CVE-2024-27802

CVE-2024-27802 involves an out-of-bounds read addressed by improved input validation in Apple platforms. Affected products include macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8/iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5/iPadOS 17.5, and macOS Sonoma 14.5. The issue arises when pro...

CVE-2024-27803

CVE-2024-27803 affects Apple iOS and iPadOS prior to 17.5; the issue is a permissions validation flaw that could allow sharing items from a device’s lock screen. Apple fixed it in iOS 17.5 and iPadOS 17.5. The description indicates a local/physical-access vector, with no explicit exploitation det...

CVE-2011-2788

Technical details for CVE-2011-2788 are not publicly available in the provided documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates from official advisories and vulnerability feeds.

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2011-3069

Technical details for CVE-2011-3069 are not publicly available in the provided documents; monitor for updates.

CVE-2017-13783

CVE-2017-13783 impacts Apple WebKit across multiple platforms (iOS 11.1 and earlier, Safari 11.0.1 and earlier, iCloud/iTunes on Windows, tvOS 11.1). The issue is a memory corruption vulnerability in WebKit that could allow remote attackers to execute arbitrary code or cause a denial of service v...

CVE-2017-13788

CVE-2017-13788 affects Apple WebKit so that processing malicious web content could lead to arbitrary code execution or memory corruption on Apple devices. The Apple advisories correlate this with WebKit issues addressed in iOS 11.1 (and Safari 11.0.1) and tvOS 11.1, with WebKit memory-corruption ...

CVE-2017-7171

CVE-2017-7171 affects CoreAnimation in Apple products: iOS <11.2, macOS <10.13.2, tvOS <11.2, watchOS

CVE-2018-4100

CVE-2018-4100 affects Apple devices through the LinkPresentation component. A crafted text message may cause resource exhaustion leading to denial of service. Affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, and watchOS prior to 4.2.2. Apple issued fixes in iOS 11.2.5, macOS...

CVE-2018-4124

CVE-2018-4124 affects Apple CoreText across iOS (<11.2.6), macOS (<10.13.3 Supplemental Update), tvOS (<11.2.6), and watchOS (

CVE-2018-4142

CVE-2018-4142 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4167

CVE-2018-4167 affects Apple devices (iOS <11.3, macOS <10.13.4, tvOS <11.3, watchOS

CVE-2018-4221

CVE-2018-4221 affects Apple products: iOS before 11.4 and macOS before 10.13.5, in the Security component. The issue allows websites to track users by abusing the transmission/validation of S/MIME client certificates. Public docs in the Apple security updates reference show this vulnerability und...

CVE-2018-4302

CVE-2018-4302 describes a null pointer dereference in processing maliciously crafted XML that could cause an app to terminate or execute arbitrary code. The issue is associated with libxml2 and is fixed across Apple platforms: macOS High Sierra 10.13, iOS 11, watchOS 4, and iCloud for Windows 7.0...

CVE-2019-6235

CVE-2019-6235 is an Apple memory-corruption issue fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, and iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions. The fix is described as improved validation. Apple advisories HT209443/HT2094...

CVE-2020-10017

CVE-2020-10017 is an out-of-bounds write in Apple's audio handling that could allow arbitrary code execution. Apple’s advisories (HT211929/HT211930) state the issue affects CoreAudio across macOS Big Sur 11.0.x and iOS/iPadOS 14.2 (also tvOS 14.2 and watchOS 7.1), with fixed patches in those OS u...

CVE-2020-9963

CVE-2020-9963 is fixed in macOS Big Sur 11.0.1, iOS 14.0, and iPadOS 14.0. The issue arises from icon-cache handling, where a malicious app could determine whether files exist on the host. The RedHat/Apple documentation attributes the fix to improved handling of icon caches. Practical impact is i...

CVE-2020-9975

CVE-2020-9975 is a use-after-free memory corruption issue that, if exploited, could allow an attacker to execute arbitrary code with kernel privileges. Public details in the initial description indicate this vulnerability affects macOS kernel (XNU) and related Apple OS components, with root cause...

CVE-2021-30786

CVE-2021-30786 is an Apple-specific vulnerability describing a race condition in the handling of certain PDF content that could cause an unexpected termination or arbitrary code execution. The issue is tied to PDF processing and is stated to be fixed in iOS 14.7 and macOS Big Sur 11.5 via improve...

CVE-2021-30800

CVE-2021-30800 affects Apple iOS/iPadOS (Wi‑Fi module). A vulnerability existed that could allow joining a malicious Wi‑Fi network to cause a denial of service or arbitrary code execution. Apple fixed it in iOS 14.7 (iPadOS 14.7).

CVE-2021-30811

CVE-2021-30811 is an Apple security issue affecting iOS/iPadOS, watchOS with the AppleMobileFileIntegrity component. The underlying problem enabled a local attacker to read sensitive information. The CVE is fixed by Apple in iOS 15/iPadOS 15 and watchOS 8, addressing the issue through improved ch...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2022-22585

CVE-2022-22585 affects Apple platforms via a path validation/symlink handling issue. The root cause is inadequate path sanitization, allowing an application to access a user’s files. The vulnerability is fixed in iOS 15.3, iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, and macOS Big Su...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-40452

CVE-2023-40452 affects multiple Apple platforms (macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS/iPadOS 17, tvOS 17, watchOS 10). The root cause is improved bounds checks, and the issue allows an app to overwrite arbitrary files. The vulnerability is fixed in the listed OS versions;...

CVE-2024-23210

CVE-2024-23210 affects Apple platforms (macOS Sonoma 14.3, iOS/iPadOS 17.3, watchOS 10.3, tvOS 17.3). The issue, resolved by improved redaction of sensitive information, could allow an app to view a user’s phone number in system logs. Root cause details are not explicitly disclosed in the provide...

CVE-2024-23297

CVE-2024-23297 affects Apple’s tvOS, iOS, iPadOS and watchOS prior to updates; root cause described as improved checks, with the issue fixed in tvOS 17.4, iOS 17.4, iPadOS 17.4 and watchOS 10.4. The vulnerability could allow a malicious application to access private information. Connected sources...

CVE-2024-27830

CVE-2024-27830 is an Apple ecosystem issue resolved by improved state management. The vulnerability could let a malicious webpage fingerprint a user. Affected products include tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Exploitation details...

CVE-2024-27850

CVE-2024-27850 is specified as resolved by Apple with fixes in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. The issue arises from a flaw in the noise injection algorithm that potentially allows a malicious webpage to fingerprint a user. The connected documents corrobora...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2025-24182

An out-of-bounds read in font processing was fixed across Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. Root cause: input validation flaw in font handling leading to potential memory disclosure. Practical impact: confidential memory exposure if a malicio...

CVE-2025-24210

From the connected advisories, CVE-2025-24210 maps to a logic error fixed by Apple in multiple platform updates. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4; iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Issue: image parsing may disclose user informati...

CVE-2025-43272

CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...

CVE-2026-20608

CVE-2026-20608 is a vulnerability described as an issue resolved by improved state management that could cause an unexpected process crash when processing malicious web content. Public advisories confirm fixes across multiple platforms and packages: Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5 / iOS 2...

CVE-2015-7068

CVE-2015-7068 concerns IOKit SCSI in Apple devices (iOS <9.2, OS X <10.11.2, tvOS <9.1, watchOS

CVE-2016-4615

CVE-2016-4615 is a libxml2 memory corruption vulnerability referenced in Apple security updates for iOS 9.3.3, OS X 10.11.6, iTunes Windows 12.4.2, iCloud Windows 5.2.1, tvOS 9.2.2, and watchOS 2.2.2. Descriptions indicate a remote attacker could trigger memory corruption with potential denial of...

CVE-2016-4708

CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...

CVE-2016-4730

CVE-2016-4730 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Root cause: memory corruption in WebKit when handling web c...

CVE-2017-13796

CVE-2017-13796 affects Apple’s WebKit across multiple platforms (iOS, Safari, tvOS, Windows iTunes/iCloud). The issue is due to memory corruption in WebKit that could allow remote attackers to execute arbitrary code or cause a crash via a crafted web page. Affected products include iOS before 11....

CVE-2018-4126

CVE-2018-4126 is an Apple memory-corruption issue affecting CFNetwork (and related memory handling paths) prior to the iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, and iCloud for Windows 7.7 releases. The description in the initial entry states a memory corruption vuln...

CVE-2018-4158

CVE-2018-4158 involves a race condition in Apple’s CoreFoundation component affecting iOS prior to 11.3, macOS prior to 10.13.4, and watchOS prior to 4.3. Exploitation via a crafted app could allow an attacker to execute arbitrary code with elevated privileges. Apple’s security updates for iOS 11...

CVE-2018-4203

CVE-2018-4203 describes an out-of-bounds read that was addressed by improved bounds checking. The Apple advisories indicate this affected multiple platforms prior to updates: iOS before 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat entry reiterates the same issue and scope. Remediat...

CVE-2018-4248

CVE-2018-4248 is an Apple libxpc out-of-bounds read vulnerability disclosed across multiple Apple advisories. Affected products include iOS prior to 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, and watchOS 4.3.2, with the root cause described as an out-of-bounds read that was addressed by impr...

CVE-2018-4347

CVE-2018-4347 is a use-after-free memory corruption issue in CoreText, affecting iOS ≤11, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes for Windows 12.9, and iCloud for Windows 7.7. Apple confirms a patch in iOS 12, macOS Mojave 10.14, watchOS 5, tvOS 12, and relevant Windows updates (HT209106/H...

CVE-2018-4408

CVE-2018-4408 is an Apple memory-corruption vulnerability caused by insufficient input validation. It affects multiple Apple platforms (iOS, macOS, tvOS, watchOS) with the issue described as a memory corruption due to input validation weaknesses; Apple advisories indicate patches/liberation via i...

CVE-2018-4426

CVE-2018-4426 is an Apple memory corruption vulnerability affecting pre-12.x macOS Mojave, iOS 12, tvOS 12 and watchOS 5, addressed by Apple in subsequent security updates. The description states the issue was mitigated by improved memory handling. Public documentation in connected items confirms...

CVE-2019-8502

CVE-2019-8502 affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2) where an API handling dictation requests contained validation issues. The root cause is improper handling/validation in dictation initiation, allowing a malicious app to initiate a Dictation request wit...

CVE-2019-8505

CVE-2019-8505 affects Apple’s Safari Reader feature. The issue is a logic/validation problem in Safari Reader that can be triggered when loading a maliciously crafted webpage, enabling universal cross‑site scripting. Affected products are iOS and Safari; the vulnerability is addressed by the Appl...

CVE-2019-8638

CVE-2019-8638 is a memory corruption issue in WebKit-related components triggered by processing malicious web content, leading to arbitrary code execution. The CVE affects multiple Apple platforms and products, with fixes shipped in: iOS 12.2, watchOS 5.2, Safari 12.1, iCloud for Windows 7.11, an...