CVE-2025-24192

CVE-2025-24192 pertains to a script-imports issue in Safari and related Apple platforms. The vulnerability was addressed with improved isolation and is fixed in Safari 18.4, visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The issue could allow leakage of sensitive data when visiting ...

CVE-2025-31222

Technical details (affected component, root cause, impact, vulnerable versions, and fixes) are not publicly provided in the connected documents; monitor for official advisories for updates.

CVE-2026-20698

CVE-2026-20698 is a kernel-space issue in Apple XNU PF_ROUTE handling. A heap buffer overflow occurs in route_msg() when processing RTA_GENMASK, enabling a local, unprivileged process to trigger a kernel panic and potential heap corruption on affected devices. Affected: iOS and macOS prior to 26....

CVE-2026-28931

CVE-2026-28931 involves a buffer overflow that was addressed through improved bounds checking. The vulnerability is fixed in Apple OS updates: iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The public description notes that connecting to a malicious NFS server may lead to k...

CVE-2026-43704

Summary of CVE-2026-43704 : A use-after-free vulnerability in Web Extensions for Safari/WebKit allowed an attacker-controlled extension to trigger an unexpected process crash. The issue is addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Af...

CVE-2026-43742

CVE-2026-43742 describes a use-after-free vulnerability tied to processing malicious web content, addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected sources enumerate affected components including WebKit (and WebKit subareas like W...

CVE-2026-43745

CVE-2026-43745 describes an out-of-bounds write issue addressed by improved input validation. The vulnerability affects Safari and related Apple platforms, with fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The issue could lead to an unexpected Safari crash when proce...

CVE-2010-1814

MiracleLinux AXSA:2011-34:01 documents CVE-2010-1814 as one of several WebKitGTK+ vulnerabilities. Affected package: webkitgtk-1.2.6-2.AXS4. The advisory indicates these issues are fixed in that release and lists multiple CVEs addressed, including CVE-2010-1814. Remediation is to upgrade to the r...

CVE-2011-1451

Technical details for CVE-2011-1451 are not publicly provided in the connected documents. Available information only references a Chrome issue with DOM id maps and potential dangling pointers. Monitor for updates.

CVE-2011-2823

CVE-2011-2823 affects Google Chrome before 13.0.782.215. The vulnerability is a use-after-free in the line box handling, enabling remote denial of service and possibly other impact. The provided connected sources confirm the Chrome-specific root cause and vulnerable component, but do not specify ...

CVE-2016-4614

CVE-2016-4614 affects libxml2 used by Apple platforms (iOS before 9.3.3, OS X before 10.11.6, iTunes/iCloud on Windows, tvOS, watchOS). The base description notes memory corruption with remote triggering via unknown vectors, and potential unspecified impact. Connected documents corroborate libxml...

CVE-2016-4631

CVE-2016-4631 affects Apple ImageIO's TIFF handling across iOS before 9.3.3, macOS before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2. The issue is a memory corruption/heap overflow in TIFF tile processing inside ImageIO, caused by reading tiles into a buffer sized for a minimal tile (ti...

CVE-2017-11121

CVE-2017-11121 affects Broadcom BCM4355C0 Wi‑Fi chips (and related devices). Malicious over‑the‑air Fast Transition frames can trigger internal Wi‑Fi firmware heap and/or stack overflows, potentially causing denial of service or other effects. Documents specify the root cause as memory corruption...

CVE-2017-13854

CVE-2017-13854 affects Apple kernels across iOS <11, macOS <10.13, tvOS <11, and watchOS

CVE-2018-4247

CVE-2018-4247 affects Safari before 11.1.1 and iOS before 11.4. The issue involves the Safari/WebKit component and allows a remote attacker to cause a denial of service via a crafted website. Apple’s advisories indicate this was mitigated in Safari 11.1.1 and iOS 11.4 with improved input/validati...

CVE-2018-4304

CVE-2018-4304 is a denial-of-service vulnerability tied to Apple’s input validation in text handling. According to the Apple advisories, affected products include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The root cause is an input/validation issue that could be exploited to di...

CVE-2018-4412

CVE-2018-4412: Apple memory-corruption issue fixed with improved input validation. Affected: iOS

CVE-2019-6231

CVE-2019-6231 refers to an out-of-bounds read in CoreAnimation that could allow a malicious app to read restricted memory. The issue was addressed with improved bounds checking and is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3. Connected Apple advisories HT209447 (t...

CVE-2019-8531

CVE-2019-8531 is a validation issue in Apple’s Trust Anchor Management that could allow an untrusted radius server certificate to be trusted. The issue has a fixed validation pathway and patches were released across multiple Apple platforms: watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019...

CVE-2019-8798

CVE-2019-8798 is a memory corruption vulnerability reported in Apple OS components that could allow an application to execute arbitrary code with system privileges. The NVD and Red Hat records mirror the Apple advisory, noting fixes in iOS 13.2 / iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, an...

CVE-2019-8804

CVE-2019-8804 affects Apple iOS/iPadOS Setup Assistant. The issue: an inconsistency in Wi‑Fi network configuration handling during device setup could allow an attacker in physical proximity to redirect a user to a malicious Wi‑Fi network. Root cause is a faulty state/network configuration flow wi...

CVE-2019-8854

CVE-2019-8854 affects Apple devices by addressing a user privacy issue where watchOS, iOS, macOS, and tvOS could be passively tracked via the Wi‑Fi MAC address. The root cause was the broadcast MAC address being exposed; Apple mitigated this by removing the broadcast MAC address. Patches are deli...

CVE-2020-29615

CVE-2020-29615 affects Apple platforms (watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3) with an out-of-bounds read in image processing. The issue was addressed by improved input validation; processing a mali...

CVE-2020-9809

CVE-2020-9809 describes an information-disclosure issue in Apple systems where a malicious application could determine the kernel memory layout. The vulnerability is addressed by fixes in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, indicating a defense-in-dep...

CVE-2020-9826

CVE-2020-9826 is an input-validation related DoS in Apple platforms. Apple’s security entries (iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5) indicate a remote attacker can cause a denial of service by exploiting an input validation flaw. Root cause: improper input validation that leads to abnorm...

CVE-2020-9885

CVE-2020-9885 concerns iMessage tapbacks handling. The issue allowed a removed user from an iMessage group to rejoin the group, and Apple fixed it by adding verification. Affected platforms include iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. Remediation is to...

CVE-2020-9900

CVE-2020-9900 involves a path validation issue in the symlink handling within Apple’s Crash Reporter pathway affecting multiple Apple OS variants (iOS/iPadOS, macOS, tvOS, watchOS). The root cause is improper path sanitization during symlink validation, enabling a local attacker to elevate privil...

CVE-2020-9965

CVE-2020-9965 is an out-of-bounds read in Disk Images that Apple fixes with improved input validation across macOS Big Sur 11.0.1 and related OS versions (watchOS 7.0, tvOS 14.0, iOS/iPadOS 14.0). The bulletin notes that an affected application may be able to execute arbitrary code with kernel pr...

CVE-2021-1785

CVE-2021-1785 describes an out-of-bounds read that was addressed by improved input validation in Apple platforms. The fix applies to macOS Big Sur 11.2, Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4. The vulnerability could allow arbitrary cod...

CVE-2021-30770

CVE-2021-30770 is a kernel‑level logic issue in Apple devices (iOS 14.7, tvOS 14.7, watchOS 7.6). An attacker who already has kernel code execution may bypass kernel memory mitigations due to a validation issue in the Kernel. The fix is included in the 14.7 updates; no exploitation status is repo...

CVE-2021-30820

CVE-2021-30820 is a logic issue in Apple’s iOS/iPadOS Bluetooth stack that could allow a remote attacker to execute arbitrary code. Apple’s security content (iOS 14.8/iPadOS 14.8) states the flaw was fixed in these updates, with the issue described as a logic/state-management problem within Bluet...

CVE-2022-32870

CVE-2022-32870 is a logic issue fixed in Apple platforms (iOS 16, macOS Ventura 13, watchOS 9) that could allow a user with physical access to a device to use Siri to obtain some call history information. The root cause is described as improved state management. Public references in the CVE entry...

CVE-2022-32879

CVE-2022-32879 corresponds to a logic/state-management issue in Apple platforms that could allow a user with physical access to view contacts from the lock screen. Connected sources provide concrete details: affected modalities are macOS, iOS, iPadOS, watchOS, and tvOS; root cause stated as a log...

CVE-2022-42793

CVE-2022-42793 concerns a vulnerability where code signing validation could be bypassed due to inadequate checks. The issue affects Apple platforms and was addressed by improving code signing validation in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7, iPadOS 15.7, and macOS Monterey 12....

CVE-2023-32407

CVE-2023-32407 describes a logic issue in Apple platforms that could allow an app to bypass Privacy preferences. Affected components are not explicitly enumerated in the provided documents, but constants indicate multiple Apple OSes are impacted (watchOS, tvOS, macOS, iOS, iPadOS) with versions l...

CVE-2023-38612

CVE-2023-38612 affects Apple platforms where an app may access protected user data due to insufficient checks. The vulnerability is addressed by updates: macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14, iOS 16.7/iPadOS 16.7, and iOS 17/iPadOS 17. The issue was mitigated by improved check...

CVE-2023-41070

CVE-2023-41070 is an Apple vulnerability: a logic issue in the sharing flow could allow an app to access sensitive data logged when a user shares a link. Affected products include macOS (Ventura 13.6 and Sonoma 14), iOS (16.7 and 17), iPadOS (16.7 and 17), and watchOS (10). The issue is fixed in ...

CVE-2023-41986

CVE-2023-41986 affects Apple platforms; an app may be able to modify protected parts of the file system. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Attack vector is local with user interaction required; no exploitation status is provided beyond the fix in these OS versions. Rem...

CVE-2023-42888

CVE-2023-42888 (Apple iOS/iPadOS/WebKit) is an in-process vulnerability where processing a maliciously crafted image could disclose process memory. The issue is addressed in multiple Apple OS updates: iOS 16.7.5/iPadOS 16.7.5, iOS 17.2, iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonom...

CVE-2024-23218

CVE-2024-23218 : A timing side-channel in CoreCrypto could allow decrypting legacy RSA PKCS#1 v1.5 ciphertexts without the private key. Apple patched this in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, and iOS/iPadOS 17.3. The connected sources corroborate the vulnerability and the listed fixes; ...

CVE-2025-24173

The CVE-2025-24173 issue involves insufficient entitlement checks that could allow an app to escape its sandbox. Affected products/versions include visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Impact is high (CVE-...

CVE-2025-24205

The CVE-2025-24205 entry concerns an authorization issue in Apple platforms that could let an app access user-sensitive data. The connected sources confirm affected products and versions and provide remediation details: macOS Ventura 13.7.5; iOS 18.4 and iPadOS 18.4; iPadOS 17.7.6; macOS Sequoia ...

CVE-2025-31223

CVE-2025-31223 affects Apple platforms (watchOS, tvOS, iOS, iPadOS, macOS Sequoia, visionOS, Safari). The issue involves memory corruption triggered by processing maliciously crafted web content. It is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, and ...

CVE-2025-43228

CVE-2025-43228 affects Apple WebKit components used by iOS 18.6, iPadOS 18.6, and Safari 18.6. The description indicates the issue was mitigated by an improved UI and is fixed in the listed Apple platforms. The primary impact stated is address bar spoofing when a user visits a malicious website, ...

CVE-2026-28995

CVE-2026-28995 describes a logic issue that could allow a malicious app to break out of its sandbox. It affects Apple platforms including iOS/iPadOS versions 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Apple states the fix is in these versions; no public exploit...

CVE-2026-43701

CVE-2026-43701 affects Apple's WebKit/Safari stack. The vulnerability allows a malicious website to process restricted web content outside the sandbox, with a network attack vector and no user interaction required per CVSS. Root cause involves checks in web content handling that could bypass sand...

CVE-2026-43715

CVE-2026-43715 is a use-after-free vulnerability in WebKit components affecting Safari, iOS, iPadOS, and macOS Tahoe. The issue arises from memory mismanagement that may lead to memory corruption when processing malicious web content. It is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and m...

CVE-2026-64739

CVE-2026-64739 is an out-of-bounds write vulnerability in Apple platforms. Affected products include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Root cause: memory bounds checking deficiency leading to an out-o...

CVE-2009-1702

CVE-2009-1702 is an XSS vulnerability in WebKit used by Apple Safari and the iPhone OS Safari implementation, allowing remote attackers to inject arbitrary web script or HTML via improper handling of Location and History objects. Affected products include Safari

CVE-2011-2788

Technical details for CVE-2011-2788 are not publicly available in the provided documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates from official advisories and vulnerability feeds.