CVE-2020-9825

CVE-2020-9825 relates to an access issue in Apple’s Sandbox component where a malicious app could bypass Privacy preferences. Public details in the provided documents indicate the vulnerability is addressed by sandbox restrictions and fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5; Ap...

CVE-2021-1822

CVE-2021-1822 is described by Apple/security advisories as a logic issue in MobileInstallation that could allow a local user to modify protected parts of the file system. The vulnerability is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Connected sources corroborate that MobileI...

CVE-2021-30837

CVE-2021-30837 is an Apple memory issue that allows a local attacker to potentially execute arbitrary code with kernel privileges. It affects iOS 15, iPadOS 15, watchOS 8, and tvOS 15, with the vulnerability addressed by memory-handling improvements and patches in the documented OS versions. Conn...

CVE-2023-28202

CVE-2023-28202 relates to Apple systems where a firewall setting may fail to take effect after exiting Settings due to a state-management flaw. Affected products include iOS/iPadOS 16.x, watchOS 9.x, tvOS 16.x, and macOS Ventura 13.x. The issue is described as a state-management fix and is noted ...

CVE-2023-32372

CVE-2023-32372 is an Apple vulnerability: an out-of-bounds read in ImageIO was addressed by improved input validation. Affected software includes iOS 16.5 and iPadOS 16.5 (and related Apple OSes such as watchOS 9.5, tvOS 16.5, macOS Ventura 13.4). The root cause is an out-of-bounds read while pro...

CVE-2023-32392

The CVE-2023-32392 entry concerns a privacy issue where private location data could be exposed via log entry redaction. Apple fixed the flaw in multiple platforms: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5, and iPadOS 16.5. The underlying im...

CVE-2023-32408

CVE-2023-32408 is an Apple vulnerability where an app may read sensitive location information due to improved handling of caches. Affected: watchOS 9.5; tvOS 16.5; macOS Ventura 13.4; macOS Monterey 12.6.6; iOS 15.7.6 and 16.5; iPadOS 15.7.6 and 16.5. Root cause: improper cache handling leading t...

CVE-2024-40774

CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...

CVE-2024-40787

CVE-2024-40787 is a local, low-privilege impact issue in Apple platforms where an attacker could bypass internet permission prompts. The root cause involves the handling of user consent prompts, allowing a Shortcut to circumvent Internet permission requirements. Affected products/versions include...

CVE-2024-44164

This CVE (CVE-2024-44164) affects Apple platforms and describes a potential bypass of Privacy preferences. Public references indicate fixes in iOS 17.7 / iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The provided documents do not specify the affected product families, ...

CVE-2024-54486

CVE-2024-54486 involves memory disclosure triggered by processing a maliciously crafted font in Apple platforms. Connected sources confirm the issue affects Apple operating systems and fonts handling, with remediation in updates: iPadOS 17.7.3, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, Ventura 1...

CVE-2025-24198

CVE-2025-24198 is documented with concrete exploit chains in connected materials. The primary entry is a WebKit RCE (CVE-2025-24198) used to escape the Safari sandbox and reach a kernel R/W primitive via CVE-2025-24203 (VM_BEHAVIOR_ZERO_WIRED_PAGES). The Aether PoC describes Stage 1 as remote cod...

CVE-2025-24237

Vulnerability: CVE-2025-24237 is a buffer overflow in Apple’s OS stack that has been mitigated by improved bounds checking. Affected products and versions are listed in connected sources: visionOS 2.4; macOS Ventura 13.7.5; iOS 18.4 and iPadOS 18.4; iPadOS 17.7.6; macOS Sequoia 15.4; macOS Sonoma...

CVE-2025-30470

The CVE-2025-30470 entry corresponds to a path-handling issue in Apple Maps that could allow an app to read sensitive location information. Concrete details from connected sources show this flaw affecting Maps functionality on Apple Watch (watchOS 11.4 security content lists CVE-2025-30470 under ...

CVE-2025-43372

CVE-2025-43372 affects ImageIO on macOS Sonoma and related Apple OSes. The issue arises when processing a maliciously crafted media file, potentially causing an app termination or memory corruption. Apple fixed this with improved input validation, and the patch is included in macOS Sonoma 14.8.2 ...

CVE-2026-64774

CVE-2026-64774 is an integer overflow vulnerability addressed through improved input validation, fixed in Apple OS releases: iOS/iPadOS 26.6; macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6; tvOS 26.6; visionOS 26.6. The issue could allow a remote attacker to cause unexpected application terminat...

CVE-2010-3259

CVE-2010-3259 affects WebKit and WebKitGTK+ components across Safari and Chrome. Root cause: read access to images derived from CANVAS elements was not properly restricted, allowing a remote site to bypass the Same Origin Policy and obtain potentially sensitive image data. Affected versions inclu...

CVE-2011-1121

CVE-2011-1121 concerns Google Chrome prior to 9.0.597.107. The issue is an integer overflow in a TEXTAREA-related path, allowing a remote attacker to trigger a denial of service and potentially other impact. Affected product: Google Chrome (pre-9.0.597.107); root cause: integer overflow in a comp...

CVE-2011-2833

CVE-2011-2833 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. A crafted web site could cause remote code execution or memory corruption leading to an application crash. The initial description does not specify root cause details, affected components beyond WebKit, or concre...

CVE-2011-2857

Technical details for CVE-2011-2857 (Chrome use-after-free via focus controller) are not provided in the connected documents. Monitor for updates to confirm affected versions, impact, and remediation.

CVE-2011-3032

CVE-2011-3032 is a use-after-free vulnerability in Google Chrome's SVG value handling, affecting Chrome versions prior to 17.0.963.65. Remote attackers could cause a denial of service or possibly other impact via SVG value handling vectors. The issue is mitigated by updating Chrome to 17.0.963.65...

CVE-2011-3081

CVE-2011-3081 is a Use-after-free in Chromium/Google Chrome's floats handling. Affected: Chrome

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2016-1827

CVE-2016-1827 is a kernel heap overflow in the flow_divert path (flow_divert_handle_app_map_create) on macOS OS X and iOS, enabling local privilege escalation to kernel/privileged context or memory corruption via a crafted app. Exploitation requires root on affected platforms; an exploit exists i...

CVE-2016-1857

CVE-2016-1857 affects WebKit as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1. Root cause: memory corruption in WebKit via a crafted website, enabling remote code execution or a denial of service. Exploitation status: not detailed in provided docs. Mitigation: update ...

CVE-2016-4653

CVE-2016-4653 affects Apple’s kernel across iOS (before 9.3.3), OS X (before 10.11.6), tvOS (before 9.2.2), and watchOS (before 2.2.2). Root cause: memory corruption via unspecified vectors; results include local privilege escalation or potential denial of service. Remediation: apply the correspo...

CVE-2017-13802

CVE-2017-13802 affects WebKit in multiple Apple platforms (iOS before 11.1, Safari before 11.0.1, tvOS before 11.1, iCloud/iTunes on Windows). The issue allows remote code execution or memory corruption via crafted web content. Root cause: memory corruption in WebKit leading to arbitrary code exe...

CVE-2017-13905

CVE-2017-13905 is a race-condition vulnerability in Apple platforms that could allow an application to gain elevated privileges. The issue was mitigated by Apple through input/validation hardening and fixes across multiple OS updates: tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Updat...

CVE-2017-2505

CVE-2017-2505 affects Apple WebKit components used by iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit/JavaScriptCore pathways....

CVE-2018-4293

CVE-2018-4293 is a cookie management issue in CFNetwork affecting iOS, macOS High Sierra, tvOS, watchOS, iTunes for Windows and iCloud for Windows; fixed by Apple in iOS 11.4.1 and macOS High Sierra 10.13.6 (Security Update 2018-004) with improved checks for cookies. The connected Red Hat/Apple s...

CVE-2018-4400

CVE-2018-4400 is a validation issue addressed by Apple in the macOS/iOS/watchOS stack. The vulnerability affected versions prior to iOS 12.1, macOS Mojave 10.14.1, and watchOS 5.1, with impact arising while processing certain signed S/MIME messages, described as a validation input issue that coul...

CVE-2018-4409

CVE-2018-4409 is a resource exhaustion vulnerability addressed by improved input validation. Affected: iOS <12.1, tvOS

CVE-2019-8549

CVE-2019-8549 concerns multiple input validation issues in MIG-generated code that could allow arbitrary code execution with system privileges. Public records indicate the flaw affects Apple platforms and was fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. The NVD entry lists...

CVE-2019-8620

CVE-2019-8620 describes a user privacy issue in Apple’s Wi‑Fi component where a device may be passively tracked by its Wi‑Fi MAC address. The underlying fix was to remove the broadcast MAC address, mitigating tracking risk. Public documentation indicates the vulnerability affects iOS, tvOS, and w...

CVE-2020-27927

CVE-2020-27927 is an Apple font-parsing vulnerability. The issue is described as an out-of-bounds write in the FontParser component that processes malicious font files, leading to arbitrary code execution. Affected platforms include macOS Big Sur 11.0.1 and iOS 14.2 / iPadOS 14.2, tvOS 14.2, and ...

CVE-2020-9835

CVE-2020-9835 affects FaceTime in iOS/iPadOS; when a user exits the FaceTime app while the call is ringing, pausing the video may fail. Apple fixed this by improved logic in iOS 13.5 and iPadOS 13.5. The vulnerability is tied to the FaceTime component and is documented with the fix in Apple’s sec...

CVE-2022-42850

CVE-2022-42850 is an Apple iOS/iPadOS vulnerability where an app could execute arbitrary code with kernel privileges due to improved memory handling. The issue affects iOS and iPadOS and is addressed in iOS 16.2 and iPadOS 16.2. The core detail provided states the vulnerability arises from memory...

CVE-2023-27943

CVE-2023-27943 relates to macOS/iOS quarantine handling for files downloaded from the internet. The vulnerability description notes that files may not have the quarantine flag applied, and Apple’s fix is described as “improved checks.” Public documents confirm affected platforms: macOS Ventura 13...

CVE-2023-32365

The CVE-2023-32365 issue affects Apple iOS/iPadOS Photos via the Shake-to-undo feature, enabling a deleted photo to be surfaced without authentication. The root cause details in the sources indicate a logic/validation issue within the Photos handling that could expose previously deleted content. ...

CVE-2023-40412

CVE-2023-40412 affects Apple platforms and was fixed by memory-handling improvements. The issue could allow an app to execute arbitrary code with kernel privileges. Affected items include macOS Ventura 13.6, macOS Monterey 12.7, iOS 17, iPadOS 17, tvOS 17, and watchOS 10. The connected documents ...

CVE-2023-40448

CVE-2023-40448 affects Apple platforms (tvOS, iOS, iPadOS, watchOS, macOS Sonoma 14) where the Web Content sandbox isolation could be escaped. The issue stems from protocol handling, and Apple lists fixes in tvOS 17, iOS 16.7 / 17, iPadOS 16.7 / 17, watchOS 10, and macOS Sonoma 14. No exploitatio...

CVE-2023-41063

CVE-2023-41063 affects Apple platforms (macOS Ventura 13.6; macOS Sonoma 14; iOS 16.7, 17; tvOS 17). Root cause: memory handling issue that may allow an app to execute arbitrary code with kernel privileges. Impact: local attacker with user interaction could gain kernel-level code execution. Fix: ...

CVE-2024-27831

CVE-2024-27831 is an out-of-bounds write issue addressed by Apple with improved input validation. The vulnerability affects multiple Apple platforms and is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, tvOS 17.5, a...

CVE-2024-40788

CVE-2024-40788 is a local, type-confusion vulnerability in memory handling that could allow a local attacker to cause an unexpected system shutdown . The vulnerability is fixed in: iOS/iPadOS 16.7.9 and 17.6, macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, and on watchOS 10.6, tvO...

CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

CVE-2025-24244

CVE-2025-24244 concerns a memory disclosure when processing a maliciously crafted font. Apple states the issue is addressed by memory handling improvements and is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, and watchO...

CVE-2025-30448

CVE-2025-30448 affects Apple platforms including macOS Ventura 13.7.6, macOS Sonoma 14.7.6, macOS Sequoia 15.4, iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, and visionOS 2.5. The issue stems from insufficient entitlement checks, which could allow an attacker to enable iCloud folder sharing without authe...

CVE-2025-31209

The CVE-2025-31209 issue is an out-of-bounds read that could lead to disclosure of user information during file parsing. Affected products include watchOS 11.5; macOS Sonoma 14.7.6; tvOS 18.5; iPadOS 17.7.7; iOS 18.5 and iPadOS 18.5; macOS Sequoia 15.5; visionOS 2.5; macOS Ventura 13.7.6. Mitigat...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2015-3749

CVE-2015-3749 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The ro...