CVE-2011-3064

CVE-2011-3064 is a use-after-free in Google Chrome before 18.0.1025.142 related to SVG clipping. This could allow a remote attacker to cause a denial of service and possibly other unspecified impacts by abusing SVG clipping handling. Affected software: Google Chrome (pre-18.0.1025.142). Root caus...

CVE-2011-3071

CVE-2011-3071 : In Google Chrome, a use-after-free in the HTMLMediaElement implementation (pre-18.0.1025.151) may allow a remote attacker to cause a denial of service or possibly other impact via unknown vectors. Affected product: Google Chrome. Root cause: use-after-free in HTMLMediaElement. Imp...

CVE-2011-3234

CVE-2011-3234 affects Google Chrome prior to 14.0.835.163. The issue arises from how Chrome handles boxes, allowing remote attackers to trigger an out-of-bounds read and potentially cause a denial of service. The description notes remote exploitation via unspecified vectors. No vendor/version-spe...

CVE-2011-3897

Technical details for CVE-2011-3897 are not present in the provided documents. No specific affected product/version or impact is given here. Monitor for updates.

CVE-2011-3971

CVE-2011-3971 describes a use-after-free in Google Chrome prior to version 17.0.963.46. The vulnerability, triggered by mousemove-related vectors, allows user-assisted remote attackers to cause a denial of service and possibly other impacts. Affected software is Google Chrome before 17.0.963.46; ...

CVE-2015-3734

CVE-2015-3734 concerns WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. A crafted web page can cause remote code execution or a denial of service via memory corruption, potentially crashing the affected application. The initial desc...

CVE-2015-3744

CVE-2015-3744 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8, 7.x before 7.1.8, 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption in WebKit components. Conn...

CVE-2015-3746

CVE-2015-3746 affects WebKit used in Apple iOS (before 8.4.1) and Safari (before 6.2.8), as well as WebKit2-based stacks in Linux distributions. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and an application crash via a crafted web site. Public r...

CVE-2015-3751

CVE-2015-3751 affects WebKit in Safari (and iOS) prior to versions 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to bypass a Content Security Policy protection by exploiting a video control in conjunction with an IMG element within an OBJECT element. Exp...

CVE-2017-13806

CVE-2017-13806 affects Apple iOS prior to 11, in the Profiles component. The issue is that configuration profiles do not enforce whether pairings are allowed, which could lead to device pairing records being installed despite a disallowing profile. According to Apple’s security update content, th...

CVE-2017-13873

CVE-2017-13873 is a kernel information-disclosure issue affecting Apple devices (iOS before 11, macOS before 10.13, tvOS before 11, watchOS before 4). An attacker could craft an app to obtain sensitive network-activity information about other apps, via exploitation of a memory/logic issue in the ...

CVE-2017-2499

The CVE-2017-2499 entry concerns a memory corruption vulnerability in the WebKit Web Inspector component affecting Apple devices: iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows an attacker to execute arbitrary unsigned code or cause a denial of service via...

CVE-2017-7004

CVE-2017-7004 describes a race condition in userspace entitlement checks that could allow a local attacker to bypass entitlement restrictions and send privileged XPC messages. Affected products are Apple iOS prior to 10.3.2 and macOS prior to 10.12.5. The root cause is a race in how entitlements ...

CVE-2017-7005

CVE-2017-7005 concerns Apple’s WebKit/JavaScriptCore stack. On iOS (pre-10.3.2), Safari (pre-10.1.1), and tvOS (pre-10.2.1), this memory-corruption issue in JavaScriptCore could allow remote code execution or cause a denial of service via a crafted web site. The NVD entry notes a remote-code-exec...

CVE-2018-4137

The CVE-2018-4137 issue affects Apple Safari and iOS: Safari before 11.1 and iOS before 11.3 allow a remote attacker to read autofilled data via the Safari Login AutoFill component without requiring user confirmation. This appears as a cross-product autofill disclosure risk in the Safari/Login Au...

CVE-2018-4148

CVE-2018-4148 affects iOS

CVE-2018-4303

CVE-2018-4303 is an input-validation weakness affecting macOS Mojave (10.14), iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, and watchOS 5.1.2. Apple lists improved input validation as the fix; no exploitation details are provided in the connected documents. Remediation is via the corresponding A...

CVE-2018-4307

CVE-2018-4307 describes a logic issue in Safari/Apple’s WebKit stack affecting iOS prior to 12 and Safari 12. The root cause is described as a state-management flaw; impact is characterized as a modest security risk (CVSS ~4.3) with network attack potential and user interaction required per the m...

CVE-2018-4336

CVE-2018-4336 is a memory corruption vulnerability in Apple OS components that affected iOS

CVE-2019-8510

CVE-2019-8510 is an out-of-bounds read in the kernel that could disclose kernel memory. Apple states fixes in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2, addressing input-validation gaps that allowed memory disclosure. The NVD entry aligns with a local-attack vector (AV:L) with LO...

CVE-2019-8593

CVE-2019-8593 is a memory corruption vulnerability in AppleFileConduit affecting iOS/tvOS/watchOS prior to the listed patched versions. It could allow an application to execute arbitrary code with system privileges. Apple fixed it in iOS 12.3, tvOS 12.3, and watchOS 5.2.1; exploitation is describ...

CVE-2019-8841

CVE-2019-8841 (Apple iOS/iPadOS) affects the IOSurfaceAccelerator component in Apple devices. The root cause is described as the removal of vulnerable code that previously allowed kernel-privelleged execution, leading to a potential arbitrary code execution with kernel privileges. The vulnerabili...

CVE-2020-10013

CVE-2020-10013 is a kernel-privilege escalation tied to a logic issue addressed by Apple in tvOS 14.0, iOS 14.0 and iPadOS 14.0. The issue is described as a logic/state-management defect that could allow an application to execute arbitrary code with kernel privileges. Apple’s advisories (HT211843...

CVE-2020-3891

Affected product: Messages component on Apple iOS/iPadOS/watchOS. Issue: A logic issue in state management allowed a person with physical access to a locked device to respond to messages even when replies were disabled. Root cause: logic/state-management flaw in Messages. Impact: could enable rep...

CVE-2020-3914

CVE-2020-3914 describes a memory initialization issue that may allow an application to read restricted memory. Apple patches fix this in iOS 13.4, iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and watchOS 6.2, via improved memory handling. The linked Apple advisories corroborate the vulnerabili...

CVE-2020-9768

CVE-2020-9768 is a use-after-free vulnerability in Apple’s Image Processing component that affects iOS 13.4 and iPadOS 13.4 (and related platforms tvOS 13.4, watchOS 6.2). The issue allows an application to execute arbitrary code with system privileges due to memory handling deficiencies; Apple n...

CVE-2020-9775

CVE-2020-9775 affects Safari on iOS/iPadOS; root cause: incorrect handling of tabs displaying picture-in-picture video, leading to potentially exposing a user’s private browsing activity to Screen Time. Apple fixed this in iOS 13.4 and iPadOS 13.4 via improved state handling; remediation is to up...

CVE-2020-9940

CVE-2020-9940 is a buffer overflow issue addressed by Apple in iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, and tvOS 13.4.8. Processing a malicious USD file may trigger an application crash or arbitrary code execution. Affected components relate to USD file handling; the root cause is memory han...

CVE-2021-30921

CVE-2021-30921 affects Apple iOS 14.5 and iPadOS 14.5. A logic/state-management issue allowed a user's password to be visible onscreen (notably tied to UIKit/UI handling). The vulnerability stems from improved state management; Apple patched in iOS 14.5/iPadOS 14.5. No exploitation details are pr...

CVE-2023-32437

CVE-2023-32437 concerns a sandbox-bypass in WebKit on Apple iOS and iPadOS prior to the 16.6 updates. The issue is described as being addressed by improvements to the file handling protocol, with patches included in iOS 16.6 and iPadOS 16.6. Connected documents corroborate that the vulnerability ...

CVE-2023-38605

CVE-2023-38605 affects macOS Ventura 13.5 and relates to an information-disclosure issue where an app may be able to determine a user’s current location. The underlying issue is described as an improvement in redaction of sensitive information, and Apple notes the fix is included in macOS Ventura...

CVE-2023-41068

CVE-2023-41068 concerns an access control flaw in the MobileStorageMounter component of Apple’s operating systems. The issue may allow a user to elevate privileges. It affects tvOS, iOS, iPadOS, and watchOS prior to the fixed releases. Remediation is to update to: tvOS 17, iOS 17, iPadOS 17, watc...

CVE-2023-42949

CVE-2023-42949 affects Apple's platforms (iOS/iPadOS, macOS, watchOS, tvOS) where an app could access edited photos saved to a temporary directory. The description and connected sources consistently state this was addressed by improving data protection, with fixes in iOS 17 / iPadOS 17, macOS Son...

CVE-2024-27806

CVE-2024-27806 affects Apple platforms and was fixed by updated OS versions following improved environment sanitization. Affected: macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS 16.7.8 and iPadOS 16.7.8; iOS 17.5 and iPadOS 17.5; tvOS 17.5; watchOS 10.5; macOS Sonoma 14.5. Impact: an app may ac...

CVE-2024-27807

CVE-2024-27807 affects Apple’s Symptom Framework in iOS/iPadOS, where an untrusted input validation issue could allow an app to circumvent App Privacy Report logging. Public details confirm the root cause as insufficient input validation and the impact as bypassing privacy logging. Affected versi...

CVE-2024-27873

CVE-2024-27873 is an out-of-bounds write vulnerability in Apple software where processing a maliciously crafted video file may cause an app to terminate. The vulnerability is addressed by input validation improvements and is fixed in multiple Apple OS updates: iOS 16.7.9 and iPadOS 16.7.9, macOS ...

CVE-2024-40805

CVE-2024-40805 is a permissions/bypass issue affecting Apple platforms where an app may bypass Privacy preferences via libxpc. Technical details in the provided documents indicate the vulnerability exists in macOS Sonoma and related Apple OSes and is mitigated by the listed updates: watchOS 10.6,...

CVE-2024-44171

CVE-2024-44171 affects Apple platforms (iOS 17.7/iPadOS 17.7, iOS 18/iPadOS 18, watchOS 11). Description and Red Hat/NVD entries indicate the issue stems from improved state management that enables an attacker with physical access to a locked device to Control Nearby Devices via accessibility fea...

CVE-2024-44176

CVE-2024-44176 describes an out-of-bounds access leading to a denial-of-service when processing an image. Affected products include macOS Ventura 13.7; macOS Sequoia 15; macOS Sonoma 14.7; iOS 17.7 and iPadOS 17.7; iOS 18 and iPadOS 18; visionOS 2; watchOS 11; tvOS 18. Remediation is via software...

CVE-2024-54513

CVE-2024-54513 affects multiple Apple platforms with a permissions issue that could let an app access sensitive user data. Fixes are included in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2. The description does not specify the exact component or root cause...

CVE-2024-54518

CVE-2024-54518: Root cause is an insufficient bounds-check in a component that can affect coprocessor memory. The issue is fixed by Apple in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. Affected products scope is Apple OS family; no exploit details are provided in the so...

CVE-2025-31239

CVE-2025-31239 is a use-after-free issue related to parsing a file that caused an unexpected app termination. Apple fixed it across multiple platforms and versions: watchOS 11.5; macOS Sonoma 14.7.6; tvOS 18.5; iPadOS 18.5 and iOS 18.5; macOS Sequoia 15.5; visionOS 2.5; macOS Ventura 13.7.6. The ...

CVE-2025-31241

The CVE-2025-31241 entry describes a memory-management vulnerability (double free) in Apple platforms that could cause an app to terminate. Affected products include iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and w...

CVE-2025-43376

CVE-2025-43376 is a logic/state-management issue in WebKit/Safari affecting Apple platforms (Safari 26, WebKit updates across macOS Sonoma/Sequoia, iOS 26, iPadOS 26, tvOS/watchOS). The vulnerability could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. Root caus...

CVE-2025-43510

Connected documents confirm CVE-2025-43510 is a Copy-on-Write bug in the XNU kernel used in a multi-stage DarkSword exploit chain. The iOS/iPadOS/macOS chain details stage 4: sandbox escape from GPU to mediaplaybackd via this kernel bug, enabling broader privilege escalation. The vulnerability af...

CVE-2026-43713

CVE-2026-43713 concerns a permissions issue in Safari/WebKit that could allow leakage of sensitive data when visiting a website. The public advisories indicate the fix is in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected documents explicitly describe the vulnerability...

CVE-2026-43746

CVE-2026-43746 is a use-after-free vulnerability in processing web content that is mitigated by improved memory management. The issue is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Exploitation could cause an unexpected Safari crash when parsing maliciously crafted ...

CVE-2010-1752

CVE-2010-1752 is a CFNetwork stack overflow in iOS (Apple) URL handling, affecting iOS before 4 on iPhone/iPod touch. The vulnerability allows remote attackers to cause a crash or execute arbitrary code via crafted web content. Connected sources (Apple security advisories HT4225/HT4435) indicate ...

CVE-2011-1107

CVE-2011-1107 is a WebKit/Web browser vulnerability where a malicious site could cause the address bar to display a spoofed URL. It is documented as affecting WebKit components used by Safari on iOS and Mac OS X, with the issue described as a URL spoofing flaw in the handling of URLs (DOM/history...

CVE-2011-3039

CVE-2011-3039 affects Google Chrome prior to 17.0.963.65, with a use-after-free in quote handling that can lead to denial of service and potentially other impact. The vulnerability is triggered via quote handling vectors in the browser’s rendering/JavaScript context. Public references in connecte...