CVE-2018-4330

CVE-2018-4330 is a memory corruption vulnerability in Apple iOS Core Bluetooth reported for iOS versions before 11.4 and addressed in iOS 11.4 with improved memory handling. The NVD entry assigns a CVSSv3 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and user interacti...

CVE-2018-4377

The CVE describes a cross-site scripting (XSS) issue in Safari via malformed URLs that could affect Safari on iOS, watchOS, macOS (Safari 12.0.1) and related Apple apps (iTunes 12.9.1, iCloud for Windows 7.8). Root cause: insufficient URL validation. Impact during exploitation is an XSS condition...

CVE-2019-6202

CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...

CVE-2020-27923

CVE-2020-27923 is an out-of-bounds write that Apple fixed through input-validation improvements in multiple macOS security updates. The vulnerability, triggered by processing a malicious image, could lead to arbitrary code execution. Public updates address this issue across macOS Big Sur (11.1), ...

CVE-2020-3844

CVE-2020-3844 affects Apple iOS/iPadOS Messages: after a user is removed from an iMessage conversation, an attacker may still alter the state of that conversation. This is tied to the Messages component and was fixed by Apple in iOS 13.3.1 / iPadOS 13.3.1 through improved checks and state handlin...

CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...

CVE-2021-1854

CVE-2021-1854 describes a call-termination issue in iOS/iPadOS where a legacy cellular network could automatically answer an incoming call when a current call ended or dropped. The root cause is described as a logic flaw in call termination that was addressed with improved logic. Affected product...

CVE-2021-30753

CVE-2021-30753 affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). Root cause: out-of-bounds read in font handling (FontParser/CoreText) due to malformed font input. Impact: potential disclosure of process memory. Fix: addressed in the listed OS updates wi...

CVE-2021-30838

CVE-2021-30838 affects Apple devices with Apple Neural Engine running iOS 15 / iPadOS 15. The vulnerability is described as a memory corruption issue that was addressed with improved memory handling, allowing a malicious application to potentially execute arbitrary code with system privileges on ...

CVE-2021-30932

CVE-2021-30932 is fixed in iOS 15.2 and iPadOS 15.2. The issue allowed a person with physical access to an iOS device to access contacts from the lock screen due to improved permissions logic. The vulnerability affects iPhone and iPad platforms covered by the Apple security content. The connected...

CVE-2022-32887

CVE-2022-32887 is an Apple iOS kernel-privilege escalation exposed by a memory handling issue. Multiple sources describe it as a local vulnerability that could allow an app to execute arbitrary code with kernel privileges, with a CVSS v3.1 base score of 7.8 (high) and requiring user interaction. ...

CVE-2022-32907

CVE-2022-32907 affects Apple platforms and is associated with AppleAVD-related components. According to the CVE entry, an app may be able to execute arbitrary code with kernel privileges, with fixed versions in tvOS 16, iOS 16, and watchOS 9. Connected documents corroborate kernel‑level impact an...

CVE-2022-42830

CVE-2022-42830 affects Apple devices and components where a root-privileged app could execute arbitrary code in the kernel due to a memory handling issue. Apple fixes in iOS 16.1, iPadOS 16 and macOS Ventura 13; apply the corresponding updates (HT213488/HT213489 references) to mitigate. The vulne...

CVE-2022-48610

CVE-2022-48610 affects Apple platforms where state management flaws could let an app access user‑sensitive data. The issue is mitigated by the macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2 updates, which address the root cause described as improved state management. Affected component...

CVE-2023-28191

CVE-2023-28191 describes a privacy bypass vulnerability where an app may bypass Privacy preferences. The issue affects Apple platforms across multiple releases and was addressed with improved redaction of sensitive information. The fixed versions are: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, m...

CVE-2024-44183

CVE-2024-44183 affects Apple operating systems and is described as a logic error that can lead to denial-of-service when triggered. The NVD entry lists that the issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS So...

CVE-2024-54501

CVE-2024-54501 affects Apple operating systems and is tied to processing a maliciously crafted file that may lead to denial of service. The published fix mentions iPadOS 18.2, iOS 18.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, and tvOS 18.2. The d...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2025-24194

CVE-2025-24194 is a logic issue fixed in visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. It concerns processing maliciously crafted web content, which could disclose process memory. The CVSSv3.1 base score is 6.5 (MEDIUM), with network access required and no privileges, wh...

CVE-2026-20673

CVE-2026-20673 is a logic-issue vulnerability in Apple Mail that is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4, and iOS/iPadOS 18.7.5. The issue centers on improved checks in the Mail component; turning off “Load remote content in messages” may not apply to all mail prev...

CVE-2026-28928

CVE-2026-28928 is a use-after-free vulnerability fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The issue, described as a use-after-free error, could allow an app to cause an unexpected system termination. Apple’s security content notes the CVE in the Neural Engine...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2011-1115

Technical details about CVE-2011-1115 are not publicly provided in the connected documents. Please monitor for updates from vendor advisories and vulnerability databases.

CVE-2011-2351

Technical details for CVE-2011-2351 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2011-3038

CVE-2011-3038 is a use-after-free in multi-column handling affecting Chromium/Chrome as documented in connected advisories. OpenSUSE notes a patch in openSUSE-SU-2012:0374-1 for Chromium v8, addressing High CVE-2011-3038 among others, and lists updates to Chromium 19.0.1060–19.0.1066 with related...

CVE-2011-3042

CVE-2011-3042 is aUse-after-free in table section handling in Chrome/Chromium prior to 17.0.963.65. Connected updates (openSUSE-SU-2012:0374-1) patch Chromium, upgrading to around 19.x and addressing multiple CVEs including 2011-3042. Remediation: apply the openSUSE security update to obtain the ...

CVE-2011-3053

CVE-2011-3053 is a use-after-free in block splitting affecting Google Chrome up to 17.0.963.83 and related Chromium/WebKit components. Connected advisories document a fix path via security updates: openSUSE’s openSUSE-SU-2012:0466-1 for Chromium (addressing CVE-2011-3053 among others) and Ubuntu ...

CVE-2011-3075

CVE-2011-3075 describes a use-after-free in Google Chrome prior to 18.0.1025.151, exploitable remotely via style-application commands to cause a denial of service or possibly other impact. The vulnerability affects the Chrome rendering/style handling and is mitigated by upgrading to version 18.0....

CVE-2012-0588

Technical details about CVE-2012-0588 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-3742

CVE-2015-3742 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application....

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2016-1740

CVE-2016-1740 affects FontParser in Apple platforms (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2). Description: opening a maliciously crafted PDF can cause a memory corruption and may lead to arbitrary code execution or application termination. Root cause is a memory ...

CVE-2016-4726

CVE-2016-4726 affects the IOAcceleratorFamily component across Apple iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4737

CVE-2016-4737 affects WebKit-based components in Apple platforms: iOS prior to 10, Safari prior to 10, tvOS prior to 10, and watchOS prior to 3. The vulnerability is a memory corruption issue in WebKit that could allow a remote attacker to execute arbitrary code or cause a denial of service via a...

CVE-2017-2492

CVE-2017-2492 is an UXSS vulnerability in Apple’s JavaScriptCore affecting iOS <10.3, Safari <10.1, and tvOS

CVE-2018-4337

CVE-2018-4337 : A memory corruption issue was addressed with improved memory handling affecting multiple Apple platforms prior to corrective releases. The description covers iOS, macOS Mojave 10.14, tvOS 12, and watchOS 5, indicating impact on older builds before Apple’s security updates. The con...

CVE-2019-8517

CVE-2019-8517 is an out-of-bounds read in Apple’s TrueTypeScaler/font processing component. Affects iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Exploitation could lead to disclosure of process memory. The vulnerability is addressed by the listed fixed OS versions; no exploit detai...

CVE-2019-8532

The CVE-2019-8532 entry describes a permissions issue in Apple platforms resolved in watchOS 5.2 and iOS 12.2. Affected components relate to file access permissions, where a malicious app could access restricted files due to insufficient checks. The fix involved removing vulnerable code and addin...

CVE-2019-8556

CVE-2019-8556 is a use-after-free vulnerability in WebKit related to processing malicious web content. It could lead to arbitrary code execution. Affected products/versions include iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The issue is fixed in thos...

CVE-2019-8573

CVE-2019-8573 is an input-validation vulnerability that Apple fixed across multiple updates. The advisory track shows the issue being addressed by macOS Mojave 10.14.5, High Sierra and Sierra Security Updates 2019-003, iOS 12.3, and watchOS 5.2.1, with a remote attacker potentially causing a deni...

CVE-2019-8612

CVE-2019-8612 is a logic issue in the Wi‑Fi/driver state handling in Apple’s ecosystem. The vulnerability allows an attacker with privileged network access to modify driver state, potentially affecting devices across macOS (Sierra/High Sierra/Mojave and newer macOS updates) and related Apple plat...

CVE-2019-8631

The CVE-2019-8631 entry describes a logic issue in state management that affects Apple messaging components. Affected products include macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra, and Security Update 2019-003 for Sierra, as well as iOS 12.3 and tvOS 12.3. The underlying flaw al...

CVE-2019-8712

CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...

CVE-2019-8794

CVE-2019-8794 is a kernel validation issue described as a memory read access risk that can be triggered via an input sanitization vulnerability. The provided documents consistently state that the issue is fixed in iOS 13.2, iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1, and that...

CVE-2020-27935

CVE-2020-27935 is a sandbox-related issue addressed by Apple in macOS Big Sur 11.0.1 and in iOS/iPadOS 14.2, watchOS 7.1, tvOS 14.2. The vulnerability is tied to XNU and allows a sandboxed process to circumvent sandbox restrictions. The vulnerability is discussed alongside a family of related iss...

CVE-2020-3869

CVE-2020-3869 describes an issue in the handling of the local user’s self-view in FaceTime on Apple devices. The root cause is a logic flaw that could cause the local user’s camera self-view to show an incorrect camera when a remote FaceTime user is involved. Impact stated by sources: a remote Fa...

CVE-2020-3875

CVE-2020-3875Fixes a validation issue addressed by improved input sanitization. Affects Apple platforms including iOS/iPadOS, macOS Catalina, tvOS, watchOS, and kernel components where an application may read restricted memory. Public details indicate the vulnerability is mitigated by updates to ...

CVE-2020-9793

CVE-2020-9793 is a memory corruption vulnerability in Apple platforms that was fixed with improved input validation. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS (specific fixes in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). The issue coul...

CVE-2020-9820

CVE-2020-9820 is an Apple iOS/iPadOS vulnerability described as a logic issue in the File System component that allowed a remote attacker to modify the file system. The issue is fixed in iOS 13.5 and iPadOS 13.5. The available sources (NVD/Apple Red Hat entry, CNVD) confirm the description and th...

CVE-2020-9865

The CVE-2020-9865 issue is an Apple memory-corruption vulnerability that was mitigated by removing the vulnerable code. It affects multiple Apple platforms and versions: iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The risk described is that a malicious applic...