CVE-2019-8753

CVE-2019-8753 affects CFNetwork in Apple platforms (macOS Catalina 10.15, iOS 13, watchOS 6, tvOS 13). Description: processing maliciously crafted web content may lead to a cross-site scripting (XSS) vulnerability. Root cause: inadequate checks in CFNetwork that allowed script execution when hand...

CVE-2024-44233

CVE-2024-44233 affects Apple platforms where parsing a maliciously crafted video file could cause an unexpected system termination. The issue was mitigated by improved bounds checks and is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iP...

CVE-2020-9773

CVE-2020-9773 describes an information disclosure in iOS/iPadOS 14.0 where a malicious app may identify other installed apps. The issue is stated to be mitigated by improved handling of icon caches and is fixed in iOS 14.0 and iPadOS 14.0. Connected sources corroborate the effect and resolution, ...

CVE-2021-30802

CVE-2021-30802 is a use-after-free vulnerability in Apple's Image Processing/WebKit stack triggered by processing malicious web content, allowing arbitrary code execution. Public disclosures in the connected documents confirm the issue affects iOS and iPadOS, with Apple stating fixes in iOS 14.7 ...

CVE-2021-30948

CVE-2021-30948 affects Apple iOS and iPadOS; an inconsistent UI state management bug potentially allows a person with physical access to an iOS device to access stored passwords without authentication. The issue is fixed in iOS 15.2 / iPadOS 15.2. Vulnerable component details are not fully specif...

CVE-2022-42839

Technical details about CVE-2022-42839 are not publicly provided in the supplied documents; available sources only indicate an Apple iOS/iPadOS/macOS security update addressing location data read risk. Monitor for official disclosures.

CVE-2024-40824

CVE-2024-40824 affects Apple platforms (watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, tvOS 17.6). The issue allows an app to bypass Privacy preferences and was addressed via improved state management; fixes are in the listed OS versions. The CPE/context is supported by Apple security up...

CVE-2024-44184

CVE-2024-44184 is a permissions-related issue in Apple platforms. The vulnerability could allow an app to access user-sensitive data. Fixes are provided in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, and iOS/iPadOS 17.7 and 18. No exploit details are provided in the connected documen...

CVE-2024-44215

CVE-2024-44215 affects Apple OS families. The issue arises when processing an image, which may disclose process memory. Affected products/versions include tvOS 18.1; iOS 18.1 and iOS 17.7.1 (iPadOS same); macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The descriptio...

CVE-2025-30468

Summary of CVE-2025-30468 : Several connected sources confirm a vulnerability in iOS/iPadOS before version 26 where Private Browsing tabs could be accessed without authentication due to improper state management. Apple has issued fixes in iOS 26 and iPadOS 26, addressing the issue through improve...

CVE-2025-31228

CVE-2025-31228 affects Apple iOS/iPadOS; locked-device notes access via physical access vulnerability. Affected: iPadOS 17.7.7, iOS 18.5, iPadOS 18.5. Root cause: inadequate authentication allowed on the lock screen. Impact: attacker with physical access could read notes from the lock screen (hig...

CVE-2026-64775

Technical details for CVE-2026-64775 are not publicly provided in the supplied documents; the memory initialization issue and affected Apple OS versions are mentioned, but no exact product/version specifics or remediation are confirmed here. Monitor for updates.

CVE-2010-3116

CVE-2010-3116 corresponds to multiple use-after-free vulnerabilities in WebKit related to MIME-type handling by plug-ins. The issue affects WebKit-based clients such as Apple Safari (before 4.1.3 and 5.0.x before 5.0.3), Google Chrome (before 5.0.375.127), and webkitgtk (before 1.2.6). Exploitati...

CVE-2010-3257

CVE-2010-3257 is a use-after-free vulnerability in WebKit/WebKitGTK+ that can allow remote code execution or a crash via element focus. It affects WebKit-based components used by Safari, Chrome, and webkitgtk prior to affected patch levels (e.g., webkitgtk before 1.2.6). The MiracleLinux AXSA adv...

CVE-2011-2818

CVE-2011-2818 is a use-after-free memory corruption in Chrome/Safari related to display box rendering, enabling remote code execution or DoS via a crafted web page. Affected: Google Chrome before 13.0.782.107; exploitation via elements with certain styles as siblings/children of floated elements....

CVE-2015-3740

CVE-2015-3740 affects WebKit as used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). It enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to a memory corruption issue. Public references note multiple OS/browse...

CVE-2016-4643

CVE-2016-4643 affects Apple iOS (prior to 9.3.3), tvOS (prior to 9.2.2) and OS X El Capitan (prior to 10.11.6 and Security Update 2016-004). Root cause: a validation issue in the parsing of HTTP 407 responses within CFNetwork Proxies. Consequence (as stated by Apple and CVE references): an attack...

CVE-2016-4772

CVE-2016-4772 is a kernel-stage vulnerability documented in Apple security records, with concrete detail in the Apple Watch security entry. The vulnerability is described as a remote denial-of-service condition caused by a lock handling issue in the kernel. The linked entry notes that the issue w...

CVE-2017-7075

CVE-2017-7075 affects iOS prior to 11 in the Notes component. A local attacker could read locked-note content from search results, due to incomplete data cleanup. Impact: information disclosure of sensitive notes. Remediation: update to iOS 11 or later (as addressed by Apple in the iOS 11 securit...

CVE-2018-4085

CVE-2018-4085 affects Apple devices via the QuartzCore component. A memory corruption issue in processing web content could allow remote code execution or cause a denial of service (application crash). Affected: iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, watchOS before 4.2.2. Mi...

CVE-2018-4086

CVE-2018-4086 affects Apple devices on iOS < 11.2.5, macOS < 10.13.3, tvOS < 11.2.5, and watchOS

CVE-2018-4156

CVE-2018-4156 is a race-condition vulnerability in Apple’s PluginKit affecting iOS versions before 11.3 and macOS versions before 10.13.4. The issue can let a crafted app execute arbitrary code in a privileged context, representing a local-priority privilege-escalation impact. Related CES data co...

CVE-2018-4252

CVE-2018-4252 affects iOS before 11.4 (Siri). A physical-access attacker could enable Siri from the lock screen and access protected notification content; Apple corrected this in iOS 11.4 by tightening Siri permissions and lock-screen checks. The issue is explicitly tied to Siri permissions and l...

CVE-2019-8711

The CVE-2019-8711 entry describes a logic issue in iOS 13 related to notification previews that could appear on Bluetooth accessories even when previews are disabled. The root cause is improper validation/display logic for notification previews. Apple confirms the fix is included in iOS 13, and t...

CVE-2019-8715

CVE-2019-8715 is a memory corruption vulnerability in PluginKit that could allow an attacker to execute arbitrary code with system privileges. Apple pages indicate the issue is fixed in macOS Catalina 10.15.1 and Security Updates 2019-001/006 (macOS Catalina 10.15 and iOS 13). Connected docs do n...

CVE-2020-3916

Apple fixed CVE-2020-3916 in watchOS 6.2, iOS 13.4 and iPadOS 13.4 by tightening sandbox restrictions. The vulnerability could let an attacker use an alternate app icon to disclose a photo without requiring photo permissions, via the Icons component on Apple Watch/iOS/iPadOS. Reported as an acces...

CVE-2020-9914

CVE-2020-9914: An input validation issue in Bluetooth in Apple platforms allowed a privileged-network attacker to potentially cause a denial of service via malformed Bluetooth packets. Affected: Apple ecosystem (iOS/iPadOS, tvOS) prior to the fixes. Mitigation: update to iOS 13.6 / iPadOS 13.6 an...

CVE-2021-1835

CVE-2021-1835 concerns Apple iOS/iPadOS where a person with physical access could access notes from the lock screen. Affected: iOS/iPadOS prior to 14.5; Impact: confidentiality of notes could be exposed locally. The issue was fixed in iOS 14.5 and iPadOS 14.5 with improved checks. Metrics (NVD): ...

CVE-2021-30667

CVE-2021-30667 is a logic/validation flaw in Apple’s Wi‑Fi stack that could allow a nearby attacker (in range of an adjacent network) to coerce a client into using a weaker authentication method. The issue is fixed in iOS 14.6 and iPadOS 14.6. Affected products include iPhone and iPad models supp...

CVE-2021-30967

CVE-2021-30967 affects Apple iOS/iPadOS via the NetworkExtension component. A permissions issue was addressed with improved validation, allowing a local attacker to read sensitive information. Apple states the fix is available in iOS 15.2 and iPadOS 15.2. The connected Red Hat/Apple security entr...

CVE-2022-32867

CVE-2022-32867 affects Apple iOS (Crash Reporter data handling) and macOS Ventura 13, where a user with physical access could read past diagnostic logs. Apple fixes: iOS 16 and macOS Ventura 13, per CVE context; CVSS shown as LOW (PHYSICAL access, no user interaction). No exploitation details are...

CVE-2022-32909

CVE-2022-32909 involves Apple iOS where improper cache handling could allow an app to access user‑sensitive data. Affected product: iOS (prior to 16); fix: iOS 16. Impact: data disclosure. CVSSv3.1 (NVD): 5.5 (Medium), Attack Vector: Local, Attack Complexity: Low, Privileges Required: None, User ...

CVE-2023-40409

The CVE-2023-40409 issue concerns Apple platforms and is tied to improved memory handling that fixes a vulnerability allowing an app to execute arbitrary code with kernel privileges. The vulnerability is addressed in specific Apple OS updates: macOS Ventura 13.6, macOS Monterey 12.7, tvOS 17, wat...

CVE-2023-40431

CVE-2023-40431 affects Apple iOS and iPadOS 17 (and earlier reports reference GPUs/kernel memory handling). The issue arises from memory handling weaknesses in components used by Apple devices, enabling an app to execute arbitrary code with kernel privileges. Multiple connected sources (Apple CVE...

CVE-2023-40520

The CVE-2023-40520 issue concerns Apple platforms where an app could access edited photos saved in a temporary directory due to insufficient access control in Photos Storage. Affected products include tvOS, iOS, iPadOS (all before 17) and watchOS before 10. The underlying problem is improper acce...

CVE-2023-42925

CVE-2023-42925 affects Apple platforms (iOS, iPadOS, macOS Sonoma) and concerns an app potentially accessing Notes attachments due to insufficient restriction of data container access. The issue is addressed in iOS 17, iPadOS 17, and macOS Sonoma 14. Connected sources confirm the vulnerability de...

CVE-2024-23240

CVE-2024-23240 affects Apple iOS/iPadOS via the Photos feature, where the shake-to-undo workflow could re-surface a deleted photo without authentication. The issue is addressed in iOS 17.4 and iPadOS 17.4 with updated checks. If you rely on this CVE data, apply the 17.4 updates to mitigate. The c...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

CVE-2024-44282

CVE-2024-44282 is an out-of-bounds read vulnerability that Apple addressed by improving input validation. The issue may allow disclosure of user information when parsing a file. Affected products/versions disclosed in supplied sources include tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iP...

CVE-2024-54469

CVE-2024-54469 is an Apple macOS/iOS/iPadOS/visionOS vulnerability where improved checks fixed a local information-leak issue. Affected platforms include macOS Ventura 13.7, macOS Sequoia 15, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. The vulnerability allows a local user to leak sensit...

CVE-2024-54494

Root cause: a race condition was addressed with additional validation in CVE-2024-54494. Affected products include Apple operating systems: iPadOS 17.7.3; iOS 18.2; iPadOS 18.2; macOS Sequoia 15.2; macOS Ventura 13.7.2; macOS Sonoma 14.7.2; watchOS 11.2; visionOS 2.2; tvOS 18.2. Issue: an attacke...

CVE-2025-43501

CVE-2025-43501 affects WebKitGTK/WebKitGTK4. The connected advisories document a buffer overflow in processing malicious web content that can lead to an unexpected process crash in affected GTK-based WebKit runtimes. The issue is fixed in WebKitGTK/WebKitGTK4 by version 2.50.4 (and related packag...

CVE-2026-20690

CVE-2026-20690 affects Apple CoreMedia: processing an audio stream in a malicious media file may trigger an out-of-bounds access, fixed by improved bounds checking in iOS 18.7.7/iPadOS 18.7.7, macOS Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. Affected pr...

CVE-2026-28992

CVE-2026-28992 is a memory-corruption vulnerability in Apple IOHIDFamily components (and related OS subsystems) addressed by improved locking. Affected platforms include macOS Sequoia 15.7.7, Sonoma 14.8.7, Tahoe 26.5, iOS/iPadOS 18.7.9 and 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The is...

CVE-2026-43660

CVE-2026-43660 is a validation issue affecting multiple Apple platforms where processing malicious web content could prevent Content Security Policy from being enforced. Concrete details from connected sources show affected software as iOS and iPadOS (pre-18.7.9/26.5, with fixes in 18.7.9 and 26....

CVE-2026-64730

CVE-2026-64730 αφορά UI spoofing via websites that frame malicious content in WebKit/Safari. Leaks/impacts: an attacker could exploit UI spoofing when a site frames content; patched in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Root cause: improv...

CVE-2026-64746

CVE-2026-64746 involves an authorization flaw in Apple platforms where an app could add contacts without user consent. The issue is caused by inadequate validation of authorization checks and has been fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6. Connected ...

CVE-2011-1188

CVE-2011-1188 affects Google Chrome prior to 10.0.648.127. The vulnerability arises from improper handling of counter nodes, enabling a remote attacker to cause memory corruption and a denial-of-service (and potentially other impact) via unknown vectors. The issue is mitigated by updating Chrome ...

CVE-2011-1190

CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...

CVE-2011-3035

CVE-2011-3035 concerns a use-after-free in SVG use handling in Google Chrome up to version before 17.0.963.65. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via SVG use element vectors. Public references in the provided documents corrobor...