CVE-2018-4332

CVE-2018-4332 is a memory corruption vulnerability in the Heimdal component identified by Apple advisories for multiple Apple OSes. The issue affected iOS (versions before 12), macOS Mojave 10.14, tvOS 12, and watchOS 5, and was addressed via memory-management hardening in the corresponding Apple...

CVE-2018-4343

CVE-2018-4343 is an Apple memory corruption vulnerability affecting prior to iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The description indicates a memory handling fix was applied. Connected Red Hat/Apple entries corroborate a memory corruption issue (no exploitation details provided). R...

CVE-2019-8639

CVE-2019-8639 involves multiple memory corruption issues in Apple software. The fixed products/versions include watchOS 5.2, iOS 12.2, iCloud for Windows 7.11, iTunes 12.9.4 for Windows, Safari 12.1, and WebKit-related components. The described impact is that processing maliciously crafted web co...

CVE-2019-8648

CVE-2019-8648 is a memory corruption issue that was addressed with improved input validation. The vulnerability is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, and watchOS 5.3. A remote attacker may be able to cause arbitrary code execution. The initial description does not specify the vul...

CVE-2019-8793

CVE-2019-8793 is associated with a screen recording indicator consistency issue in Apple iOS/iPadOS. The authenticated root cause is a state-management inconsistency that could allow a local user to record the screen without a visible indicator. Apple fixed this in iOS 13.2 and iPadOS 13.2. Red H...

CVE-2019-8857

The CVE-2019-8857 issue concerns the Photos component in Apple iOS/iPadOS where Live Photo audio and video data could be shared via iCloud links even when Live Photo is disabled in the Share Sheet carousel. Root cause: insufficient validation during iCloud Link creation, leading to data exposure....

CVE-2020-10003

CVE-2020-10003 affects Apple platforms via a vulnerability in the path validation logic for symlinks, enabling a local privilege escalation. It is fixed in macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, tvOS 14.2, and watchOS 7.1 through improved path sanitization. Affected components are tied to Cr...

CVE-2020-27929

CVE-2020-27929 concerns a logic issue in the handling of Group FaceTime calls. The affected component is FaceTime on Apple iOS devices, with the root cause described as a logic/state-management issue that could allow a user to send video in Group FaceTime calls without realizing it. The vulnerabi...

CVE-2020-9902

CVE-2020-9902 is an out-of-bounds read vulnerability in Apple’s kernel component that could allow a malicious app to determine the kernel memory layout. The issue is fixed in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. Connected Apple advisories cite kernel memo...

CVE-2020-9905

The CVE-2020-9905 entry describes a buffer overflow fixed by improved bounds checking. The vulnerability affected Apple platforms and could enable a remote attacker to cause a denial of service. Remediation is available in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, and tvOS 13.4.8. The con...

CVE-2020-9985

CVE-2020-9985 is a buffer overflow in Apple’s USD file processing that could cause an application to terminate or execute arbitrary code. It affects multiple Apple platforms and was addressed by memory-management improvements. The fixed versions are iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, a...

CVE-2021-30815

CVE-2021-30815 affects Apple iOS/iPadOS 15 (and prior) where Siri/lock-screen interaction could allow a local attacker to view contacts from a locked device. Root cause cited as improper state management; Apple fixed the issue in iOS 15/iPadOS 15. Remediation: update to those versions. Exploitati...

CVE-2021-30854

The CVE-2021-30854 issue is described by Apple as a logic error in state management that could allow a sandboxed process to circumvent sandbox restrictions. It is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. The connected Apple security pages enumerate the affected platforms and list patch ...

CVE-2021-30943

Apple CVE-2021-30943 concerns an issue in the Messages app where handling of group membership could allow a malicious user to leave a messages group while still receiving messages in that group. The root cause is described as a logic flaw in group membership handling, and Apple states a fix is im...

CVE-2023-40410

CVE-2023-40410 concerns an out-of-bounds read in macOS/iOS/watchOS/tvOS kernel-related handling, disclosed via improved input validation. The issue allows an app to disclose kernel memory and is addressed by updates across Apple platforms: macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14,...

CVE-2024-44232

CVE-2024-44232: Apple platforms (macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1; iOS 18.1 and iPadOS 18.1) fixed by improved bounds checks. Parsing a malicious video file may cause an unexpected system termination. Remediation is to ...

CVE-2024-44273

CVE-2024-44273 concerns an issue in Apple OS handling of symlinks. Connected documents confirm that the vulnerability is fixed in iOS 18.1, iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The primary root cause is improved handling of symlinks, and the impact is that ...

CVE-2025-24251

CVE-2025-24251 affects multiple Apple OS releases (macOS Sequoia 15.4; macOS Ventura 13.7.5; macOS Sonoma 14.7.5; iOS 18.4/iPadOS 18.4; tvOS 18.4; watchOS 11.4; visionOS 2.4). The flaw enables a local‑network attacker to cause an unexpected termination of an app due to improved checks implemented...

CVE-2025-31227

CVE-2025-31227 affects iOS and iPadOS, addressing a logic issue that could allow access to a deleted call recording when a device is physically accessed. Apple fixes are in iOS 18.5 and iPadOS 18.5, with mitigation via updated checks. The available documents confirm the vulnerability arises from ...

CVE-2026-28990

CVE-2026-28990 involves a memory handling flaw that may allow memory corruption when processing a specially crafted image. Apple lists this as fixed in multiple devices: iOS 26.5 and iPadOS 26.5; macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5; tvOS 26.5; visionOS 26.5; and watchOS 26.5. The entr...

CVE-2026-43673

CVE-2026-43673 is an Apple memory‑handling issue. When processing a maliciously crafted audio file, CoreAudio may corrupt process memory. The entry is currently fixed in multiple Apple platforms and versions: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; t...

CVE-2026-64749

CVE-2026-64749 is an Apple memory-handling vulnerability affecting multiple Apple platforms. The issue can allow an app to cause an unexpected system termination or corrupt kernel memory, with local attack vector and high impact. Details from connected sources indicate fixes across multiple OS ve...

CVE-2026-64770

CVE-2026-64770 describes an out-of-bounds write vulnerability fixed in multiple Apple OS releases. Affected: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Root cause: memory safety issue (out-of-bounds write) leading to possible heap...

CVE-2011-2860

CVE-2011-2860 affects Google Chrome prior to 14.0.835.163, where a use-after-free in handling table styles allows remote attackers to cause a denial of service or potentially other impact. The issue is exploitable via vectors related to table styles, with a high impact identified (CVSS-like metri...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

CVE-2015-3752

The CVE-2015-3752 issue affects WebKit’s Content Security Policy handling in Safari (and underlying WebKit in iOS) prior to specific updates. The root cause is improper restriction of cookie transmission for CSP report requests, enabling potential leakage of cookies via cross-origin requests or p...

CVE-2016-4637

CVE-2016-4637 affects Apple platforms (iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to 9.2.2, watchOS prior to 2.2.2). The issue arises in CoreGraphics BMP image decoding, where a crafted BMP can trigger memory corruption, enabling remote code execution or a denial of service. Publicly d...

CVE-2018-4094

CVE-2018-4094 affects Apple devices (iOS <11.2.5, macOS <10.13.3, tvOS <11.2.5, watchOS

CVE-2018-4143

CVE-2018-4143 affects Apple kernels across iOS (pre-11.3), macOS (pre-10.13.4), tvOS (pre-11.3), and watchOS (pre-4.3). Root cause: memory corruption in the Kernel enabling a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Public details confirm the issu...

CVE-2019-6200

CVE-2019-6200 is an Apple vulnerability affecting iOS devices and macOS, described as an out-of-bounds read in a Bluetooth component. Root cause: improved input validation was applied to fix the issue. Impact: an attacker on a privileged network position could potentially execute arbitrary code. ...

CVE-2019-8504

CVE-2019-8504 is an Apple memory initialization issue affecting the IOKit/kernel memory handling. The vulnerability could allow a local user to read kernel memory. The issue is addressed in official Apple advisories with patches in iOS 12.2 and macOS Mojave 10.14.4; multiple connected sources con...

CVE-2019-8511

CVE-2019-8511 is a buffer‑overflow issue addressed by Apple with improved memory handling. It affects Apple platforms (iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2) and may allow a malicious app to elevate privileges. Patches are in the referenced updates; exploitation details are not provided in ...

CVE-2019-8704

CVE-2019-8704 affects Apple devices (notably the tvOS 13 update) in the Keyboards component, where an authentication/state-management issue could allow a local user to leak sensitive information. The descriptor shows the flaw as addressed with improved state management and fix in tvOS 13. The con...

CVE-2019-8780

CVE-2019-8780 is a kernel-permissions logic vulnerability in Apple’s iOS/iPadOS kernel component that could allow a malicious app to determine the kernel memory layout. The issue is described as a memory corruption/permission logic problem and is fixed in iOS 13.1 and iPadOS 13.1 (and tvOS 13). R...

CVE-2020-29624

CVE-2020-29624 concerns a memory corruption issue in the processing of font files. The vulnerability is mitigated by improved input validation and is fixed across Apple platforms including watchOS 7.2, macOS Big Sur 11.1, Security Updates for Catalina and Mojave, and iOS/iPadOS 14.3, tvOS 14.3. A...

CVE-2020-9878

CVE-2020-9878 is an Apple Model I/O USD file processing buffer overflow vulnerability. It affects macOS Catalina (10.15.x), iOS 13.6, iPadOS 13.6, tvOS 13.4.8, and watchOS 6.2.8. Processing a malicious USD file could cause an app to terminate or execute arbitrary code. Apple fixed the issue in th...

CVE-2020-9882

CVE-2020-9882 involves a buffer overflow in processing a malicious USD file, fixed in Apple updates: iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and watchOS 6.2.8. Root cause: improved memory handling to address a memory-corruption risk. Affected products include Apple platforms listed above; ...

CVE-2020-9933

CVE-2020-9933 relates to an authorization issue in Apple’s GeoServices component that could allow a malicious app to read sensitive location information. The vulnerability affects multiple Apple platforms (iOS, iPadOS, tvOS, watchOS) and is addressed by state-management improvements, with patches...

CVE-2021-1836

CVE-2021-1836 is an Apple iOS/iPadOS/tvOS issue described as a logic issue that could allow a local user to create or modify privileged files. Connected sources confirm this CVE affects Apple platforms and was fixed in iOS 14.5 / iPadOS 14.5 / tvOS 14.5. The security content entry for CVE-2021-18...

CVE-2021-1865

CVE-2021-1865 concerns a log-in credential leak where passwords could be visible in screenshots on iOS devices. The issue is described as a rendering/validation problem that allowed a user’s password to appear onscreen. Affected software is iOS and iPadOS, with fixed behavior implemented in iOS 1...

CVE-2021-1877

Apple fixed an out-of-bounds read in the Kernel (iOS/iPadOS) with improved input validation, addressed in iOS 14.5 and iPadOS 14.5. A local user may have read kernel memory prior to patch. Affected component: Kernel on Apple devices; remediation: upgrade to 14.5 or later.

CVE-2021-30742

The CVE-2021-30742 issue affects Apple iOS/iPadOS Audio components. A memory consumption vulnerability in AudioToolboxCore during processing of maliciously crafted audio (notably LOAS) could enable arbitrary code execution. Multiple connected advisories corroborate that Apple fixed this with upda...

CVE-2021-30923

CVE-2021-30923 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s advisory for macOS Monterey 12.0.1 fixes this issue by applying improved locking to the affected kernel/file-system pathways. The available connect...

CVE-2022-32871

CVE-2022-32871 (Apple iOS) stems from a logic issue that could allow a person with physical access to a device to use Siri to access private calendar information. Several connected sources confirm the issue and its remediation: iOS 16 includes fixes that tighten restrictions around Siri-access to...

CVE-2022-32932

CVE-2022-32932 affects Apple’s kernel interface (Apple Neural Engine path) via a double-fetch bug in ANECGetMutableOperationInfo() that can yield an out-of-bounds write when mutable procedure info is manipulated by a concurrent thread. Root cause: op_count is read twice to size and then populate ...

CVE-2022-42791

CVE-2022-42791 is a macOS-specific race condition vulnerability that was addressed by improving state handling. The issue could allow an app to execute arbitrary code with kernel privileges and is fixed in macOS Ventura 13. Affected component is the kernel-related path implicated by the race cond...

CVE-2023-34352

CVE-2023-34352 concerns a permissions issue in Apple platforms where sensitive information (user account emails) could be leaked due to inadequate redaction. The issue is addressed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5, via enhanced redaction of sensitive data i...

CVE-2023-42919

The linked records confirm CVE-2023-42919 is a privacy-related issue described as an improved private data redaction in log entries that could allow an app to access sensitive user data. Red Hat’s RH:CVE-2023-42919 entry reiterates the same description and lists affected platforms as Apple macOS ...

CVE-2024-27805

CVE-2024-27805 describes an issue where improved validation of environment variables prevents an app from accessing sensitive user data. Affected Apple platforms include macOS Ventura 13.6.7, macOS Monterey 12.7.5, macOS Sonoma 14.5, iOS 16.7.8 / 16.7.8, iPadOS 16.7.8 / 17.5, iOS 17.5, watchOS 10...

CVE-2024-27863

CVE-2024-27863 is an information-disclosure vulnerability in Apple’s kernel related to insufficient private data redaction in log entries. A local attacker could determine kernel memory layout. Apple has fixed the issue in iOS 17.6, iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS So...