CVE-2011-3058

Google Chrome pre-18.0.1025.142 has a vulnerability where improper handling of EUC-JP encoding can permit remote cross-site scripting (XSS) via unspecified vectors. The description specifies the affected version range and the exploit could be triggered remotely through EUC-JP-encoded inputs, lead...

CVE-2012-0622

Technical details about CVE-2012-0622 are not publicly available in the provided connected documents. Monitor for updates; current sources reference WebKit/iOS Safari vulnerabilities in general, but no explicit, verifiable details for this CVE are present.

CVE-2016-1752

CVE-2016-1752 affects the Kernel in Apple devices. Details from Apple security content show a use-after-free issue in the Kernel that could allow a crafted app to cause a denial of service. Affected products and versions are iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before...

CVE-2016-1819

CVE-2016-1819 is a use-after-free in IOAccelContext2::clientMemoryForType that affects Apple platforms (iOS prior to 9.3.2, OS X prior to 10.11.5, tvOS prior to 9.2.1, watchOS prior to 2.2.1). The issue can allow an attacker to execute arbitrary code in a privileged context or cause a memory corr...

CVE-2016-1859

CVE-2016-1859 affects WebKit Canvas in Apple iOS < 9.3.2, Safari < 9.1.1, and tvOS

CVE-2016-4642

CVE-2016-4642 affects CFNetwork Proxies in iOS 9.3.3 and later, tvOS 9.2.2, and OS X El Capitan 10.11.6/Security Update 2016-004. The flaw: proxy authentication incorrectly reported HTTP proxies received credentials securely, with an impact described as possible leakage of sensitive user informat...

CVE-2016-4777

CVE-2016-4777 affects the Kernel in watchOS 3 (Apple Watch). The root cause is an untrusted pointer dereference that could allow a local attacker to execute arbitrary code with kernel privileges; Apple addressed this by removing the affected code, mitigating the issue in the watchOS 3 kernel.

CVE-2017-13877

The CVE-2017-13877 entry affects Apple iOS Sandbox Profiles. In iOS versions prior to 11, the Sandbox Profiles component allowed a crafted app to determine whether arbitrary files exist outside the sandbox, enabling information disclosure about installed apps/files. Connected documents corroborat...

CVE-2018-4123

CVE-2018-4123 affects Apple iOS before 11.3, specifically the Clock component’s alarm/timer handling. The issue is an information-disclosure vulnerability that could allow a physically proximate attacker to obtain the iTunes email address. The root cause is described as an information-disclosure ...

CVE-2018-4151

CVE-2018-4151 affects Apple iCloud Drive in iOS before 11.3 and macOS before 10.13.4. The issue is a race condition that could let a crafted app execute arbitrary code with elevated privileges within a privileged context. Public details from Apple’s security content for iOS 11.3 reference iCloud ...

CVE-2019-8512

CVE-2019-8512 concerns iOS (Exchange ActiveSync) where a user may inadvertently permit an enterprise administrator to remotely wipe their device without proper disclosure. The issue is described as fixed in iOS 12.2; remediation is to update to iOS 12.2 or later. The publicly documented impact is...

CVE-2021-1838

CVE-2021-1838 affects Apple iOS 14.4 / iPadOS 14.4 and is tied to the ImageIO component. A vulnerability in processing a maliciously crafted image may allow arbitrary code execution. Apple states the issue was fixed in 14.4 via improved checks. Connected sources corroborate this CVE entry and its...

CVE-2021-30741

CVE-2021-30741 describes a use-after-free vulnerability in Apple’s Mail handling on iOS/iPadOS. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination. Apple fixed this issue in iOS 14.6 and iPadOS 14.6. The CVE entry is supported by NV...

CVE-2021-31009

CVE-2021-31009 : The issue is resolved by removing HDF5 in Apple software. Public details indicate multiple issues in HDF5 and fixes are applied in iOS 15.2 and iPadOS 15.2, and macOS Monterey 12.1. The Red Hat and Nessus entries corroborate the same CVE as part of their vulnerability sets, listi...

CVE-2023-32403

CVE-2023-32403 affects Apple platforms and is fixed in multiple OS updates (watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6 and iPadOS 15.7.6, iOS 16.5 and iPadOS 16.5). The issue involved improved redaction of sensitive information, and an app ...

CVE-2023-32424

CVE-2023-32424 affects Apple platforms (iOS 16.4 / iPadOS 16.4 / watchOS 9.4). The issue stems from improved memory handling in the kernel, and an attacker who already achieved kernel code execution may bypass kernel memory mitigations. A patch is included in iOS 16.4 / iPadOS 16.4 / watchOS 9.4....

CVE-2023-40394

CVE-2023-40394 affects Apple iOS and iPadOS; the issue arises from improper validation of environment variables and is fixed in iOS 16.6 and iPadOS 16.6. Reports in multiple feeds (NVD, Red Hat, CVE lists) concur that an app may access sensitive user data due to this validation flaw. The connecte...

CVE-2023-42977

CVE-2023-42977 concerns a path-handling issue in Apple platforms that could allow an app to break out of its sandbox. The connected documents specify that the vulnerability affects Apple iOS prior to 17 and iPadOS prior to 17, and macOS Sonoma prior to 14, with the root cause described as a path ...

CVE-2024-44144

The CVE-2024-44144 issue is a buffer overflow vulnerability in Apple platforms where insufficient size validation could be triggered by processing a malicious file. Root cause: improved size validation fixes the overflow. Affected products/versions are explicit in the sources: iOS 17.7.1 and iPad...

CVE-2024-44201

CVE-2024-44201 affects Apple platforms (iOS/iPadOS/macOS) with a memory handling issue that may lead to denial of service when processing a malicious crafted file. Affected: iPadOS 18.1 and 17.7.3 fix; iOS 18.1; macOS Sonoma 14.7.2 and Ventura 13.7.2. Exploitation details are not provided in the ...

CVE-2024-44218

CVE-2024-44218 affects Apple platforms. The issue, resolved by improved checks, can lead to heap corruption when processing a maliciously crafted file. It is fixed in iOS 17.7.1, iPadOS 17.7.1, iOS 18.1, iPadOS 18.1, and macOS Sonoma 14.7.1. Remediation is upgrading to these versions.

CVE-2024-54560

CVE-2024-54560 is a logic issue addressed by Apple across multiple platforms. According to connected sources, the vulnerability could allow a malicious application to modify other apps without the App Management permission. The fix is included in macOS Sequoia 15, iOS 18, iPadOS 18, watchOS 11, a...

CVE-2025-30436

CVE-2025-30436 (Apple iOS/iPadOS) : On a locked device, an attacker may exploit Siri to enable Auto-Answer Calls due to insufficient restriction of options. The issue is fixed in iOS 18.4 and iPadOS 18.4. Affected user devices should update to 18.4 or later to remediate. The published description...

CVE-2026-20676

CVE-2026-20676 is a WebKit/WebKitGTK tracking vulnerability where a website may track users via Safari web extensions. The connected documents indicate fixes in Safari 26.3 and corresponding OS versions (iOS/iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3) and related package updates (e.g., webkitgt...

CVE-2026-28901

CVE-2026-28901 affects Apple’s WebKit-based Safari stack; issue rooted in memory handling leading to an

CVE-2026-64740

CVE-2026-64740 affects Apple operating systems and pertains to a parsing issue in handling directory paths that could allow a malicious app to break out of its sandbox. The vulnerability is addressed by path validation improvements and is fixed in the following releases: iOS 26.6 and iPadOS 26.6;...

CVE-2009-1701

CVE-2009-1701 is a use-after-free in WebKit's JavaScript DOM handling, affecting Apple Safari before 4.0 (and related iPhone OS versions). Exploitation involves destroying a document.body with an XML container and dir attributes, enabling remote code execution or a denial of service through memor...

CVE-2011-1204

CVE-2011-1204 affects Google Chrome before 10.0.648.127, where improper handling of attributes in documents can cause DOM tree corruption. This can enable remote attackers to trigger a denial of service and potentially other unspecified impacts. Public sources confirm the remediation: applying Ch...

CVE-2011-2854

Technical details about CVE-2011-2854 are not publicly available in the provided connected documents. The references mention the CVE but do not describe affected product/version, root cause, or impact. Monitor for updates.

CVE-2015-3736

CVE-2015-3736 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption. Public details in the provided...

CVE-2016-1724

CVE-2016-1724 is a WebKit memory-corruption vulnerability in Apple environments (iOS, Safari, tvOS) that could allow remote code execution or memory corruption via a crafted site. Connected sources corroborate related WebKit issues (e.g., CVE-2016-1723/1725–1728) and Gentoo GLSA-201706-15 recomme...

CVE-2016-1783

CVE-2016-1783 affects WebKit in Apple iOS (pre-9.3), Safari (pre-9.1), and tvOS (pre-9.2). Description: remote attacker can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. Root cause: memory corruption in WebKit components expo...

CVE-2016-1813

CVE-2016-1813 describes a vulnerability in Apple's IOAcceleratorSharedUserClient2:page_off_resource. The issue occurs when an external method uses a NULL pointer dereference in IOAccelSharedUserClient2, allowing a local attacker to execute code in a privileged kernel context or cause a denial of ...

CVE-2016-1829

CVE-2016-1829 is a kernel memory-corruption vulnerability that could allow arbitrary code execution in a privileged context or cause a denial of service when triggered by a crafted app. Affected products include Apple iOS versions before 9.3.2, OS X versions before 10.11.5, tvOS before 9.2.1, and...

CVE-2016-1830

CVE-2016-1830 is listed in Apple security content as a Kernel memory corruption issue affecting OS X El Capitan and tvOS (and related iOS watchOS entries) with the TV 4th generation reference, indicating a kernel-level vulnerability that could allow arbitrary code execution in a privileged contex...

CVE-2016-1865

CVE-2016-1865 affects Apple kernel: iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, watchOS

CVE-2016-4675

CVE-2016-4675 affects Apple platforms via the libxpc component. The issue is a logic flaw that could allow an attacker to execute arbitrary code in a privileged context when a crafted app is involved, on macOS Sierra 10.12.x, iOS 10.x, tvOS 10.x, and watchOS 3.x. Apple addressed this with securit...

CVE-2016-4753

CVE-2016-4753 affects Apple platforms (iOS 10, macOS 10.12, tvOS 10, watchOS 3) via a validation issue in signed disk images that allowed arbitrary code execution in a privileged context when processing a crafted app. Patches/releases addressing this were provided in Apple's security content (HT2...

CVE-2017-2411

The CVE-2017-2411 entry describes an issue in iOS prior to 11.2 where exchange rates were fetched over HTTP instead of HTTPS. Apple’s security content (iOS 11.2) documents this under the Calculator entry, noting that an attacker on a privileged network could alter currency conversion rates. The r...

CVE-2017-7066

CVE-2017-7066 concerns Apple Wi‑Fi on iOS prior to 10.3.3 and tvOS prior to 10.2.2. The issue is a memory corruption vulnerability in the Wi‑Fi component that an attacker in proximity could exploit to execute arbitrary code on the Wi‑Fi chip (or cause DoS) by exploiting 802.11 interactions. Apple...

CVE-2018-4173

CVE-2018-4173 affects Apple devices (iOS < 11.3, macOS

CVE-2018-4250

CVE-2018-4250 affects Apple iOS prior to 11.4 in the Messages component. Description in connected sources indicates that processing a maliciously crafted message may lead to a denial of service. Apple released iOS 11.4 (and related security content) addressing the issue; users on affected version...

CVE-2018-4269

CVE-2018-4269 is a memory corruption issue in Apple’s CoreCrypto component addressed by improved input validation. Affected products include iOS versions prior to 11.4.1 and macOS High Sierra 10.13.6, as well as tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, and iCloud for Windows. The vuln...

CVE-2018-4366

CVE-2018-4366 is an out-of-bounds read in FaceTime video processing that occurs on Macs, caused by memory corruption with improper input validation. It affects versions prior to iOS 12.1 (per the vulnerability description and Apple’s entry). The issue’s impact is memory corruption potentially lea...

CVE-2018-4436

CVE-2018-4436 involves a certificate validation issue in configuration profiles on Apple devices. Affected products/versions include iOS, tvOS, and watchOS prior to versions 12.1.1, 12.1.1, and 5.1.2 respectively. Root cause (per the sources) is improper certificate validation within configuratio...

CVE-2019-8699

CVE-2019-8699 is a logic issue in iOS Telephony where the initiator of a phone call could cause the recipient to answer a simultaneous Walkie-Talkie connection. The vulnerability was addressed with improved state management and is fixed in iOS 12.4, per Apple’s security content and Red Hat/NVD re...

CVE-2020-9781

CVE-2020-9781 affects Safari on iOS/iPadOS. Issue: a user may grant website permissions to a site they didn’t intend due to prompt handling; root cause relates to permission prompts not being cleared properly after navigation. Impact stated as potential unintended permission grants; exploits not ...

CVE-2020-9959

CVE-2020-9959 describes a lock-screen vulnerability on iOS/iPadOS that could allow a person with physical access to view notification contents from a locked device. Connected documents confirm the issue was addressed with improved state management and that a fix exists in iOS 14.0/iPadOS 14.0. Af...

CVE-2021-30944

CVE-2021-30944 is an Apple logic-issue vulnerability fixed in iOS 15.2, iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, and tvOS 15.2. The issue allowed a malicious app to access data from other apps by enabling additional logging, attributed to improved state management. The provided documents co...

CVE-2021-30988

CVE-2021-30988 concerns iOS/iPadOS via the NetworkExtension component, describing a permissions issue that could let a malicious app identify which other apps are installed. Root cause cited as improved validation; the fix is implemented in iOS 15.2 and iPadOS 15.2. Implication: information discl...