple across multiple Apple platforms (iOS, macOS Mojave 10.14, tvOS 12, watchOS 5). The description notes a general fix with improved memory handling for pre-update versions. Connected Red Hat/Apple security pages corroborate a broad remedi...

CVE-2018-4390

The CVE affects Apple devices via Message handling: an inconsistent UI state (UI spoofing) when processing a maliciously crafted text message. Root cause cited as improved state management in related Apple advisories. Affected products/versions include iOS 12.1 and earlier iOS 12.x, watchOS 4.3, ...

CVE-2018-4413

CVE-2018-4413 affects Apple platforms (iOS prior to 12.1, macOS Mojave before 10.14.1, tvOS before 12.1, watchOS before 5.1) and is described as a memory initialization issue addressed by improved memory handling. Root cause: memory initialization. Impact is cited as high confidentiality impact w...

CVE-2019-8708

CVE-2019-8708 is a local-privilege issue in macOS components where a local user could determine the existence of arbitrary files. The entry documents a logic/restrictions problem that is addressed by fixes in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, and also...

CVE-2019-8749

CVE-2019-8749 involves multiple memory corruption issues in libxml2. The Red Hat advisory notes an underlying root cause of memory corruption addressed by improved input validation, with patches applied across Apple platforms (macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud p...

CVE-2019-8785

CVE-2019-8785 is a memory-corruption vulnerability tied to Apple Audio on multiple platforms. Apple’s security content for iOS 13.2/iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1 attributes the issue to memory handling weaknesses in the affected Audio component, enabling an appli...

CVE-2019-8799

CVE-2019-8799 affects Apple’s mDNSResponder across Apple platforms (iOS/iPadOS, macOS Catalina, watchOS, tvOS). Root cause: AWDL communications may disclose device names to nearby observers. Resolution: devices updated to replace device names with a random identifier; fixed in iOS 13.1/iPadOS 13....

CVE-2019-8854

CVE-2019-8854 affects Apple devices by addressing a user privacy issue where watchOS, iOS, macOS, and tvOS could be passively tracked via the Wi‑Fi MAC address. The root cause was the broadcast MAC address being exposed; Apple mitigated this by removing the broadcast MAC address. Patches are deli...

CVE-2020-10010

CVE-2020-10010 describes a path handling issue that affects macOS and related Apple OS components, with a local attacker able to elevate privileges due to insufficient path validation. The issue is addressed by improved validation in the code paths involved, and is fixed in Apple platforms as fol...

CVE-2020-27944

The CVE-2020-27944 entry concerns a memory corruption vulnerability in FontParser when processing maliciously crafted font files. Apple security disclosures (HT212003/HT212005/HT212009) indicate the issue could allow arbitrary code execution and is addressed by updates in watchOS 7.2, macOS Big S...

CVE-2020-3859

CVE-2020-3859 describes an inconsistent user interface issue in iOS that could allow a person with physical access to an iPhone or iPad to access contacts from the lock screen. The root cause is stated as ineffective state management; Apple fixed this in iOS 13.3.1 / iPadOS 13.3.1. The Apple advi...

CVE-2020-9787

CVE-2020-9787 is a logic issue in WebKit/Safari affecting macOS Catalina and iOS/watchOS/tvOS platforms where some websites may not appear in Safari Preferences. The issue was addressed with improved restrictions and patches are provided in iOS 13.4 / iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13....

CVE-2020-9909

CVE-2020-9909 represents an Apple kernel vulnerability: an out-of-bounds read fixed in iOS 13.6 / iPadOS 13.6 / tvOS 13.4.8 / watchOS 6.2.8. Root cause: improved bounds checking in the Kernel component; impact: an attacker who already has kernel code execution could potentially bypass kernel memo...

CVE-2020-9960

CVE-2020-9960 affects Apple platforms (macOS Big Sur 11.x, macOS Catalina 10.15.x, tvOS 14.0, watchOS 7.0, iOS 14.0, iPadOS 14.0). The root cause is an out-of-bounds read in the audio processing path, addressed by improved input validation. The vulnerability could allow arbitrary code execution t...

CVE-2020-9984

CVE-2020-9984 concerns Apple ImageIO impacting processing of a malicious image that could lead to arbitrary code execution. The issue is an out-of-bounds read addressed by improved input validation and is fixed in macOS Catalina 10.15.6, iOS 13.6, iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 1...

CVE-2021-1785

CVE-2021-1785 describes an out-of-bounds read that was addressed by improved input validation in Apple platforms. The fix applies to macOS Big Sur 11.2, Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. The vulnerability could allow arbitrary cod...

CVE-2021-30752

The CVE-2021-30752 issue affects Apple platforms including macOS Big Sur 11.3, iOS 14.5 / iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Description indicates that Processing a maliciously crafted image could lead to arbitrary code execution, caused by an out-of-bounds read that was addressed with impr...

CVE-2021-30792

CVE-2021-30792 is an out-of-bounds write vulnerability in image processing that can cause arbitrary code execution when processing a specially crafted image. It is fixed in iOS 14.7 and macOS Big Sur 11.5. According to the provided sources, exploitation would require processing a malicious image,...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2023-27946

CVE-2023-27946 describes an out-of-bounds read fixed by Apple in macOS Ventura 13.3, iOS 15.7.4, iPadOS 15.7.4, macOS Monterey 12.6.4, and macOS Big Sur 11.7.5. The issue could cause unexpected termination or arbitrary code execution when processing a maliciously crafted file. Affected components...

CVE-2023-32352

CVE-2023-32352 is a logic issue in Apple's Gatekeeper checks that may allow an app to bypass Gatekeeper verification. The issue is fixed in: watchOS 9.5; macOS Ventura 13.4; macOS Big Sur 11.7.7; macOS Monterey 12.6.6; iOS 16.5; iPadOS 16.5. No exploitation status is provided in the supplied docu...

CVE-2024-23215

CVE-2024-23215 affects Apple platforms via an issue in the handling of temporary files that may allow an app to access user‑sensitive data. The affected products are macOS Sonoma 14.3; watchOS 10.3; tvOS 17.3; iOS 17.3; and iPadOS 17.3. Apple has addressed the vulnerability in these releases. The...

CVE-2024-44255

CVE-2024-44255 is a path handling issue addressed by Apple in versions listed as fixed: visionOS 2.1, iOS 18.1 / iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The issue allowed a malicious app to run arbitrary shortcuts without user consent due to improved p...