CVE-2023-40438

CVE-2023-40438 concerns improper handling of temporary files that may allow an app to access edited photos saved in a temporary directory. Reported for Apple platforms, the issue is fixed in macOS Sonoma 14, iOS 16.7, and iPadOS 16.7. The Red Hat entry reiterates the same description. Public expl...

CVE-2021-30988

CVE-2021-30988 concerns iOS/iPadOS via the NetworkExtension component, describing a permissions issue that could let a malicious app identify which other apps are installed. Root cause cited as improved validation; the fix is implemented in iOS 15.2 and iPadOS 15.2. Implication: information discl...

CVE-2021-31013

CVE-2021-31013 is an out-of-bounds read in Apple’s FontParser during processing of crafted fonts, leading to potential disclosure of process memory. The Red Hat entry confirms the same description. Affected products include macOS (Big Sur 11.x and Monterey 12.x), iOS, and iPadOS (and variants ref...

CVE-2023-32432

CVE-2023-32432 affects Apple platforms (macOS Ventura 13.4; tvOS 16.5; iOS 16.5; iPadOS 16.5; watchOS 9.5). Description: a privacy issue was addressed by improving handling of temporary files, reducing the risk that an app could access user-sensitive data. Affected component/area is how temporary...

CVE-2023-40398

CVE-2023-40398 affects Apple macOS and iOS, with a sandbox bypass vector in a sandboxed process. The issue is fixed in macOS Monterey 12.6.4, Big Sur 11.7.5, Ventura 13.3, and iOS/iPadOS 16.4; Apple KBs HT213670/HT213677/HT213676/HT213675 document the patches. CVSS: 3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:...

CVE-2023-41174

CVE-2023-41174 affects Apple platforms: tvOS 17, iOS 17, iPadOS 17, and watchOS 10. The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Affected components are tied to memory handling in the operating systems, leading to potential k...

CVE-2023-42830

CVE-2023-42830 describes a privacy issue where an application may read sensitive location information due to insufficient redaction in log entries. The vulnerability was addressed by improved private data redaction and is fixed in: macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4. The public documen...

CVE-2023-42862

The CVE-2023-42862 entry describes an out-of-bounds read in image processing that could disclose process memory. Affected products include Apple platforms where ImageIO handles images; fixes are in macOS Ventura 13.3, tvOS 16.4, iOS 16.4, and iPadOS 16.4, with related Apple Security content entri...

CVE-2024-27869

The CVE-2024-27869 issue affects Apple platforms and is described as a vulnerability where an app may be able to record the screen without an indicator. The connected sources indicate the root cause is addressed by improved checks, with fixes implemented in iOS 18, iPadOS 18, and macOS Sequoia 15...

CVE-2024-40791

The CVE-2024-40791 entry describes a privacy issue where an app could access information about a user’s contacts due to improved private data redaction in log entries. Affected platforms include macOS (Ventura 13.7, Sonoma 14.7, Sequoia 15) and iOS/iPadOS (iOS 17.7, 18; iPadOS 17.7, 18). The root...

CVE-2024-44229

CVE-2024-44229 affects Apple Safari and several Apple OSes. The issue is an information leakage in Private Browsing, mitigated by additional validation and fixed in Safari 18.1, iOS 18.1, iPadOS 18.1, visionOS 2.1, and macOS Sequoia 15.1. Affected components include Private Browsing behavior that...

CVE-2025-31245

The CVE-2025-31245 issue affects Apple platforms including iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, and visionOS 2.5. It is described as caused by insufficient checks, with the public description stating that an app may be ...

CVE-2026-43734

CVE-2026-43734 is a use-after-free vulnerability in processing maliciously crafted web content, addressed by memory-management fixes. The accompanying disclosures indicate fixes across Apple platforms: Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Affected components in the co...

CVE-2026-43753

The CVE-2026-43753 issue is an out-of-bounds read fixed by Apple in iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The root cause is improved bounds checking; exploitation would require physical access to a locked device and could reveal sensitive user data...

CVE-2011-2790

CVE-2011-2790 is a use-after-free vulnerability in handling of floating styles, affecting Google Chrome and Apple Safari. The flaw allows remote attackers to trigger a denial of service or possibly other impact by convincing a user to view a crafted page. Affected software, per the provided docs,...

CVE-2011-3021

CVE-2011-3021 affects Google Chrome up to version 17.0.963.56, where a use-after-free in the subframe loading path allows remote attackers to cause a denial of service and potentially other impacts. The issue is triggered via subframe loading vectors and is described as a use-after-free vulnerabi...

CVE-2011-3027

CVE-2011-3027 affects Google Chrome prior to version 17.0.963.56. The issue is tied to a cast of an unspecified variable during handling of document columns, enabling a remote attacker to trigger denial of service and potentially other impacts via a crafted document. The description does not spec...

CVE-2011-3059

Google Chrome prior to 18.0.1025.142 is affected by CVE-2011-3059, an out-of-bounds read in SVG text handling that can be exploited remotely to cause a denial of service. The vulnerability stems from improper handling of SVG text elements in the browser’s rendering pipeline. Practical impact repo...

CVE-2011-3885

The CVE-2011-3885 entry concerns a use-after-free in Google Chrome prior to 15.0.874.102, exploitable to cause a denial of service and potentially other unspecified impact via vectors related to stale CSS token-sequence data. Affected product: Google Chrome (pre-15.0.874.102). Root cause: use-aft...

CVE-2015-3735

CVE-2015-3735 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an app crash. C...

CVE-2015-3737

CVE-2015-3737 affects WebKit (as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8) and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (memory corruption and app crash). Public references indicate ...

CVE-2015-3739

CVE-2015-3739 affects WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, with memory corruption and application crash as describe...

CVE-2016-1847

CVE-2016-1847 affects WebKit/OpenGL on Apple TV (4th generation) with tvOS 9.2.1 and earlier. The root cause is an insufficient taint-tracking issue in parsing SVG images, enabling data disclosure when processing malicious web content. tvOS 9.2.1 includes the security update addressing this CVE.

CVE-2018-4082

CVE-2018-4082 affects Apple devices across iOS, macOS, tvOS, and watchOS where the Kernel component is vulnerable. The issue allows an attacker with a crafted app to cause memory corruption, potentially enabling arbitrary code execution in a privileged context or a denial of service. Publicly doc...

CVE-2018-4244

CVE-2018-4244 affects Apple iOS prior to 11.4, specifically the Siri Contacts component. A permission/privacy issue could allow a physically proximate attacker to view private contact information via Siri on affected devices. The root cause is described as Siri permission handling that allowed ac...

CVE-2018-4365

CVE-2018-4365 is an Apple iOS vulnerability where an out-of-bounds read existed in the Contacts component prior to iOS 12.1. The issue was addressed with improved bounds checking, per the description. The vulnerability’s scope is limited to iOS versions before 12.1, with remediation through iOS 1...

CVE-2018-4474

CVE-2018-4474 is a memory consumption issue addressed by improved memory handling. Connected sources confirm the flaw affects multiple Apple platforms and components and is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, and tvOS 12. The Red Hat advisory mi...

CVE-2019-8626

CVE-2019-8626 is an input validation issue addressed in iOS 12.3 and watchOS 5.2.1. Apple’s advisories tie it to the Mail component, where processing a maliciously crafted message may lead to a denial of service. The linked documents confirm the vulnerability class as an input validation problem ...

CVE-2019-8760

CVE-2019-8760 concerns Face ID authentication on Apple iOS. Description and multiple sources confirm that a 3D model constructed to resemble the enrolled user could bypass Face ID. The issue is addressed by improving Face ID machine learning models and was fixed in iOS 13. Related entries in Red ...

CVE-2021-1831

CVE-2021-1831 relates to an Apple Shortcuts permission issue where shortcuts could access restricted files due to insufficient permission checks. The vulnerability was addressed with improved permissions logic and fixed in iOS 14.5 / iPadOS 14.5 . Public documents in the connected set confirm the...

CVE-2021-1874

CVE-2021-1874 affects Apple devices (Kernel component) and is described as a logic issue related to state management that could allow an application to execute arbitrary code with kernel privileges. Technical details across connected sources consistently indicate the root cause is a state-managem...

CVE-2021-30699

CVE-2021-30699 concerns a window management issue in Apple iOS/iPadOS that could allow a user to view restricted content from the lock screen. The vulnerability is stated as fixed in iOS 14.6 and iPadOS 14.6, addressing improper state/window management. Public sources in the connected documents c...

CVE-2022-32916

CVE-2022-32916 describes an out-of-bounds read that could disclose kernel memory on Apple iOS. Connected sources specify the issue affects iOS prior to 16 and that the fix was implemented with input validation improvements in iOS 16. The kernel memory disclosure was categorized under a memory rea...

CVE-2024-44179

CVE-2024-44179 affects Apple devices running iOS 17.7/iPadOS 17.7, iOS 18, and iPadOS 18, plus macOS Sequoia 15. The issue arises from restrictions on options offered on a locked device, potentially allowing an attacker with physical access to read contact numbers from the lock screen. Apple fixe...

CVE-2024-44198

CVE-2024-44198 : An integer overflow was mitigated via improved input validation. Affected products include visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18; iPadOS 18; tvOS 18. Processing maliciously crafted web content may crash the process. Remediation is to upgrade to the fixed versions liste...

CVE-2024-44212

CVE-2024-44212 is a WebKit cookie management vulnerability affecting Safari/WebKit on Apple platforms. The issue allows cookies belonging to one origin to be sent to another origin due to flawed state management. It is fixed in Safari 18.1 and OS updates: visionOS 2.1, tvOS 18.1, iOS 18.1, iPadOS...

CVE-2024-44297

The CVE-2024-44297 issue is resolved by Apple in multiple platforms. Affected products include tvOS 18.1; iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The vulnerability arises from insufficient bounds checks ...

CVE-2024-54503

The CVE-2024-54503 entry describes an inconsistent user interface issue related to muting a call during ringing, caused by flawed state management. Apple fixed this in iOS 18.2 and iPadOS 18.2 by improving state management. In the linked documents, there are no explicit exploitation details or at...

CVE-2025-24095

CVE-2025-24095 involves Apple platforms where an app may bypass Privacy preferences due to entitlement-related issues. Connected sources confirm the root cause as insufficient entitlement checks, which Apple addressed by enforcing stricter entitlement validation in visionOS 2.4, iOS 18.4, and iPa...

CVE-2025-30434

CVE-2025-30434 is an Apple issue affecting iOS and iPadOS tracked across multiple feeds. The vulnerability stems from processing a maliciously crafted file that could trigger a cross-site scripting (XSS) attack. Apple fixed this by improving input sanitization, with the patch shipped in iOS 18.4 ...

CVE-2025-31217

CVE-2025-31217 involves memory-safe crashes in Safari-related processing of web content caused by insufficient input handling. The issue is addressed in Safari 18.5 and is fixed across Apple platforms: iOS 18.5, iPadOS 18.5, watchOS 11.5, tvOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The vulne...

CVE-2025-43226

CVE-2025-43226: An out-of-bounds read fixed by improved input validation. Affected: watchOS 11.6; iOS 18.6 and iPadOS 18.6; iPadOS 17.7.9; tvOS 18.6; macOS Sequoia 15.6; macOS Sonoma 14.7.7; visionOS 2.6. Issue arises while processing a malicious image and may disclose process memory. Remediation...

CVE-2025-43421

CVE-2025-43421 affects WebKitGTK/WebKit2GTK (webkitgtk2/webkitgtk4) and is caused by issues around processing maliciously crafted web content that can lead to an unexpected process crash due to memory handling/array allocation sinking. Multiple advisories confirm the flaw and reference fixes in W...

CVE-2026-20660

CVE-2026-20660 is a path handling vulnerability in Apple software that enables a remote user to write arbitrary files through a path handling issue exposed in CFNetwork’s NSGZipDecoder flow. The issue is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS Sequoia 15.7....

CVE-2026-39869

CVE-2026-39869 is a memory-handling vulnerability in processing an audio stream from a maliciously crafted media file. The issue may cause application or process termination due to memory handling problems. Apple indicates fixes in macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Sequoia 15.7.7, tvOS...

CVE-2026-43720

CVE-2026-43720 is a use-after-free vulnerability in Safari related to processing malicious web content, caused by a memory-management issue. The flaw could trigger an unexpected Safari crash. It is fixed in Safari 26.5.2 and affects iOS/iPadOS/macOS Tahoe updates (iOS 26.5.2, iPadOS 26.5.2, macOS...

CVE-2026-64772

CVE-2026-64772 affects Apple operating systems including iOS/iPadOS, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue is an out-of-bounds write in a component handling input, fixed by improved input validation. Impact described as potential remote termination of app...

CVE-2026-65347

CVE-2026-65347 affects the ImageIO framework on iOS and macOS. A crafted image could cause a denial-of-service via improved checks in iOS 26.6.1/iPadOS 26.6.1/macOS Tahoe 26.6.2. CVSS 6.5 (MEDIUM). No exploitation observed. Patch applies to devices running those OS versions.

CVE-2009-1700

The CVE-2009-1700 entry describes a vulnerability in WebKit’s XSLT handling that affects Apple Safari before 4.0, iPhone OS 1.0–2.2.1, and iPhone OS for iPod touch 1.1–2.2.1. The issue is improper processing of redirects, enabling remote attackers to read XML content from arbitrary pages via a cr...

CVE-2016-1748

CVE-2016-1748 affects IOHIDFamily and allows an unprivileged app to obtain kernel memory layout information by exploiting a memory‑corruption issue. Apple’s security content confirms this vulnerability across multiple platforms and versions, with mitigations delivered in iOS 9.3, OS X 10.11.4, tv...