CVE-2025-24179

CVE-2025-24179 is tied to a null pointer dereference that Apple fixed by improving input validation. Affected products include iOS 18.3 and iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3, and tvOS 18.3. The vulnerability could allow an atta...

CVE-2025-31197

CVE-2025-31197 affects Apple AirPlay implementations across multiple Apple OSes (macOS, iOS, iPadOS, tvOS, visionOS). The vulnerability allows a local-network attacker to cause an unexpected app termination due to an issue corrected by improved input/state checks. Affected versions include macOS ...

CVE-2025-46305

CVE-2025-46305 affects Apple platforms via a bounds-check issue that can be triggered by a malicous HID device, potentially causing an unexpected process crash. The fixed versions include iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Taho...

CVE-2026-28951

CVE-2026-28951 is an authorization issue resolved by improved state management. Apple patches list affected platforms and versions: iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. The vulnerability could allow an app to gain roo...

CVE-2026-43699

CVE-2026-43699 is a use-after-free vulnerability in WebKit-related components that could be triggered by processing malicious web content, potentially causing an unexpected process crash. The issue is addressed with memory-management fixes and is fixed in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2...

CVE-2026-43716

CVE-2026-43716 concerns a memory-handling flaw in Safari/WebKit that can cause a crash when processing malicious web content. Affected products include Safari, iOS, iPadOS, and macOS Tahoe; root cause relates to memory handling weaknesses. The issue is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 2...

CVE-2026-43730

The CVE-2026-43730 issue is a permissions-related flaw in Apple platforms that could allow an app to fingerprint the user. It affects iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, with Apple outlining the fix as part of these updates. The ROOT CAUSE is de...

CVE-2026-43807

The CVE-2026-43807 issue is a buffer overflow in MobileAccessoryUpdater addressed by improved bounds checking. Affected products include iOS 26.5.2 and iPadOS 26.5.2; macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.5.2; tvOS 26.6, visionOS 26.6, and watchOS 26.6. The vulnerability could cause unexp...

CVE-2011-3037

Google Chrome before 17.0.963.65 is affected by CVE-2011-3037: Bad casts in anonymous block splitting, caused by improper casting of variables during analysis of documents. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via a crafted document. ...

CVE-2011-3076

Technical details about CVE-2011-3076 are not provided in the connected documents. The materials here cite the Chrome use-after-free issue but do not include affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2011-3908

CVE-2011-3908 (Google Chrome) affects Chrome versions before 16.0.912.63. The vulnerability arises from improper parsing of SVG documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. According to the description, the issue is ...

CVE-2011-3909

Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-3958

Technical details for CVE-2011-3958 are not provided in the supplied connected documents. No affected product/version or remediation is stated here. Monitor for updates.

CVE-2011-3969

Technical details for CVE-2011-3969 are not provided in the connected documents. The initial description notes a use-after-free in Chrome before 17.0.963.46, but no product/version specifics or remediation are present in the supplied sources. Monitor for updates.

CVE-2012-0596

CVE-2012-0596 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. A crafted web site can lead to remote code execution or a denial of service via memory corruption and application crash. Root cause: memory corruption in WebKit’s handling of crafted content. Impact: potential ar...

CVE-2016-1801

CVE-2016-1801 affects Apple CFNetwork Proxies in iOS (before 9.3.2), OS X (before 10.11.5), and tvOS (before 9.2.1). The vulnerability is an information leak in the handling of HTTP/HTTPS requests, allowing a privileged network-position attacker to obtain sensitive user data through URL handling....

CVE-2016-4774

CVE-2016-4774 affects Apple’s kernel in iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. The vulnerability is a kernel memory layout disclosure and out-of-bounds read triggered by a crafted app, enabling attackers to obtain sensitive memory-layout information or cause a den...

CVE-2017-13863

CVE-2017-13863 affects iOS

CVE-2017-2522

CVE-2017-2522 concerns memory corruption in Apple’s CoreFoundation. The initial description confirms that iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are affected by a vulnerability in CoreFoundation that allows remote attackers to execute arbitrary code ...

CVE-2018-4215

CVE-2018-4215 is an Apple iOS 11.4-generation Bluetooth vulnerability. The issue affects iOS before 11.4, in the Bluetooth component, enabling a crafted app to gain privileges or cause a denial of service via a buffer overflow. Root cause is described as a memory/size-validation insufficiency in ...

CVE-2018-4274

CVE-2018-4274 is a URL handling spoofing vulnerability observed in Apple WebKit components affecting iOS before 11.4.1 and Safari before 11.1.2. The Red Hat and Apple security pages confirm that the issue stems from input handling in URL processing and was addressed by improved input validation a...

CVE-2018-4298

CVE-2018-4298 maps to a permissions issue in Remote Management on macOS High Sierra (before 10.13.3) and related Security Updates. A remote user could gain root privileges due to insufficient permission validation, with the issue addressed by improved permission checks in the Remote Management co...

CVE-2019-7284

CVE-2019-7284 affects Apple iOS where processing a maliciously crafted mail message may lead to S/MIME signature spoofing. The issue was addressed with improved checks and is fixed in iOS 12.2. The available connected documents confirm the affected component as Mail/S/MIME processing and cite the...

CVE-2019-8698

CVE-2019-8698 affects Apple Profiles component entitlement verification. A validation issue could allow a malicious app to restrict access to websites. Apple fixed the issue in iOS 12.4 and tvOS 12.4; remediation is updating to these versions. The surrounding Apple security documentation explicit...

CVE-2019-8774

CVE-2019-8774 affects Apple’s Books component across iOS/iPadOS and macOS Catalina. A resource-exhaustion (denial-of-service) condition occurs when parsing a maliciously crafted iBooks file, due to input validation weaknesses in Books. Apple patched this in iOS 13.1, iPadOS 13.1, and macOS Catali...

CVE-2020-27924

CVE-2020-27924 describes an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution when processing a malicious image. Apple confirms fixes across macOS Big Sur 11.1, Catalina 10.15.7 (Security Update 2020-001), Mojave 10.14.6 (Security Update 2020-007), mac...

CVE-2020-3918

CVE-2020-3918 affects Apple platforms (iOS/iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2). Root cause described as an access issue resolved by additional sandbox restrictions, reducing the ability of a local user to view sensitive information. Affected components are tied to sandbox...

CVE-2020-9897

CVE-2020-9897 affects Apple platforms via CoreGraphics. It describes an out-of-bounds write triggered by processing a maliciously crafted PDF, leading to potential arbitrary code execution. Root cause identified as improper input validation in the PDF handling path. Affected products include iOS/...

CVE-2020-9996

CVE-2020-9996 is a use-after-free memory-management issue that Apple addressed; the public description states it could allow a malicious app to gain elevated privileges. Apple’s security updates for macOS Big Sur 11.0.1 and iOS/iPadOS 14.0 (HT211931) list this CVE among fixes, indicating a patch ...

CVE-2021-30816

CVE-2021-30816 corresponds to a FaceTime-related information disclosure on Apple iOS 15 and iPadOS 15. The issue arises from permissions logic, allowing a locally present attacker with physical access to view private contact information. Apple patched this with improved permissions logic in iOS 1...

CVE-2021-31005

CVE-2021-31005 is a logic issue in WebKit related to state management, enabling issues when Block all remote content is disabled. It is fixed in iOS 15/iPadOS 15 and macOS Monterey 12.0.1. Affected UI/web content handling is addressed; remediation is upgrading to the listed Apple OS versions (and...

CVE-2022-32929

CVE-2022-32929 concerns a permissions issue in Apple iOS/iPadOS that could allow an app to access iOS backups. Public sources confirm this vulnerability affects iOS/iPadOS versions prior to the patched releases and was addressed by Apple in version 15.7.1.x and 16.1.x (iOS 15.7.1, iPadOS 15.7.1, ...

CVE-2023-32376

The CVE-2023-32376 issue relates to Apple platforms (iOS 16.5/iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4) and specifically affects the StorageKit/File- system entitlements. A vulnerable path could allow an app to modify protected parts of the file system due to entitlement weaknesses...

CVE-2023-42957

CVE-2023-42957 affects Apple platforms (iOS, iPadOS, macOS Sonoma 14, watchOS 10). Root cause: a permissions issue that could allow an app to read sensitive location information. Impact: local, low-severity exposure (CVSSv3.1 base score 3.3). Fixes are implemented in iOS 17, iPadOS 17, macOS Sono...

CVE-2024-27819

CVE-2024-27819 describes a vulnerability in iOS/iPadOS where a local attacker with physical access could access contacts from the lock screen via Siri. Apple’s remediation is in iOS 17.5 / iPadOS 17.5, where options on a locked device are restricted to mitigate this exposure. Connected sources co...

CVE-2024-27845

CVE-2024-27845 describes a privacy issue in Apple iOS/iPadOS where an app may access Notes attachments due to how temporary files were handled. The connected documentation confirms the root cause as improved handling of temporary files, with a fix implemented in iOS 17.5 and iPadOS 17.5. Impact i...

CVE-2024-27871

CVE-2024-27871 describes a path handling issue in Apple platforms that was addressed with improved validation. The description indicates that an app may have been able to access protected user data due to this path handling problem. Public fix details show the issue is resolved in macOS Sonoma 14...

CVE-2024-44145

CVE-2024-44145 affects macOS Sequoia 15, iOS 18, and iPadOS 18. The issue, tied to Sidecar, could allow a physically proximate attacker to bypass the Lock Screen due to a state-management flaw. Apple fixed the vulnerability in the indicated OS versions (Sequoia 15, iOS 18, iPadOS 18) through impr...

CVE-2024-44180

The CVE-2024-44180 entry concerns Apple iOS 18 and iPadOS 18. Affected component: the lock-screen privacy control for contacts. Root cause per sources: inadequate checks allowing an attacker with physical access to potentially access contacts from the lock screen. Impact stated by Apple and corro...

CVE-2024-44194

CVE-2024-44194 is addressed in Apple security updates: watchOS 11.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1. The issue involves improved redaction of sensitive information and may allow an app to access sensitive user data. The NVD CVSSv3.1 base score is 5.5 (Medium) with Local attack vector, Low...

CVE-2025-31221

Technical details for CVE-2025-31221 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, versions, or remediation are disclosed here.

CVE-2026-43814

CVE-2026-43814 is a use-after-free vulnerability reported by multiple sources and scored CVSS v3.1 = 9.8 (CRITICAL) . It involves memory-management weaknesses that could allow an app to trigger an unexpected system termination. Affected platforms include Apple's iOS, iPadOS, macOS Tahoe, tvOS, an...

CVE-2011-2800

Technical details for CVE-2011-2800 are not publicly provided in the supplied connected documents; no explicit product/version/impact/fix information beyond the initial description is available here. Monitor for updated disclosures or vendor advisories.

CVE-2012-0586

Technical details about CVE-2012-0586 are not publicly available in the provided documents. Monitor for updates from vendors and published advisories.

CVE-2012-0592

The CVE-2012-0592 entry concerns WebKit in Apple iOS (pre-5.1) and iTunes (pre-10.6) with a remote code execution/DoS potential via a crafted site. Connected sources (ZDI-12-067) detail the root cause as a JavaScriptCore allocation-length miscalculation during Array.splice handling in WebKit, all...

CVE-2012-0620

CVE-2012-0620 : WebKit used in Apple iOS before 5.1 and iTunes before 10.6 is affected. A crafted web site can lead to remote code execution or memory corruption and application crash. The initial description states the impact and affected components but provides no explicit remediation, patch ve...

CVE-2016-4666

CVE-2016-4666 affects Apple WebKit components (iOS prior to 10.1, Safari prior to 10.0.1, tvOS prior to 10.0.1) and can lead to remote code execution or memory corruption via malicious web content. Public advisories and OpenVAS/Nessus listings corroborate the WebKit-based issue and reference Appl...

CVE-2016-4718

The CVE-2016-4718 entry concerns a buffer overflow in FontParser that affects multiple Apple platforms when processing malicious font files. Specifically, Apple iOS before 10, macOS (OS X) before 10.12, tvOS before 10, and watchOS before 3 are listed as vulnerable, with the issue allowing a remot...

CVE-2018-4189

CVE-2018-4189 is a memory corruption vulnerability affecting Apple platforms: iOS before 11.2.5, macOS High Sierra before 10.13.3, watchOS before 4.2.2, tvOS before 11.2.5, and related Security Updates. The issue was addressed with improved memory handling; no concrete exploit details are provide...

CVE-2018-4367

CVE-2018-4367 is a memory-related vulnerability described as a stack corruption issue that affected iOS and macOS (prior to iOS 12.1). Apple’s entry ties it to FaceTime, noting a memory corruption problem resolved by improved input validation and patched in iOS 12.1. The NVD entry likewise states...