CVE-2019-8668

CVE-2019-8668 affects Apple’s image processing path and can cause a denial-of-service when processing a maliciously crafted image. The issue is fixed in iOS 12.4, tvOS 12.4, and watchOS 5.3. Affected products involve iPhone/iPad/iPod touch platforms running iOS and corresponding Apple TV and Appl...

CVE-2020-27909

CVE-2020-27909 affects Apple CoreAudio across Apple platforms (iOS/iPadOS, macOS/iPadOS/tvOS/watchOS) via processing a maliciously crafted audio file. The issue is an out-of-bounds read that was addressed with improved input validation and is fixed in iOS 14.2 and iPadOS 14.2 (also reflected for ...

CVE-2020-27920

CVE-2020-27920 is a use-after-free vulnerability fixed in Apple platforms. The issue, described as a use-after-free leading to code execution when processing maliciously crafted web content, affects macOS Big Sur (11.0.1 and 11.1), Catalina (Security Update 2020-001) and Mojave (Security Update 2...

CVE-2020-3880

The CVE-2020-3880 entry concerns an out-of-bounds read in image processing that Apple fixed via improved input validation. Affected platforms include watchOS 6.1.2; iOS 13.3.1 and iPadOS 13.3.1; tvOS 13.3.1; macOS Catalina 10.15.3; Security Update 2020-001 Mojave; Security Update 2020-001 High Si...

CVE-2020-9821

CVE-2020-9821 is a memory corruption vulnerability in Apple’s kernel that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s security updates indicate this issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5...

CVE-2020-9823

The CVE-2020-9823 issue affects Apple iOS/iPadOS Messages, where after being removed from an iMessage conversation an attacker may still alter the conversation state. Apple’s advisory indicates the root cause was addressed by improved checks, and the fix is delivered in iOS 13.5 and iPadOS 13.5. ...

CVE-2020-9892

CVE-2020-9892 affects Apple platforms (iOS, iPadOS, macOS Catalina, tvOS, watchOS). Description: memory corruption issues addressed with improved state management, allowing arbitrary code execution with system/kernel privileges if exploited by a malicious app. Remediation: fixed in iOS 13.6/iPadO...

CVE-2020-9977

CVE-2020-9977 involves a validation issue in the entitlement verification for Safari open tabs exposure. According to official Apple advisories, the vulnerability was addressed by improved validation of the process entitlement and is fixed in macOS Big Sur 11.0.1 as well as iOS 14.0 and iPadOS 14...

CVE-2021-1756

CVE-2021-1756 is an iOS/iPadOS vulnerability described as a lock screen issue that could allow access to private contacts on a device with physical access. The root cause relates to state management around contact handling on the lock screen; Apple fixed it in iOS 14.4 / iPadOS 14.4. The CVE is l...

CVE-2021-1763

CVE-2021-1763 – Apple USD processing buffer overflow : The issue affects macOS Big Sur 11.2, macOS Catalina 10.15.7 (Security Update 2021-001 Catalina), macOS Mojave 10.14.6 (Security Update 2021-001 Mojave), and iOS/iPadOS 14.4. Root cause: a buffer overflow in USD file processing, addressed by ...

CVE-2021-1807

CVE-2021-1807 is an Apple Safari input validation issue that allows a local user to write arbitrary files. The vulnerability stems from inadequate input sanitization; it is fixed in iOS 14.5 / iPadOS 14.5 / watchOS 7.4. Affected products include Apple Safari on those platforms. The CVE entry note...

CVE-2021-30771

The CVE-2021-30771 entry affects Apple’s FontParser component (macOS Big Sur 11.4, iOS 14.6/iPadOS 14.6, watchOS 7.5, tvOS 14.6). It is caused by an out-of-bounds write when processing a maliciously crafted font file, with the impact described as arbitrary code execution. Apple’s advisory indicat...

CVE-2021-30804

CVE-2021-30804 is an Apple iOS/iPadOS vulnerability describing a permissions issue that could allow a malicious app to access Find My data. The issue is resolved in iOS 14.7 (and iPadOS 14.7). Connected sources corroborate the vulnerability as a Find My data access permission problem fixed by App...

CVE-2021-30840

This CVE (CVE-2021-30840) concerns Apple’s FontParser handling of dfont files. A maliciously crafted dfont could lead to arbitrary code execution due to a vulnerability in font processing. Apple indicates the issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Connected sources also align...

CVE-2021-30925

CVE-2021-30925 affects Apple platforms (watchOS, macOS Big Sur, iOS, iPadOS) via a sandbox/privacy logic issue where a malicious app could bypass Privacy preferences. Root cause described as improved permissions logic; impact is exposure of restricted data due to bypass. Fixes exist in watchOS 8,...

CVE-2021-30973

CVE-2021-30973 is an out-of-bounds read vulnerability addressed by improved input validation. The issue, which could disclose user information when processing a maliciously crafted file, is fixed in Apple platforms: macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, and Security...

CVE-2021-30996

CVE-2021-30996 is a race condition affecting Apple platforms (notably IOMobileFrameBuffer and Kernel components) that could allow a malicious app to execute arbitrary code with kernel privileges. It was fixed in macOS Monterey 12.1 and iOS 15.2 / iPadOS 15.2. Public details in connected sources c...

CVE-2022-32914

Technical details about CVE-2022-32914 are not provided in the connected documents. Monitor for updates from vendor advisories and security feeds for confirmed impact, affected products, and remedies.

CVE-2022-46717

Apple CVE-2022-46717 affects iOS 16.2 and iPadOS 16.2. A logic issue in accessibility features could allow a user with physical access to a locked Apple Watch to view photos. Root cause described as a logic issue with improved restrictions; remediation is patching in iOS 16.2 and iPadOS 16.2. Con...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-40434

CVE-2023-40434 describes a configuration issue in Apple platforms that could allow an app to access a user’s Photos Library. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Affected products include iPhone, iPad, and macOS devices running the listed versions. The underlying cause is...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2023-42947

CVE-2023-42947 is a path handling issue in Apple platforms that could allow an app to escape its sandbox. The description specifies a fix through updated validation and lists affected Apple OS versions: macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2...

CVE-2024-23259

CVE-2024-23259 affects Apple systems (notably macOS Sonoma 14.4, Safari/WebKit components) where processing web content may lead to a denial-of-service. Apple’s advisory indicates fixes in macOS Sonoma 14.4 and various iOS/iPadOS versions (iOS 16.7.6, iPadOS 16.7.6, iOS 17.4, iPadOS 17.4). The NV...

CVE-2024-27852

CVE-2024-27852 is a privacy issue in Apple’s MarketplaceKit component affecting iOS/iPadOS prior to 17.5. The root cause is improper client ID handling for alternate app marketplaces, enabling a malicious webpage to cause a script to track users across sites. Official advisories state the issue i...

CVE-2024-44242

CVE-2024-44242 affects Apple iOS and iPadOS with a DCP firmware issue due to insufficient bounds checks. Affected software: iOS before 18.1 and iPadOS before 18.1 (Apple states the fix is in iOS 18.1/iPadOS 18.1). Impact per documents: attacker could trigger unexpected system termination or arbit...

CVE-2025-24107

CVE-2025-24107 describes a local permissions issue in the Apple kernel that could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3, and iPadOS 18.3. CVSS v3.1 metrics indicate a local attack vector, low privileges r...

CVE-2025-24144

The CVE-2025-24144 information disclosure issue is fixed in Apple OS releases: macOS Sequoia 15.3, macOS Sonoma 14.7.6, visionOS 2.3, iPadOS 17.7.7, iPadOS 18.3, iOS 18.3, macOS Ventura 13.7.6, and watchOS 11.3. The root cause is described as removal of the vulnerable code, leading to potential l...

CVE-2025-24145

CVE-2025-24145 describes a privacy issue where an app may view a contact’s phone number in system logs. Affected products updated: macOS Sequoia 15.3, iOS 18.3, iPadOS 18.3. Root cause relates to private data redaction in log entries; remediation is to apply the updates listed (Sequoia 15.3, iOS ...

CVE-2026-43810

CVE-2026-43810 involves a memory-handling issue in Apple OS components that could allow a remote user to terminate a system or corrupt kernel memory. The fixed versions are: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26...

CVE-2026-65333

A WebKit memory-corruption vulnerability (CVE-2026-65333) was addressed through improved state management, as noted in Apple's macOS Tahoe 26.6.2 security bulletin. Processing maliciously crafted web content can crash Safari, causing a denial-of-service condition. CVSS 3.1 scores it 4.3 (MEDIUM) ...

CVE-2011-1109

CVE-2011-1109 affects Google Chrome prior to 9.0.597.107. It describes a vulnerability in how CSS stylesheet nodes are processed, which can lead to a denial of service or unspecified impact via a stale pointer. The exact exploit vectors are not detailed in the provided documents. The CVSS base sc...

CVE-2011-1295

The CVE-2011-1295 entry concerns WebKit used by Google Chrome (pre-10.0.648.204) and Safari (pre-5.0.6). The root cause is improper handling of DOM node parentage in WebKit, which can lead to DOM tree corruption. Consequences stated in the sources include remote denial of service, cross-site scri...

CVE-2011-3016

CVE-2011-3016 involves a use-after-free in Google Chrome prior to 17.0.963.56, tied to a read-after-free issue with counter nodes. The vulnerability could allow remote attackers to cause a denial of service and potentially other unspecified impacts. Public exploitation details beyond the basic de...

CVE-2011-3034

CVE-2011-3034 is a use-after-free in SVG document handling in Google Chrome up to version 17.0.963.65, potentially causing a remote denial of service (and possibly other impact) via SVG vectors. The connected documents confirm the CVE is referenced in Chrome’s 2012 updates, and show related patch...

CVE-2015-3748

CVE-2015-3748 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8, 7.x before 7.1.8, 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption in WebKit. The description...

CVE-2017-7029

CVE-2017-7029 affects Apple devices with a Kernel memory access issue. A crafted iOS app can bypass memory-read restrictions, potentially exposing restricted memory. Affected software: iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, watchOS

CVE-2018-4155

CVE-2018-4155 involves a race condition in the CoreFoundation component affecting iOS before 11.3, macOS before 10.13.4, tvOS before 11.3, and watchOS before 4.3. Exploitation would allow a crafted app to execute arbitrary code with elevated privileges in a privileged context. Apple security note...

CVE-2018-4271

CVE-2018-4271 describes multiple memory corruption issues in Apple software that were mitigated by improved input validation. Public references indicate the affected products include iOS (versions prior to 11.4.1), tvOS (prior to 11.4.1), watchOS (prior to 4.3.2), Safari (prior to 11.1.2), iTunes...

CVE-2018-4310

CVE-2018-4310 is an Apple vulnerability described as an access issue that was mitigated by adding sandbox restrictions. Public details confirm affected platforms are iOS versions prior to 12.x and macOS Mojave 10.14, with remediation delivered via Apple security updates HT209193/HT209139 and rela...

CVE-2018-4340

CVE-2018-4340 is a memory corruption vulnerability addressed by Apple across multiple platforms. The issue affected macOS Mojave 10.14 and earlier, iOS prior to 12, watchOS 5, and tvOS 12, arising from memory handling that could be exploited locally. Red Hat’s CVE entry reiterates the same descri...

CVE-2018-4384

CVE-2018-4384 is a memory corruption issue described as a kernel heap corruption in video processing that affected iOS versions prior to 12.1 and watchOS 5.1. The description consistently attributes the root cause to memory corruption mitigated by improved input validation. Public references indi...

CVE-2019-8527

CVE-2019-8527 involves a buffer overflow that Apple addressed by improving size validation. Affected platforms include iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Root cause: insufficient size validation leading to memory corruption. Impact per description: a remote attacker could...

CVE-2019-8545

CVE-2019-8545 is an Apple IOHIDFamily memory corruption issue disclosed across Apple advisories and is addressed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The Red Hat/Apple-NVD entries confirm a local, memory corruption vulnerability that could allow a local attacker to termi...

CVE-2019-8633

CVE-2019-8633 corresponds to a kernel validation issue in Apple OS components where an application may read restricted memory. The connected Apple advisories confirm the root cause as a validation issue with input sanitization in the Kernel, affecting macOS Sierra, High Sierra, and Mojave. The vu...

CVE-2019-8788

CVE-2019-8788 stems from an information-disclosure risk in Apple’s Associated Domains URL parsing. The issue arises from improper URL handling, potentially enabling data exfiltration. Publicly documented fixes indicate that this was addressed through improved input validation and is resolved in: ...

CVE-2019-8789

The CVE-2019-8789 entry affects Apple Books in macOS Catalina (before 10.15.1), iOS, and iPadOS where a validation issue in handling symlinks could lead to disclosure of user information via a maliciously crafted iBooks file. Root cause: inadequate validation of symlinks within Books parsing. Imp...

CVE-2020-27905

CVE-2020-27905 is a memory corruption issue addressed by Apple in iOS 14.2, iPadOS 14.2, tvOS 14.2, and watchOS 7.1. The vulnerability could allow a malicious application to execute arbitrary code with system privileges. The NVD entry notes a local attack vector with low attack complexity and use...

CVE-2020-27910

CVE-2020-27910 affects Apple audio handling across macOS Big Sur 11.0.1 and iOS 14.2/iPadOS 14.2 (also tvOS 14.2, watchOS 7.1). The issue is described as an out-of-bounds read in audio processing, mitigated by improved input validation and addressed in the listed updates. Impact per document: pro...