CVE-2020-9968

CVE-2020-9968 is an Apple logic issue fixed in iOS 14.0/iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, and watchOS 7.0. A malicious application could access restricted files due to improved restrictions. Referenced Apple advisories HT211843, HT211844, and HT211850 corroborate the affected platfo...

CVE-2021-1854

CVE-2021-1854 describes a call-termination issue in iOS/iPadOS where a legacy cellular network could automatically answer an incoming call when a current call ended or dropped. The root cause is described as a logic flaw in call termination that was addressed with improved logic. Affected product...

CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30753

CVE-2021-30753 affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). Root cause: out-of-bounds read in font handling (FontParser/CoreText) due to malformed font input. Impact: potential disclosure of process memory. Fix: addressed in the listed OS updates wi...

CVE-2021-30838

CVE-2021-30838 affects Apple devices with Apple Neural Engine running iOS 15 / iPadOS 15. The vulnerability is described as a memory corruption issue that was addressed with improved memory handling, allowing a malicious application to potentially execute arbitrary code with system privileges on ...

CVE-2021-30932

CVE-2021-30932 is fixed in iOS 15.2 and iPadOS 15.2. The issue allowed a person with physical access to an iOS device to access contacts from the lock screen due to improved permissions logic. The vulnerability affects iPhone and iPad platforms covered by the Apple security content. The connected...

CVE-2022-32887

CVE-2022-32887 is an Apple iOS kernel-privilege escalation exposed by a memory handling issue. Multiple sources describe it as a local vulnerability that could allow an app to execute arbitrary code with kernel privileges, with a CVSS v3.1 base score of 7.8 (high) and requiring user interaction. ...

CVE-2022-32907

CVE-2022-32907 affects Apple platforms and is associated with AppleAVD-related components. According to the CVE entry, an app may be able to execute arbitrary code with kernel privileges, with fixed versions in tvOS 16, iOS 16, and watchOS 9. Connected documents corroborate kernel‑level impact an...

CVE-2022-42830

CVE-2022-42830 affects Apple devices and components where a root-privileged app could execute arbitrary code in the kernel due to a memory handling issue. Apple fixes in iOS 16.1, iPadOS 16 and macOS Ventura 13; apply the corresponding updates (HT213488/HT213489 references) to mitigate. The vulne...

CVE-2022-48610

CVE-2022-48610 affects Apple platforms where state management flaws could let an app access user‑sensitive data. The issue is mitigated by the macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2 updates, which address the root cause described as improved state management. Affected component...

CVE-2023-28191

CVE-2023-28191 describes a privacy bypass vulnerability where an app may bypass Privacy preferences. The issue affects Apple platforms across multiple releases and was addressed with improved redaction of sensitive information. The fixed versions are: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, m...

CVE-2023-41071

CVE-2023-41071 is a use-after-free vulnerability in Apple’s kernel-related components that can allow an app to execute arbitrary code with kernel privileges. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Ventura 13.6. The issue is addressed through improved memory...

CVE-2024-44183

CVE-2024-44183 affects Apple operating systems and is described as a logic error that can lead to denial-of-service when triggered. The NVD entry lists that the issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS So...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2025-24194

CVE-2025-24194 is a logic issue fixed in visionOS 2.4, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. It concerns processing maliciously crafted web content, which could disclose process memory. The CVSSv3.1 base score is 6.5 (MEDIUM), with network access required and no privileges, wh...

CVE-2026-28928

CVE-2026-28928 is a use-after-free vulnerability fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The issue, described as a use-after-free error, could allow an app to cause an unexpected system termination. Apple’s security content notes the CVE in the Neural Engine...

CVE-2026-43712

CVE-2026-43712 concerns a memory handling issue that could cause an unexpected process crash when processing maliciously crafted web content. According to the provided sources, Apple platforms fix this with Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The CVE is tied to impro...

CVE-2026-43717

The CVE-2026-43717 entry describes a use-after-free in Safari related to processing malicious web content. Affected products are Safari across macOS and iOS/iPadOS, with fixed versions Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Root cause stated as improved memory managemen...

CVE-2026-43776

CVE-2026-43776 is a buffer overflow vulnerability described by Apple and NVD as addressed with improved bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The issue could allow processing of a maliciously crafted file to terminate an app...

CVE-2011-1115

Technical details about CVE-2011-1115 are not publicly provided in the connected documents. Please monitor for updates from vendor advisories and vulnerability databases.

CVE-2011-2351

Technical details for CVE-2011-2351 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2011-3038

CVE-2011-3038 is a use-after-free in multi-column handling affecting Chromium/Chrome as documented in connected advisories. OpenSUSE notes a patch in openSUSE-SU-2012:0374-1 for Chromium v8, addressing High CVE-2011-3038 among others, and lists updates to Chromium 19.0.1060–19.0.1066 with related...

CVE-2011-3042

CVE-2011-3042 is aUse-after-free in table section handling in Chrome/Chromium prior to 17.0.963.65. Connected updates (openSUSE-SU-2012:0374-1) patch Chromium, upgrading to around 19.x and addressing multiple CVEs including 2011-3042. Remediation: apply the openSUSE security update to obtain the ...

CVE-2011-3053

CVE-2011-3053 is a use-after-free in block splitting affecting Google Chrome up to 17.0.963.83 and related Chromium/WebKit components. Connected advisories document a fix path via security updates: openSUSE’s openSUSE-SU-2012:0466-1 for Chromium (addressing CVE-2011-3053 among others) and Ubuntu ...

CVE-2011-3075

CVE-2011-3075 describes a use-after-free in Google Chrome prior to 18.0.1025.151, exploitable remotely via style-application commands to cause a denial of service or possibly other impact. The vulnerability affects the Chrome rendering/style handling and is mitigated by upgrading to version 18.0....

CVE-2012-0588

Technical details about CVE-2012-0588 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-3742

CVE-2015-3742 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application....

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2016-1740

CVE-2016-1740 affects FontParser in Apple platforms (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2). Description: opening a maliciously crafted PDF can cause a memory corruption and may lead to arbitrary code execution or application termination. Root cause is a memory ...

CVE-2016-4726

CVE-2016-4726 affects the IOAcceleratorFamily component across Apple iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4737

CVE-2016-4737 affects WebKit-based components in Apple platforms: iOS prior to 10, Safari prior to 10, tvOS prior to 10, and watchOS prior to 3. The vulnerability is a memory corruption issue in WebKit that could allow a remote attacker to execute arbitrary code or cause a denial of service via a...

CVE-2018-4337

CVE-2018-4337 : A memory corruption issue was addressed with improved memory handling affecting multiple Apple platforms prior to corrective releases. The description covers iOS, macOS Mojave 10.14, tvOS 12, and watchOS 5, indicating impact on older builds before Apple’s security updates. The con...

CVE-2019-8517

CVE-2019-8517 is an out-of-bounds read in Apple’s TrueTypeScaler/font processing component. Affects iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Exploitation could lead to disclosure of process memory. The vulnerability is addressed by the listed fixed OS versions; no exploit detai...

CVE-2019-8532

The CVE-2019-8532 entry describes a permissions issue in Apple platforms resolved in watchOS 5.2 and iOS 12.2. Affected components relate to file access permissions, where a malicious app could access restricted files due to insufficient checks. The fix involved removing vulnerable code and addin...

CVE-2019-8556

CVE-2019-8556 is a use-after-free vulnerability in WebKit related to processing malicious web content. It could lead to arbitrary code execution. Affected products/versions include iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The issue is fixed in thos...

CVE-2019-8573

CVE-2019-8573 is an input-validation vulnerability that Apple fixed across multiple updates. The advisory track shows the issue being addressed by macOS Mojave 10.14.5, High Sierra and Sierra Security Updates 2019-003, iOS 12.3, and watchOS 5.2.1, with a remote attacker potentially causing a deni...

CVE-2019-8612

CVE-2019-8612 is a logic issue in the Wi‑Fi/driver state handling in Apple’s ecosystem. The vulnerability allows an attacker with privileged network access to modify driver state, potentially affecting devices across macOS (Sierra/High Sierra/Mojave and newer macOS updates) and related Apple plat...

CVE-2019-8631

The CVE-2019-8631 entry describes a logic issue in state management that affects Apple messaging components. Affected products include macOS Mojave 10.14.5, Security Update 2019-003 for High Sierra, and Security Update 2019-003 for Sierra, as well as iOS 12.3 and tvOS 12.3. The underlying flaw al...

CVE-2020-27935

CVE-2020-27935 is a sandbox-related issue addressed by Apple in macOS Big Sur 11.0.1 and in iOS/iPadOS 14.2, watchOS 7.1, tvOS 14.2. The vulnerability is tied to XNU and allows a sandboxed process to circumvent sandbox restrictions. The vulnerability is discussed alongside a family of related iss...

CVE-2020-3869

CVE-2020-3869 describes an issue in the handling of the local user’s self-view in FaceTime on Apple devices. The root cause is a logic flaw that could cause the local user’s camera self-view to show an incorrect camera when a remote FaceTime user is involved. Impact stated by sources: a remote Fa...

CVE-2020-3875

CVE-2020-3875Fixes a validation issue addressed by improved input sanitization. Affects Apple platforms including iOS/iPadOS, macOS Catalina, tvOS, watchOS, and kernel components where an application may read restricted memory. Public details indicate the vulnerability is mitigated by updates to ...

CVE-2020-9793

CVE-2020-9793 is a memory corruption vulnerability in Apple platforms that was fixed with improved input validation. Affected products include iOS/iPadOS, macOS Catalina, tvOS, and watchOS (specific fixes in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). The issue coul...

CVE-2020-9865

The CVE-2020-9865 issue is an Apple memory-corruption vulnerability that was mitigated by removing the vulnerable code. It affects multiple Apple platforms and versions: iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. The risk described is that a malicious applic...

CVE-2020-9881

CVE-2020-9881 is a buffer overflow vulnerability in Apple's USD file processing path that affects iOS, iPadOS, macOS, and watchOS. The issue stems from improper memory handling when processing a malicious USD file, potentially leading to application termination or arbitrary code execution. Apple ...

CVE-2020-9946

CVE-2020-9946 affects Apple devices (iOS/iPadOS/watchOS) where the screen lock may not engage after the specified time period. The issue was addressed with improved checks and is fixed in iOS 14.0 / iPadOS 14.0 and watchOS 7.0. The NVD entry notes a local attack vector with low attack complexity ...

CVE-2020-9994

CVE-2020-9994 is an Apple libxpc path handling vulnerability that could allow a malicious app to overwrite arbitrary files. The issue is addressed by Apple in updates for multiple platforms: iOS 13.5, iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. Connected documents provide...

CVE-2021-30992

CVE-2021-30992 affects Apple iOS and iPadOS FaceTime in which a user in a FaceTime call may leak sensitive information via Live Photos metadata. Root cause: improper handling of file metadata; fix: Apple addressed in iOS 15.2 and iPadOS 15.2. Practical impact is limited to information disclosure ...

CVE-2022-42810

CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...

CVE-2023-32425

CVE-2023-32425 corresponds to a memory‑handling issue in Apple’s operating systems (iOS, iPadOS, watchOS) that may allow an app to gain elevated privileges. Public documents: Apple fixed the issue in iOS 16.5, iPadOS 16.5, and watchOS 9.5 by addressing memory management weaknesses. Related entrie...

CVE-2024-27801

CVE-2024-27801 is an Apple vulnerability reported across multiple Apple OSes and components. It enables local privilege escalation and is stated as fixed in tvOS 17.5, visionOS 1.2, iOS 17.5, iPadOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. Connected Apple advisories note affected components inc...