CVE-2026-28995

CVE-2026-28995 describes a logic issue that could allow a malicious app to break out of its sandbox. It affects Apple platforms including iOS/iPadOS versions 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Apple states the fix is in these versions; no public exploit...

CVE-2026-43701

CVE-2026-43701 affects Apple's WebKit/Safari stack. The vulnerability allows a malicious website to process restricted web content outside the sandbox, with a network attack vector and no user interaction required per CVSS. Root cause involves checks in web content handling that could bypass sand...

CVE-2026-43715

CVE-2026-43715 is a use-after-free vulnerability in WebKit components affecting Safari, iOS, iPadOS, and macOS Tahoe. The issue arises from memory mismanagement that may lead to memory corruption when processing malicious web content. It is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and m...

CVE-2009-1702

CVE-2009-1702 is an XSS vulnerability in WebKit used by Apple Safari and the iPhone OS Safari implementation, allowing remote attackers to inject arbitrary web script or HTML via improper handling of Location and History objects. Affected products include Safari

CVE-2011-2788

Technical details for CVE-2011-2788 are not publicly available in the provided documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates from official advisories and vulnerability feeds.

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2011-3069

Technical details for CVE-2011-3069 are not publicly available in the provided documents; monitor for updates.

CVE-2017-13783

CVE-2017-13783 impacts Apple WebKit across multiple platforms (iOS 11.1 and earlier, Safari 11.0.1 and earlier, iCloud/iTunes on Windows, tvOS 11.1). The issue is a memory corruption vulnerability in WebKit that could allow remote attackers to execute arbitrary code or cause a denial of service v...

CVE-2017-13788

CVE-2017-13788 affects Apple WebKit so that processing malicious web content could lead to arbitrary code execution or memory corruption on Apple devices. The Apple advisories correlate this with WebKit issues addressed in iOS 11.1 (and Safari 11.0.1) and tvOS 11.1, with WebKit memory-corruption ...

CVE-2017-7171

CVE-2017-7171 affects CoreAnimation in Apple products: iOS <11.2, macOS <10.13.2, tvOS <11.2, watchOS

CVE-2018-4100

CVE-2018-4100 affects Apple devices through the LinkPresentation component. A crafted text message may cause resource exhaustion leading to denial of service. Affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, and watchOS prior to 4.2.2. Apple issued fixes in iOS 11.2.5, macOS...

CVE-2018-4124

CVE-2018-4124 affects Apple CoreText across iOS (<11.2.6), macOS (<10.13.3 Supplemental Update), tvOS (<11.2.6), and watchOS (

CVE-2018-4142

CVE-2018-4142 affects Apple devices running iOS < 11.3, macOS < 10.13.4, tvOS < 11.3, and watchOS

CVE-2018-4167

CVE-2018-4167 affects Apple devices (iOS <11.3, macOS <10.13.4, tvOS <11.3, watchOS

CVE-2018-4221

CVE-2018-4221 affects Apple products: iOS before 11.4 and macOS before 10.13.5, in the Security component. The issue allows websites to track users by abusing the transmission/validation of S/MIME client certificates. Public docs in the Apple security updates reference show this vulnerability und...

CVE-2018-4302

CVE-2018-4302 describes a null pointer dereference in processing maliciously crafted XML that could cause an app to terminate or execute arbitrary code. The issue is associated with libxml2 and is fixed across Apple platforms: macOS High Sierra 10.13, iOS 11, watchOS 4, and iCloud for Windows 7.0...

CVE-2019-6235

CVE-2019-6235 is an Apple memory-corruption issue fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, and iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions. The fix is described as improved validation. Apple advisories HT209443/HT2094...

CVE-2020-10017

CVE-2020-10017 is an out-of-bounds write in Apple's audio handling that could allow arbitrary code execution. Apple’s advisories (HT211929/HT211930) state the issue affects CoreAudio across macOS Big Sur 11.0.x and iOS/iPadOS 14.2 (also tvOS 14.2 and watchOS 7.1), with fixed patches in those OS u...

CVE-2020-9963

CVE-2020-9963 is fixed in macOS Big Sur 11.0.1, iOS 14.0, and iPadOS 14.0. The issue arises from icon-cache handling, where a malicious app could determine whether files exist on the host. The RedHat/Apple documentation attributes the fix to improved handling of icon caches. Practical impact is i...

CVE-2020-9975

CVE-2020-9975 is a use-after-free memory corruption issue that, if exploited, could allow an attacker to execute arbitrary code with kernel privileges. Public details in the initial description indicate this vulnerability affects macOS kernel (XNU) and related Apple OS components, with root cause...

CVE-2021-1807

CVE-2021-1807 is an Apple Safari input validation issue that allows a local user to write arbitrary files. The vulnerability stems from inadequate input sanitization; it is fixed in iOS 14.5 / iPadOS 14.5 / watchOS 7.4. Affected products include Apple Safari on those platforms. The CVE entry note...

CVE-2021-30786

CVE-2021-30786 is an Apple-specific vulnerability describing a race condition in the handling of certain PDF content that could cause an unexpected termination or arbitrary code execution. The issue is tied to PDF processing and is stated to be fixed in iOS 14.7 and macOS Big Sur 11.5 via improve...

CVE-2021-30800

CVE-2021-30800 affects Apple iOS/iPadOS (Wi‑Fi module). A vulnerability existed that could allow joining a malicious Wi‑Fi network to cause a denial of service or arbitrary code execution. Apple fixed it in iOS 14.7 (iPadOS 14.7).

CVE-2021-30811

CVE-2021-30811 is an Apple security issue affecting iOS/iPadOS, watchOS with the AppleMobileFileIntegrity component. The underlying problem enabled a local attacker to read sensitive information. The CVE is fixed by Apple in iOS 15/iPadOS 15 and watchOS 8, addressing the issue through improved ch...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2023-40452

CVE-2023-40452 affects multiple Apple platforms (macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS/iPadOS 17, tvOS 17, watchOS 10). The root cause is improved bounds checks, and the issue allows an app to overwrite arbitrary files. The vulnerability is fixed in the listed OS versions;...

CVE-2024-23210

CVE-2024-23210 affects Apple platforms (macOS Sonoma 14.3, iOS/iPadOS 17.3, watchOS 10.3, tvOS 17.3). The issue, resolved by improved redaction of sensitive information, could allow an app to view a user’s phone number in system logs. Root cause details are not explicitly disclosed in the provide...

CVE-2024-23297

CVE-2024-23297 affects Apple’s tvOS, iOS, iPadOS and watchOS prior to updates; root cause described as improved checks, with the issue fixed in tvOS 17.4, iOS 17.4, iPadOS 17.4 and watchOS 10.4. The vulnerability could allow a malicious application to access private information. Connected sources...

CVE-2024-27830

CVE-2024-27830 is an Apple ecosystem issue resolved by improved state management. The vulnerability could let a malicious webpage fingerprint a user. Affected products include tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Exploitation details...

CVE-2024-27850

CVE-2024-27850 is specified as resolved by Apple with fixes in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. The issue arises from a flaw in the noise injection algorithm that potentially allows a malicious webpage to fingerprint a user. The connected documents corrobora...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2025-24182

An out-of-bounds read in font processing was fixed across Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. Root cause: input validation flaw in font handling leading to potential memory disclosure. Practical impact: confidential memory exposure if a malicio...

CVE-2025-24210

From the connected advisories, CVE-2025-24210 maps to a logic error fixed by Apple in multiple platform updates. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4; iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Issue: image parsing may disclose user informati...

CVE-2025-43272

CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...

CVE-2015-7068

CVE-2015-7068 concerns IOKit SCSI in Apple devices (iOS <9.2, OS X <10.11.2, tvOS <9.1, watchOS

CVE-2016-4615

CVE-2016-4615 is a libxml2 memory corruption vulnerability referenced in Apple security updates for iOS 9.3.3, OS X 10.11.6, iTunes Windows 12.4.2, iCloud Windows 5.2.1, tvOS 9.2.2, and watchOS 2.2.2. Descriptions indicate a remote attacker could trigger memory corruption with potential denial of...

CVE-2016-4708

CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...

CVE-2016-4730

CVE-2016-4730 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Root cause: memory corruption in WebKit when handling web c...

CVE-2017-13796

CVE-2017-13796 affects Apple’s WebKit across multiple platforms (iOS, Safari, tvOS, Windows iTunes/iCloud). The issue is due to memory corruption in WebKit that could allow remote attackers to execute arbitrary code or cause a crash via a crafted web page. Affected products include iOS before 11....

CVE-2018-4126

CVE-2018-4126 is an Apple memory-corruption issue affecting CFNetwork (and related memory handling paths) prior to the iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, and iCloud for Windows 7.7 releases. The description in the initial entry states a memory corruption vuln...

CVE-2018-4158

CVE-2018-4158 involves a race condition in Apple’s CoreFoundation component affecting iOS prior to 11.3, macOS prior to 10.13.4, and watchOS prior to 4.3. Exploitation via a crafted app could allow an attacker to execute arbitrary code with elevated privileges. Apple’s security updates for iOS 11...

CVE-2018-4203

CVE-2018-4203 describes an out-of-bounds read that was addressed by improved bounds checking. The Apple advisories indicate this affected multiple platforms prior to updates: iOS before 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat entry reiterates the same issue and scope. Remediat...

CVE-2018-4248

CVE-2018-4248 is an Apple libxpc out-of-bounds read vulnerability disclosed across multiple Apple advisories. Affected products include iOS prior to 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, and watchOS 4.3.2, with the root cause described as an out-of-bounds read that was addressed by impr...

CVE-2018-4347

CVE-2018-4347 is a use-after-free memory corruption issue in CoreText, affecting iOS ≤11, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes for Windows 12.9, and iCloud for Windows 7.7. Apple confirms a patch in iOS 12, macOS Mojave 10.14, watchOS 5, tvOS 12, and relevant Windows updates (HT209106/H...

CVE-2018-4408

CVE-2018-4408 is an Apple memory-corruption vulnerability caused by insufficient input validation. It affects multiple Apple platforms (iOS, macOS, tvOS, watchOS) with the issue described as a memory corruption due to input validation weaknesses; Apple advisories indicate patches/liberation via i...

CVE-2018-4426

CVE-2018-4426 is an Apple memory corruption vulnerability affecting pre-12.x macOS Mojave, iOS 12, tvOS 12 and watchOS 5, addressed by Apple in subsequent security updates. The description states the issue was mitigated by improved memory handling. Public documentation in connected items confirms...

CVE-2019-8502

CVE-2019-8502 affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2) where an API handling dictation requests contained validation issues. The root cause is improper handling/validation in dictation initiation, allowing a malicious app to initiate a Dictation request wit...