CVE-2024-27805

CVE-2024-27805 describes an issue where improved validation of environment variables prevents an app from accessing sensitive user data. Affected Apple platforms include macOS Ventura 13.6.7, macOS Monterey 12.7.5, macOS Sonoma 14.5, iOS 16.7.8 / 16.7.8, iPadOS 16.7.8 / 17.5, iOS 17.5, watchOS 10...

CVE-2024-27863

CVE-2024-27863 is an information-disclosure vulnerability in Apple’s kernel related to insufficient private data redaction in log entries. A local attacker could determine kernel memory layout. Apple has fixed the issue in iOS 17.6, iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS So...

CVE-2024-44205

CVE-2024-44205 describes a privacy issue where a sandboxed app may access sensitive user data in system logs. The vendor-fixed versions are: macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, and iOS 17.6 and iPadOS 17.6. The NVD/NVD-derived entry notes ...

CVE-2024-54500

CVE-2024-54500 affects Apple platforms (iPadOS/iOS, macOS, watchOS, visionOS, tvOS) and is tied to processing a maliciously crafted image that could disclose process memory. The issue is addressed by Apple in iPadOS 18.2/iOS 18.2, macOS 14.7.2/Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7...

CVE-2024-54538

CVE-2024-54538 describes a denial‑of‑service vulnerability in Apple OS components resolved by improved input validation. A remote attacker could trigger a DoS. Affected and fixed versions per sources: visionOS 2.1; iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; tvOS 18.1; macOS Sonoma 14...

CVE-2025-24217

CVE-2025-24217 affects Apple platforms; fixed in iOS 18.4 / iPadOS 18.4 / tvOS 18.4 / macOS Sequoia 15.4. Description indicates an app may access sensitive user data; root cause details are not provided beyond note of improved redaction of sensitive information. Exploitation status is not disclos...

CVE-2025-24221

CVE-2025-24221 affects Apple devices and is addressed by patches in visionOS 2.4, iOS 18.4, iPadOS 18.4, and iPadOS 17.7.6. The root cause is improved data access restriction that prevents unauthorized exposure of keychain data in iOS backups. Impact is that sensitive keychain data may have been ...

CVE-2025-24283

CVE-2025-24283 describes a logging issue where sensitive user data could be exposed due to inadequate data redaction. The problem has been fixed in Apple platforms: visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The CVE entry notes that an app may access sensitive user data as a res...

CVE-2025-30445

CVE-2025-30445 is a type-confusion vulnerability addressed by Apple across multiple platforms. The issue, triggered by local-network access, could cause an unexpected app termination and was fixed with improved checks. Affected products/versions include macOS Sequoia 15.4, macOS Ventura 13.7.5, m...

CVE-2025-43429

CVE-2025-43429 is a buffer overflow in processing malicious web content, addressed by improved bounds checking. Public advisories and records confirm the issue affects WebKit-derived engines (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK deployments. Affected and fixed details includ...

CVE-2026-20687

CVE-2026-20687 is a use-after-free memory issue that Apple fixed in multiple platforms: iOS 18.7.7 and iPadOS 18.7.7; iOS 26.4 and iPadOS 26.4; macOS Sequoia 15.7.5; macOS Tahoe 26.4; tvOS 26.4; and watchOS 26.4. The root cause is a memory-management defect that can lead to an app causing unexpec...

CVE-2026-43676

CVE-2026-43676 affects WebKit-related components used in Safari/WebKit on macOS Tahoe and iOS/iPadOS, with an out-of-bounds access issue addressed by improved bounds checking. The vulnerability leads to potential crashes when processing malicious web content, and is fixed in Safari 26.5.2 (and re...

CVE-2026-43707

CVE-2026-43707 is a memory corruption vulnerability in WebKit that could cause an unexpected process crash when processing maliciously crafted web content. Apple fixed it in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerability is tied to memory handling in WebKit co...

CVE-2026-64768

The CVE-2026-64768 issue is an out-of-bounds read vulnerability in Apple software addressed by input-validation improvements. It affects multiple Apple platforms (iOS/iPadOS, macOS, tvOS, visionOS) and is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS ...

CVE-2010-1813

CVE-2010-1813 affects WebKit in Apple Safari/Chrome and iOS WebKit: memory corruption via HTML object outlines can allow remote code execution or cause a crash. Vulnerable components include WebKit rendering paths in Safari <4.1.2/5.0.2 and iOS

CVE-2011-2855

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3924

CVE-2011-3924 involves a use-after-free vulnerability in Google Chrome prior to 16.0.912.77, affecting DOM selections. The impact per the description is a possible denial of service or other unspecified effects. The provided connected documents do not add concrete technical details (affected comp...

CVE-2011-3968

Technical details for CVE-2011-3968 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-3743

CVE-2015-3743 is a WebKit vulnerability affecting Apple WebKit used by iOS Safari (and related WebKit builds). The issue allows remote attackers to run arbitrary code or cause memory corruption and application crashes via a crafted web site. Affected products/versions are listed in the descriptio...

CVE-2016-1863

CVE-2016-1863 is a local kernel memory corruption vulnerability affecting Apple OS components. It is listed under Kernel for multiple Apple platforms (iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, watchOS before 2.2.2). Exploitation was demonstrated (exploitable locally per exploit-db...

CVE-2017-13888

CVE-2017-13888 corresponds to a type-confusion issue in ReplayKit on iOS prior to 11.2. The Apple security content entry notes this as a memory-management fix (improved handling) and lists the patch in iOS 11.2. Connected documents corroborate a memory-related issue under ReplayKit with this CVE;...

CVE-2017-7002

CVE-2017-7002 is a memory corruption vulnerability in Apple’s SQLite component affecting iOS <= 10.3.1 and macOS

CVE-2018-4239

CVE-2018-4239 concerns the Magnifier component in iOS prior to 11.4. A local, physically proximate attacker could view the last image used in Magnifier from the lock screen due to a permissions issue. Apple’s security content for iOS 11.4 notes this was addressed by adding/strengthening permissio...

CVE-2018-4282

CVE-2018-4282 is an Apple kernel local information-disclosure vulnerability: an out-of-bounds read could disclose kernel memory in iOS prior to 11.4.1, tvOS prior to 11.4.1, and watchOS prior to 4.3.2. The root cause is an input validation deficiency that allowed reading beyond bounds. Apple addr...

CVE-2018-4360

Summary: CVE-2018-4360 corresponds to multiple memory corruption issues resolved by Apple in 2018-era platforms. The connected documentation confirms affected versions include iOS 12 and earlier, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The root cause is memory cor...

CVE-2018-4433

CVE-2018-4433 describes a configuration issue that could allow a malicious application to modify protected parts of the file system. The entry is fixed by Apple in macOS Mojave 10.14.4 and Security Update 2019-002 for High Sierra and Sierra, as well as in watchOS 5, iOS 12, and tvOS 12. Public re...

CVE-2018-4465

CVE-2018-4465 is a memory corruption issue in Apple Disk Images components affecting iOS < 12.1.1, macOS Mojave < 10.14.2, tvOS < 12.1.1, and watchOS

CVE-2019-6204

CVE-2019-6204 affects Safari Reader in iOS 12.2 and Safari 12.1. Root cause described as a logic/validation issue; exploitation could arise from enabling Safari Reader on a maliciously crafted webpage, leading to universal cross-site scripting. Remediation: patched in iOS 12.2 and Safari 12.1. Ot...

CVE-2019-8546

CVE-2019-8546 affects Apple platforms. A local access issue allowed viewing sensitive user information due to insufficient sandbox restrictions. It is fixed in iOS 12.2, macOS Mojave 10.14.4, and watchOS 5.2 (per Apple security updates HT209599/HT209600). Affected components include core sandbox ...

CVE-2019-8567

CVE-2019-8567 relates to a user privacy issue in macOS/iOS where a device could be passively tracked by its Wi‑Fi MAC address. The root cause is the broadcast MAC being present; mitigation is removing the broadcast MAC address. Apple fixes are in iOS 12.2 (and corresponding macOS/iOS advisories) ...

CVE-2019-8702

CVE-2019-8702 affects Apple platforms (Game Center) and was mitigated by a new entitlement. The issue allowed a local user to read a persistent account identifier. Fixes are listed in Apple security updates for iOS 12.4, tvOS 12.4, macOS Mojave 10.14.6, High Sierra 2019-004, and Sierra 2019-004. ...

CVE-2020-29613

Apple fixed CVE-2020-29613 in iOS 14.3 / iPadOS 14.3. Description: a logic issue in state management could cause an enterprise app installation prompt to display the wrong domain. Root cause: state-management logic flaw. Impact: may display an incorrect domain during enterprise app installation p...

CVE-2020-3873

CVE-2020-3873 is an Apple iOS/iPadOS vulnerability affecting the Mail component, tied to improper propagation of settings for loading remote content in messages. The issue could affect how mail previews handle remote content loading. It is addressed with a fix in iOS 13.3.1 and iPadOS 13.3.1, wit...

CVE-2020-3917

CVE-2020-3917 affects Apple platforms (iOS 13.4/iPadOS 13.4, tvOS 13.4, watchOS 6.2). A local application could use an SSH client via private frameworks due to an entitlement issue; Apple addressed this with a new entitlement and patched versions. Public references indicate the vulnerability is f...

CVE-2020-6147

Pixar OpenUSD 20.05 vulnerability CVE-2020-6147 involves heap overflow when parsing USDC binary sections with compression. Four compressed sections (FIELDS, FIELDSETS, PATHS, SPECS) can trigger overflows because allocated buffers depend on file-provided counts while read sizes come from the same ...

CVE-2020-9901

CVE-2020-9901 – Apple platforms : An issue in the path validation logic for symbolic links allowed local privilege elevation. Apple fixed this by improved path sanitization, with patches in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, and tvOS 13.4.8. The vulnerability is local and requires no ...

CVE-2020-9958

CVE-2020-9958 is an Apple iOS/iPadOS vulnerability described as an out-of-bounds write that could cause an application to terminate unexpectedly or write to kernel memory. According to connected sources, the issue is addressed in iOS 14.0 and iPadOS 14.0, with Apple’s security content confirming ...

CVE-2020-9974

CVE-2020-9974 is a kernel-level logic issue in the XNU kernel that could allow a malicious app to determine kernel memory layout. Apple fixed it by improved state management, with patches in macOS Big Sur 11.0.1 and iOS/iPadOS 14.2 (as well as tvOS/watchOS updates per HT211930/HT211929).

CVE-2021-30985

CVE-2021-30985 is an out-of-bounds write in the IOMobileFrameBuffer component affecting Apple iOS/iPadOS. The issue could let a malicious app execute arbitrary code with kernel privileges and is mitigated by the vendor by memory/bounds checking improvements. Apple states this flaw is fixed in iOS...

CVE-2021-31000

CVE-2021-31000 is described in Apple security updates as a permissions issue that could allow a malicious app to read sensitive contact information. The Apple advisories (HT212978 for macOS Monterey 12.1 and related entries) tie this CVE to the Game Center component and note fixes in iOS 15.2/iPa...

CVE-2022-32827

CVE-2022-32827 is a memory corruption vulnerability in AppleAVD affecting macOS Ventura 13 and iOS prior to 16. The issue could allow an app to cause a denial-of-service. Apple fixed it in iOS 16 and macOS Ventura 13 by improved state management. No exploit details are provided in the connected d...

CVE-2022-32918

CVE-2022-32918 affects Apple platforms (iOS 16 and macOS Ventura 13). The issue allows an app to bypass Privacy preferences due to improper data protection handling. Apple notes the vulnerability was fixed in iOS 16 and macOS Ventura 13, restoring proper privacy controls. The CVE entry reflects a...

CVE-2023-38596

CVE-2023-38596: Apple fixed a protocol handling issue that allowed an app to fail to enforce App Transport Security. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14. Root cause: insufficient protocol handling in CFNetwork/App Transport Security logic. Reme...

CVE-2023-40396

CVE-2023-40396 is an Apple-level memory-handling issue that could allow an app to execute arbitrary code with kernel privileges. The description consistently states that the fix involves improved memory handling and lists affected products/versions: iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS ...

CVE-2023-40420

CVE-2023-40420 affects Apple platforms where processing web content may cause a DoS due to a memory-handling issue. The entry states the vulnerability is fixed in macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, and watchOS 10. Exp...

CVE-2023-42870

CVE-2023-42870 describes a use-after-free vulnerability fixed via memory-management improvements. Affected platforms include Apple macOS Sonoma 14, iOS 17, and iPadOS 17. The issue could allow an app to execute arbitrary code with kernel privileges. Public documentation in the initial record cite...

CVE-2024-23228

Apple iOS 17.3 and iPadOS 17.3 fix a vulnerability in the Notes component where Locked Notes content may have been unexpectedly unlocked due to state-management issues. Affected products are iPhone and iPad models supporting iOS/iPadOS 17.3. Root cause: improved state management within Notes. Imp...

CVE-2024-23282

CVE-2024-23282 is an Apple iOS/macOS/iPadOS FaceTime-related vulnerability: a maliciously crafted email may initiate FaceTime calls without user authorization. Connected sources confirm remediation: Apple patches in macOS Sonoma 14.5, watchOS 10.5, iOS 17.5 and iPadOS 17.5, and older iOS/iPadOS v...

CVE-2024-40822

CVE-2024-40822 affects Apple devices (watchOS, macOS Sonoma, iOS/iPadOS) where an attacker with physical access could access contacts from the lock screen. Apple fixed the issue in macOS Sonoma 14.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, and iOS 16.7.9/iPadOS 16.7.9. Root cause described as insuffi...

CVE-2024-44302

CVE-2024-44302 affects Apple platforms: tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and visionOS 2.1. Issue stems from processing a maliciously crafted font, which may disclose process memory. Root cause described as ...