3214 matches found
CVE-2024-40844
CVE-2024-40844 describes a privacy issue where an app may observe data displayed to the user by Shortcuts due to improved handling of temporary files. The issue affects Apple platforms and is fixed in iOS 17.7, iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The underlyi...
CVE-2024-40857
CVE-2024-40857 affects Apple platforms using WebKit: a web content processing flaw that could lead to universal cross-site scripting. The issue was addressed through improved state management and is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, and tvOS 18 per t...
CVE-2024-44167
The CVE-2024-44167 issue involves a vulnerability in macOS/iOS variants where an app may overwrite arbitrary files. The root cause is described as being mitigated by removing the vulnerable code. Affected platforms include macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, visionOS 2, iOS 1...
CVE-2024-54497
The CVE-2024-54497 issue is linked to processing web content and leads to a denial-of-service. Affected platforms include iPadOS/iOS (18.2 and 18.2 respectively), macOS (Ventura 13.7.3, Sonoma 14.7.3, Sequoia 15.2), visionOS 2.2, tvOS 18.2, and watchOS 11.2. The vulnerability has been addressed w...
CVE-2024-54501
CVE-2024-54501 affects Apple operating systems and is tied to processing a maliciously crafted file that may lead to denial of service. The published fix mentions iPadOS 18.2, iOS 18.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, and tvOS 18.2. The d...
CVE-2024-54527
CVE-2024-54527 concerns an issue in Apple OS software that was mitigated by improved checks and is fixed in multiple platform updates. The vulnerability could allow an app to access sensitive user data and is addressed in: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS ...
CVE-2025-31253
CVE-2025-31253 affects FaceTime on Apple devices. Root cause: a state-management flaw caused muting the microphone during a FaceTime call to fail. Impact: microphone may not be silenced as intended during FaceTime. Mitigation: Apple ships fixes in iOS 18.5 and iPadOS 18.5, addressing the issue th...
CVE-2026-20673
CVE-2026-20673 is a logic-issue vulnerability in Apple Mail that is fixed in macOS Sequoia 15.7.4, macOS Tahoe 26.3, macOS Sonoma 14.8.4, and iOS/iPadOS 18.7.5. The issue centers on improved checks in the Mail component; turning off “Load remote content in messages” may not apply to all mail prev...
CVE-2026-64728
CVE-2026-64728 describes a permissions issue in WebKit/Safari where malicious web content could violate iframe sandboxing policy. The initial description states the issue was addressed with improved validation and is fixed in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, vision...
CVE-2009-1724
Summary: CVE-2009-1724 is a cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari prior to 4.0.2 (on iPhone OS before 3.1 and 3.1.1 for iPod touch, among others). Root cause: arbitrary web script/HTML can be injected via vectors related to parent and top objects. Impact (as stat...
CVE-2011-2845
CVE-2011-2845 affects Google Chrome prior to 15.0.874.102. The issue arises from improper handling of history data, enabling a user‑assisted remote attacker to spoof the URL bar via unspecified vectors. Impact: URL bar spoofing could mislead users about the destination site. The vulnerability is ...
CVE-2011-3036
CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...
CVE-2011-3043
CVE-2011-3043 is a use-after-free vulnerability in Chrome’s handling of flexbox with floats. OpenSUSE OpenVAS/NASL data references this CVE as part of the Chromium v8 security fixes in openSUSE-SU-2012:0374-1, with the patch described as updating Chromium to 19.0.1066 (and related fixes). The vul...
CVE-2011-3926
CVE-2011-3926 describes a heap-based buffer overflow in the tree builder of Google Chrome prior to version 16.0.912.77. The vulnerability can lead to a denial of service or potentially other impact via unknown vectors. The provided documents confirm the affected product (Google Chrome) and the vu...
CVE-2014-4459
CVE-2014-4459 is a use-after-free in WebKit used by Apple OS X prior to 10.10.1, allowing remote attackers to execute arbitrary code via crafted HTML page objects. Vulnerable: Apple OS X
CVE-2016-4673
CVE-2016-4673 (Apple CoreGraphics JPEG bug) affects multiple Apple OSes: iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1. A memory corruption issue in CoreGraphics may allow arbitrary code execution or memory corruption leading to a crash when processing a crafted JP...
CVE-2016-4776
CVE-2016-4776 concerns the kernel in Apple platforms prior to updates listed below: iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. An attacker who can run a crafted app may obtain sensitive memory-layout information or cause a denial of service via an out-of-bounds read i...
CVE-2017-13797
CVE-2017-13797 is a WebKit memory corruption/remote-code-execution vulnerability affecting Apple devices and software listed in the description (iOS <11.1, Safari <11.0.1, iCloud/iTunes on Windows, tvOS
CVE-2017-2492
CVE-2017-2492 is an UXSS vulnerability in Apple’s JavaScriptCore affecting iOS <10.3, Safari <10.1, and tvOS
CVE-2018-4089
CVE-2018-4089 involves the WebKit component in several Apple platforms. According to Apple security content, affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, Safari prior to 11.0.3, and tvOS prior to 11.2.5. The issue allows remote attackers to execute arbitrary code or caus...
CVE-2018-4321
CVE-2018-4321 involves a validation issue in the entitlement verification which affected Apple platforms prior to their patches: iOS 12, macOS Mojave 10.14, and tvOS 12. The issue was addressed with improved validation of the process entitlement. Affected components are tied to the entitlement ve...
CVE-2018-4355
The CVE-2018-4355 entry refers to a configuration issue that affected iOS prior to 12 and macOS Mojave 10.14. According to Apple’s security content, the issue involved Bluetooth and was mitigated by applying additional restrictions and input validation changes. Affected products include iPhone/iP...
CVE-2018-4427
CVE-2018-4427 is a memory corruption issue addressed by Apple via improved memory handling. The vulnerability is associated with IOHIDFamily in iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, and related macOS versions (High Sierra 10.13.6 Security Update 2018-003 High Sierra; Sierra 10.12.6 Security Updat...
CVE-2019-8562
CVE-2019-8562 is a memory corruption issue in WebKit that could allow a sandboxed process to circumvent sandbox restrictions. The description indicates improvements in validation and memory handling as the root cause. Affected platforms include iOS, tvOS, Safari, and Windows via Safari/iTunes com...
CVE-2019-8568
CVE-2019-8568 affects Apple's platforms (iOS, macOS, tvOS, watchOS). Description shows a validation issue in the handling of symlinks, enabling a local user to modify protected parts of the file system. Affected products include iOS/iPhone, macOS Mojave, tvOS, and watchOS, with the fix implemente...
CVE-2019-8712
CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...
CVE-2019-8794
CVE-2019-8794 is a kernel validation issue described as a memory read access risk that can be triggered via an input sanitization vulnerability. The provided documents consistently state that the issue is fixed in iOS 13.2, iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, and watchOS 6.1, and that...
CVE-2020-10004
CVE-2020-10004 is a logic-issue vulnerability fixed in Apple OS updates: macOS Big Sur 11.0.1, iOS 14.2, and iPadOS 14.2. The issue arises from improved state management and may allow an attacker to cause an application to terminate unexpectedly or execute arbitrary code when a maliciously crafte...
CVE-2020-9820
CVE-2020-9820 is an Apple iOS/iPadOS vulnerability described as a logic issue in the File System component that allowed a remote attacker to modify the file system. The issue is fixed in iOS 13.5 and iPadOS 13.5. The available sources (NVD/Apple Red Hat entry, CNVD) confirm the description and th...
CVE-2020-9898
CVE-2020-9898 affects Apple platforms and is a sandbox bypass issue. According to Apple and Red Hat entries, the vulnerability could allow a sandboxed process to circumvent sandbox restrictions. The CVE is fixed in macOS Catalina 10.15.6 and iOS/iPadOS 13.6, with corresponding Apple advisories (H...
CVE-2020-9904
CVE-2020-9904 is a memory corruption vulnerability in Apple kernel-related components that could allow an attacker to execute arbitrary code with kernel privileges. The issue was mitigated by improved state management and is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, ...
CVE-2020-9911
CVE-2020-9911 is a logic issue in Safari Reader mode that could allow a remote attacker to bypass the Same Origin Policy. Apple fixes indicate the issue is addressed in iOS 13.6, iPadOS 13.6, and Safari 13.1.2. The initial description confirms a Same Origin bypass risk in Safari Reader; connected...
CVE-2020-9923
CVE-2020-9923 affects Apple devices (iOS, iPadOS, watchOS) via a kernel memory‑corruption vulnerability in the kernel components. The issue could allow a local attacker to execute arbitrary code with system/kernel privileges. Apple fixed it in iOS 13.6, iPadOS 13.6, and watchOS 6.2.8 by improving...
CVE-2021-1770
CVE-2021-1770 describes a buffer overflow exposure in Apple systems. Affected products include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5, where the issue is mitigated by the Big Sur 11.3/iOS 14.5/iPadOS 14.5/watchOS 7.4/tvOS 14.5 updates that address the overflow and a...
CVE-2021-30729
CVE-2021-30729 affects Apple iOS/iPadOS 14.x components (notably CommCenter). A logic issue could allow a device to accept invalid activation results. The issue is fixed in iOS 14.6 / iPadOS 14.6. Remediation: update to iOS/iPadOS 14.6 or later. Exploitation details are not provided in the connec...
CVE-2022-32859
CVE-2022-32859 describes a logic issue in Apple iOS where improved state management fixes a vulnerability that allowed deleted contacts to still appear in Spotlight search results. Affected software: iOS prior to 16; fix is in iOS 16 and later. Root cause: state management logic that did not corr...
CVE-2022-32865
CVE-2022-32865 affects Apple platforms and is described in official Apple security content as a kernel‑level issue mitigated by memory handling improvements. According to the vulnerability entry, the flaw is fixed in iOS 16 and macOS Ventura 13, with the potential to allow an app to execute arbit...
CVE-2022-42831
CVE-2022-42831 describes a race condition in Apple devices that could allow an app with root privileges to execute arbitrary code with kernel privileges. Apple fixes are noted in iOS 16.1 and iPadOS 16, and macOS Ventura 13. The initial description states kernel-level impact but does not provide ...
CVE-2023-40419
CVE-2023-40419 affects Apple platforms (tvOS 17, iOS 17, iPadOS 17, watchOS 10). The issue allowed an app to gain elevated privileges due to insufficient checks; Apple patched by improving checks, with fixed versions in the listed OS updates. Remediation is to deploy the corresponding OS updates ...
CVE-2023-42934
CVE-2023-42934 is an information-disclosure issue in Apple platforms that was fixed by removing vulnerable code. Affected products/versions include macOS Sonoma 14, iOS 17, and iPadOS 17. Impact is that an app with root privileges may access private information. The Public advisories also state t...
CVE-2024-23219
Apple CVE-2024-23219 is an authentication flaw affecting Stolen Device Protection that could be unexpectedly disabled. Connected sources confirm the issue is addressed with improved authentication and fixed in iOS 17.3 and iPadOS 17.3. Affected versions are prior to 17.3. Remediation: update to i...
CVE-2024-23256
CVE-2024-23256 describes a logic issue affecting Apple iOS/iPadOS Safari Private Browsing (Locked Private Browsing). The connected documents confirm the vulnerability arises from improved state management, causing a user’s locked tabs to be briefly visible when switching tab groups while Locked P...
CVE-2024-40793
CVE-2024-40793 is an Apple vulnerability where vulnerable code was removed. It affects multiple Apple platforms and is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. The issue could allow an app to acc...
CVE-2024-40796
Technical details about CVE-2024-40796 are not publicly provided in the supplied documents; the materials reference the fix in Apple OS versions but do not describe root cause, affected components, or exploit information. Monitor for updates.
CVE-2024-44169
CVE-2024-44169 – Apple OS memory handling issue impacted Apple operating systems (macOS, iOS, iPadOS, visionOS, watchOS, tvOS, macOS Sequoia/Sonoma). The issue is described as caused by memory handling that could allow an app to cause an unexpected system termination. Affected versions include ma...
CVE-2024-54499
CVE-2024-54499 — Apple ImageIO use-after-free Description: A use-after-free issue in ImageIO was addressed by improved memory management. Processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions (as stated): visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS...
CVE-2024-54517
CVE-2024-54517 affects Apple platforms and is resolved by macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, and iPadOS 18.2. The issue involves an out-of-bounds/bounds-check related memory issue that could allow an app to corrupt coprocessor memory. Technical details from the connected docum...
CVE-2025-24220
CVE-2025-24220 concerns a permissions issue in iOS/iPadOS that could allow an app to read a persistent device identifier. The connected sources consistently describe the vulnerable surface as a permissions-related flaw and confirm that Apple addressed it in iOS 18.4 and iPadOS 18.4. The CVE entry...
CVE-2025-30426
CVE-2025-30426 affects Apple platforms and stems from insufficient entitlement checks that can allow an app to enumerate a user’s installed apps. The issue is fixed by Apple in multiple OS updates: visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, and macOS Sequoia 15.4. The CVSS ...