CVE-2011-2827

CVE-2011-2827 affects Google Chrome via a use-after-free in the text-search workflow. Affected component: Chrome’s text-search handling (likely in the browser engine). Vulnerable condition: Chrome versions prior to 13.0.782.215. Impact: remote attackers could trigger a denial of service or potent...

CVE-2011-2846

Technical details for CVE-2011-2846 are not present in the provided connected documents. Monitor for updates; information currently limited to the CVE entry and associated references.

CVE-2011-3067

Technical details for CVE-2011-3067 are not publicly provided in the connected documents. Please monitor for updates; available sources mention Chrome/SOP issue in general terms but do not specify affected components, versions, or fixes in these materials.

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.

CVE-2015-3738

WebKit vulnerability in Apple software: remote code execution or memory corruption/DoS via a crafted website. Affected: WebKit as used in iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. Root cause described as memory corruption leading to app crash; no remediatio...

CVE-2016-1828

CVE-2016-1827: Kernel heap overflow in flow_divert_handle_app_map_create on OS X and iOS. Root-privilege exploitation possible; memory corruption may lead to kernel compromise. Patched in OS X 10.11.5 and iOS 9.3.2; exploit code/public PoC exists (flow_divert-heap-overflow) describing OS X Yosemi...

CVE-2017-13785

CVE-2017-13785 is a WebKit-related vulnerability affecting Apple devices and software listed by Apple for the 2017-11 window: iOS <11.1, Safari <11.0.1, iCloud on Windows, iTunes for Windows, and tvOS

CVE-2017-13874

CVE-2017-13874 affects iOS before 11.2 (Mail). The issue arises from incorrect S/MIME certificate selection, which may allow a remote attacker to bypass the intended encryption protection mechanism. Technical details show the vulnerability lies in the Mail component’s handling of S/MIME certifica...

CVE-2017-7028

CVE-2017-7028 affects Apple kernel on iOS (pre-10.3.3), macOS (pre-10.12.6), tvOS (pre-10.2.2), and watchOS (pre-3.2.3). Root cause: a validation/memory-read control gap in the Kernel that could let an app read restricted memory. Impact: an attacker could read memory contents that should be prote...

CVE-2018-4383

CVE-2018-4383 is a memory corruption issue addressed by Apple in a security update. The description notes affected platforms as iOS, macOS Mojave, tvOS, and watchOS prior to the listed versions, with the fix described as improved state management. Connected Red Hat and Apple security entries corr...

CVE-2018-4395

CVE-2018-4395 affects Apple ecosystems (iOS before 12, macOS Mojave 10.14 before patch, tvOS 12, watchOS 5). The issue was addressed with improved checks; impact per CVE indicates local attack vector with partial availability impact and, in CVSSv3, a medium severity (5.5) with high impact on avai...

CVE-2019-6219

CVE-2019-6219 is a denial-of-service vulnerability affecting Apple’s platforms via a malformed message processed by the Natural Language Processing component. The issue arose from insufficient input/validation handling and was addressed by improved validation. According to Apple advisories, the f...

CVE-2019-8703

This CVE-2019-8703 affects Apple platforms and is described as an entitlement-related privilege escalation. The issue was fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, and iOS 13. The core impact is that an application may gain elevated privileges due to entitlements handling. Connected sour...

CVE-2020-10011

CVE-2020-10011: An out-of-bounds read vulnerability was fixed by improved bounds checking when processing a maliciously crafted USD file. Affected platforms include iOS 14.2, iPadOS 14.2, macOS Catalina 10.15.7, and Security Update 2020-005 for High Sierra and Mojave. Exploitation could lead to u...

CVE-2020-27926

CVE-2020-27926 relates to a use-after-free in processing malicious web content, with Apple confirming a memory-management fix in iOS 14.2 and iPadOS 14.2. The Apple-HT211929 entry lists affected areas (Audio/CoreAudio/FontParser/WebKit/XNU) and notes that exploitation could lead to arbitrary code...

CVE-2020-9795

CVE-2020-9795 is a kernel-use-after-free vulnerability in Apple OS components causing potential arbitrary code execution with kernel privileges. Affected: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Root cause: use-after-free leading to memory corruption; fixes were relea...

CVE-2020-9808

CVE-2020-9808 is a memory corruption issue addressed by Apple across multiple OS updates. The vulnerability was mitigated by improved state management and is fixed in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. The public description notes that an affected applic...

CVE-2020-9830

CVE-2020-9830 is a memory corruption vulnerability in Apple OS components that could allow a local attacker to execute arbitrary code with kernel privileges. It is fixed in iOS 13.5 / iPadOS 13.5 and macOS Catalina 10.15.5. Affected products include macOS Catalina (and related Apple OS versions l...

CVE-2020-9920

CVE-2020-9920 describes a path handling issue in Apple Mail that could allow a malicious mail server to overwrite arbitrary mail files. The issue is fixed by Apple in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8, addressing improper validation of mail file handling. NVD metada...

CVE-2021-1867

CVE-2021-1867 is an out-of-bounds read that was mitigated by improved input validation. Affected: iOS 14.5, iPadOS 14.5, macOS Big Sur 11.3. Impact described as potential arbitrary code execution with kernel privileges by a malicious app. Mitigation: upgrade to iOS/iPadOS 14.5 or later, macOS Big...

CVE-2021-30656

CVE-2021-30656 describes a local access issue in Apple devices where memory management weaknesses could allow a malicious app to determine the kernel memory layout. The vulnerability is tied to Apple's iOS/iPadOS kernel components and is mitigated by updates in iOS 14.5 and iPadOS 14.5. Multiple ...

CVE-2021-30674

CVE-2021-30674 is an Apple kernel memory-disclosure issue disclosed by Apple as fixed in iOS 14.6 / iPadOS 14.6. The CVE entry states that a malicious application may disclose restricted memory, and Apple’s advisory confirms the fix was implemented via improved checks. Connected sources corrobora...

CVE-2021-30867

The CVE-2021-30867 issue affects Apple iOS/iPadOS and was addressed in iOS 15 / iPadOS 15. A malicious application could access photo metadata without requiring permission to access photos due to an authentication flaw. Apple states the vulnerability was fixed by improved authentication. Public r...

CVE-2022-32927

CVE-2022-32927 affects Apple iOS/iPadOS devices and relates to a memory handling weakness in the Wi‑Fi path that can cause a denial-of-service of the Settings app when joining a malicious Wi‑Fi network. The issue is fixed in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16.0+. Affected components ...

CVE-2022-32939

CVE-2022-32939 is Apple iOS/iPadOS graphics driver kernel‑level vulnerability. The issue allowed an app to execute arbitrary code with kernel privileges due to bounds checking improvements. Apple patched it in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.1/iPadOS 16. The Nessus/NVD entries corroborate the...

CVE-2023-32385

CVE-2023-32385 affects Apple’s PDFKit on iOS 16.5/iPadOS 16.5 and macOS Ventura 13.4. The issue is described as a denial-of-service caused by a PDF file opening that may lead to the application terminating unexpectedly, with the underlying fix being improved memory handling. Connected sources con...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2023-40454

CVE-2023-40454 affects Apple platforms and is tied to a permissions issue that could allow an app to delete files it should not access. The linked sources (NVD entry) specify mitigations in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, ...

CVE-2023-42937

CVE-2023-42937 describes a privacy issue in Apple platforms where private data redaction in log entries could allow an app to access sensitive user data. Root cause: inadequate redaction during logging. Affected products/versions include iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 1...

CVE-2024-23293

CVE-2024-23293 affects Apple devices running iOS/iPadOS 17.4, tvOS 17.4, watchOS 10.4, and macOS Sonoma 14.4. The issue, described as being addressed via improved state management, could allow an attacker with physical access to exploit Siri to access sensitive user data. The fixed versions are t...

CVE-2024-27828

CVE-2024-27828 describes a memory-handling issue in Apple OS components that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed with patches in visionOS 1.2, watchOS 10.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. The available description indicates a l...

CVE-2024-40777

CVE-2024-40777 describes an out-of-bounds access issue that Apple fixed by improving bounds checking. The vulnerability is addressed in multiple Apple platforms: iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS Sonoma 14.6. Technical detail in the description indicates t...

CVE-2024-40795

CVE-2024-40795 affects Apple platforms where an app may be able to read sensitive location information. The issue was addressed with improved data protection and is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and tvOS 17.6. The NVD entry shows a low 3.3 CVSS due to local acce...

CVE-2024-44276

CVE-2024-44276 affects Apple's Passwords feature in iOS/iPadOS. A privileged network position could leak sensitive information due to sending information over HTTP instead of HTTPS. The issue is fixed in iOS 18.2 and iPadOS 18.2. Root cause: unencrypted network requests (logos/icons and password-...

CVE-2024-44290

CVE-2024-44290 affects Apple platforms and is described as a location-privacy issue. The vulnerability is addressed in iOS 18.1, iPadOS 18.1, and watchOS 11.1; installing these updates resolves the issue. The public description indicates an app could determine a user’s current location. The CVSS ...

CVE-2024-54492

CVE-2024-54492 concerns an issue where information sent over the network could be at risk due to lack of HTTPS in prior code paths. The vulnerability is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, and visionOS 2.2. Affected products include macOS and Apple mobile platfor...

CVE-2024-54514

The CVE-2024-54514 issue affects Apple platforms where an app may break out of its sandbox. According to the records, mitigation is via updates: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The underlying cause is described as ...

CVE-2025-30469

CVE-2025-30469 concerns a lock-screen photo exposure on iOS devices. The public description states that the issue was addressed through improved state management and is fixed in iOS 18.4 and iPadOS 18.4 . The vulnerability allows a person with physical access to an iOS device to potentially view ...

CVE-2025-43213

CVE-2025-43213 affects WebKitGTK/WebKitGTK4 in multiple Linux distributions (AlmaLinux, Red Hat family, Fedora, Amazon Linux) and is tied to memory handling issues that can be exploited by processing malicious web content to cause an unexpected Safari/WebKit crash (and related process crashes in ...

CVE-2026-43655

CVE-2026-43655 affects Apple platforms (iOS/iPadOS/macOS Tahoe/tvOS/watchOS) and is caused by an out-of-bounds read due to insufficient bounds checking in IOSurfaceAccelerator. Apple fixed it in 26.5 across the listed OS versions. Potential impact reported: an app may cause unexpected system term...

CVE-2026-43739

CVE-2026-43739 describes an out-of-bounds write vulnerability that Apple fixed by improving bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue could cause an unexpected system termination; no exploitation deta...

CVE-2026-64751

The CVE-2026-64751 entry describes a use-after-free vulnerability that affected Apple platforms and was mitigated in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue can lead to unexpected system termination or kernel memory writes. The associated CVSSv3.1 ...

CVE-2010-1815

CVE-2010-1815 is listed in MiracleLinux AXSA:2011-34:01 as part of a set of WebKitGTK+ related issues. The included description block confirms a WebKit use-after-free vulnerability affecting WebKit in Apple iOS prior to 4.1 and webkitgtk prior to 1.2.6, with potential remote code execution or den...

CVE-2015-3731

CVE-2015-3731 affects WebKit as used in Apple iOS < 8.4.1 and Safari < 6.2.8, 7.x < 7.1.8, and 8.x

CVE-2018-4330

CVE-2018-4330 is a memory corruption vulnerability in Apple iOS Core Bluetooth reported for iOS versions before 11.4 and addressed in iOS 11.4 with improved memory handling. The NVD entry assigns a CVSSv3 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and user interacti...

CVE-2018-4377

The CVE describes a cross-site scripting (XSS) issue in Safari via malformed URLs that could affect Safari on iOS, watchOS, macOS (Safari 12.0.1) and related Apple apps (iTunes 12.9.1, iCloud for Windows 7.8). Root cause: insufficient URL validation. Impact during exploitation is an XSS condition...

CVE-2019-6202

CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...

CVE-2020-27923

CVE-2020-27923 is an out-of-bounds write that Apple fixed through input-validation improvements in multiple macOS security updates. The vulnerability, triggered by processing a malicious image, could lead to arbitrary code execution. Public updates address this issue across macOS Big Sur (11.1), ...

CVE-2020-3844

CVE-2020-3844 affects Apple iOS/iPadOS Messages: after a user is removed from an iMessage conversation, an attacker may still alter the state of that conversation. This is tied to the Messages component and was fixed by Apple in iOS 13.3.1 / iPadOS 13.3.1 through improved checks and state handlin...

CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...