CVE-2026-43780

CVE-2026-43780 affects Apple’s ImageIO component. An integer overflow was addressed via improved input validation, with patches in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Processing a maliciously crafted texture may...

CVE-2026-43822

CVE-2026-43822 describes a use-after-free issue that Apple fixed across multiple OS versions. Affected components involve memory management in the Apple stack, with the impact described as potential unexpected termination of apps or system components. The fixed versions reported are iOS 26.6 and ...

CVE-2010-1781

CVE-2010-1781 is a double‑free vulnerability in WebKit used by Apple iOS prior to 4.1 (on iPhone/iPod touch). Exploitation could allow remote code execution or cause a denial of service via rendering of an inline element. The initial description is supported by multiple connected advisories, e.g....

CVE-2012-0628

Technical details for CVE-2012-0628 are not publicly available in the provided connected documents. Monitor for updates from vuln feeds for affected products, versions, impact and remediation.

CVE-2012-0645

Apple iOS: CVE-2012-0645 describes a design issue where Siri on the lock screen could forward an active Mail.app message, bypassing the lock. Affected: iOS prior to 5.1. Cause: Siri’s lock-screen forwarding restrictions allowed access to an active message when Mail was open behind the lock. Impac...

CVE-2015-1093

CVE-2015-1093 refers to a memory corruption vulnerability in Apple’s FontParser that affects iOS before 8.3 and macOS (OS X) before 10.10.3. A crafted font file could allow remote code execution or cause a denial of service. The related sources in the document set confirm the vulnerability and id...

CVE-2015-3730

CVE-2015-3730 is a WebKit vulnerability that allowed remote code execution or memory-corruption-induced denial of service via a crafted web site. It affected WebKit-based components in Apple products (iOS and Safari) across multiple versions (as cited in the initial doc). Connected advisories con...

CVE-2016-1717

CVE-2016-1717 affects Apple Disk Images parsing across iOS (<9.2.1), OS X (<10.11.3), and tvOS (

CVE-2016-1751

CVE-2016-1751 affects Apple kernels on iOS pre-9.3, tvOS pre-9.2 and watchOS pre-2.2. The issue is failure to properly restrict execute permissions, enabling a crafted app to bypass code-signing protection. In practice, this can allow an attacker to gain kernel-level execution by loading a malici...

CVE-2016-1817

CVE-2016-1817 affects the IOAcceleratorFamily in Apple operating systems. The vulnerability enables memory corruption and potentially arbitrary code execution in a privileged context, or a denial of service, via a crafted app. Affected platforms and versions include: iOS prior to 9.3.2, OS X prio...

CVE-2016-4677

CVE-2016-4677 affects Apple WebKit components in iOS (pre-10.1), Safari (pre-10.0.1), and tvOS (pre-10.0.1). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit’s handling of web content. The public do...

CVE-2017-13844

CVE-2017-13844 affects Apple iOS prior to 11.1, specifically the Messages component. A physically proximate attacker on a locked device could view arbitrary photos via a Reply With Message action on the lock screen. The issue is tied to lock-screen state management for Messages. Apple confirms th...

CVE-2017-2502

CVE-2017-2502 is an Apple CoreAudio information-disclosure issue that lets a crafted app bypass memory-read restrictions and read restricted memory. It affects iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2. The root cause is a CoreAudio validation flaw that...

CVE-2017-7003

CVE-2017-7003 – CoreText DoS in Apple platforms Affected products/versions (per public sources): iOS before 10.3.2; macOS before 10.12.5; tvOS before 10.2.1; watchOS before 3.2.2. The issue is in the CoreText component and allows a remote attacker to cause an application crash (denial of service)...

CVE-2018-4238

CVE-2018-4238 affects iOS

CVE-2018-4305

CVE-2018-4305 is an Apple security issue described as an input validation problem, addressed by improved input validation. The initial document notes the vulnerability affects versions prior to iOS 12, tvOS 12, and watchOS 5. Connected Apple advisories (HT209106/HT209107/HT209108) corroborate mul...

CVE-2018-4363

CVE-2018-4363 is an input validation issue in the kernel that affected iOS before 12, tvOS before 12, and watchOS before 5. The NVD entry summarizes the flaw as an input validation problem that was addressed by improving input validation in the kernel. The vulnerability is referenced across multi...

CVE-2018-4448

CVE-2018-4448 is a kernel memory initialization issue resolved by Apple across multiple OS lines. The root cause was a memory handling flaw that could allow a local attacker to read kernel memory. Affected products include macOS (Sierra/High Sierra/Mojave families), iOS, watchOS, and tvOS. The fi...

CVE-2019-8779

This CVE (CVE-2019-8779) affects Apple iOS/iPadOS sandbox components, specifically third-party app extensions where incorrect sandbox restrictions were applied due to a logic issue. The issue is addressed in iOS 13.1.1 and iPadOS 13.1.1, which update the logic to enforce the correct restrictions....

CVE-2020-27925

CVE-2020-27925 affects CallKit in iOS 14.2 / iPadOS 14.2. An issue in handling incoming calls allowed a user to answer two calls simultaneously without indication. Root cause: inadequate state handling; fix implemented via additional state checks. Remediation: update to iOS 14.2 / iPadOS 14.2. CV...

CVE-2021-30997

CVE-2021-30997 concerns an S/MIME handling issue in iOS/iPadOS Mail where encrypted emails could disclose plaintext content. The Apple advisory and Red Hat/NVD entries indicate the vulnerability was mitigated by not automatically loading certain MIME parts, and Apple fixed it in iOS 15.2/iPadOS 1...

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-40529

CVE-2023-40529: Apple iOS/iPadOS 17 fixed; the issue allowed a person with physical access to use VoiceOver to view private calendar information. The root cause is described as insufficient redaction of sensitive calendar data, addressed by improved redaction in the update. Affected: iOS 17 and i...

CVE-2024-27879

CVE-2024-27879 concerns an input/bounds-check vulnerability in iOS/iPadOS UIKit components that could let an attacker trigger an unexpected application termination. Public sources confirm the issue is fixed in iOS 17.7 and iPadOS 17.7, and in iOS 18 / iPadOS 18. The NVD/NCSC/NVD-affiliates consis...

CVE-2024-44158

Apple CVE-2024-44158 concerns a flaw where a shortcut could output sensitive user data without consent. The public description cites fixes in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue appears to be addressed by improved redaction of sensitive...

CVE-2024-54558

CVE-2024-54558 describes a clickjacking issue related to out-of-process view handling. The flaw could allow an app to trick a user into granting access to the Photos Library. It affects Apple platforms and is fixed in macOS Sequoia 15, iOS 18, and iPadOS 18. The CVE’s base metrics show a low seve...

CVE-2025-31212

CVE-2025-31212 is fixed in Apple platforms: watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The underlying issue is described as improved state management, with an app potentially accessing sensitive user data. The CVSS v3.1 vector indicates a Local attack wi...

CVE-2025-31234

CVE-2025-31234: The issue is fixed by OS updates (visionOS 2.5, iOS 18.5 / iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5) after improved input sanitization. The effect could be unexpected system termination or kernel memory corruption. Connected sources confirm updated platforms and published adviso...

CVE-2025-43346

CVE-2025-43346 is an out-of-bounds access vulnerability addressed by improved bounds checking. It affects Apple platforms as specified in the sources: tvOS 26, watchOS 26, iOS 26, iPadOS 26, visionOS 26, and iOS 18.7 / iPadOS 18.7. The underlying cause is insufficient boundary checking when proce...

CVE-2025-43376

CVE-2025-43376 is a logic/state-management issue in WebKit/Safari affecting Apple platforms (Safari 26, WebKit updates across macOS Sonoma/Sequoia, iOS 26, iPadOS 26, tvOS/watchOS). The vulnerability could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. Root caus...

CVE-2026-20665

CVE-2026-20665 involves Web content processing that could allow bypassing Content Security Policy enforcement. The issue affects multiple Apple platforms and WebKitGTK-based packages. Affected: Apple platforms (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) fixed in Safari 26.4, iOS 1...

CVE-2026-43805

CVE-2026-43805 is a race-condition vulnerability in Apple OS components addressed by updates. Affected products include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6. Root cause: improved state handling to fix a race condition that could enable an ...

CVE-2026-64725

CVE-2026-64725 is an out-of-bounds write vulnerability addressed by Apple in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises from insufficient bounds checking and may allow an app to trigger a deni...

CVE-2011-2877

Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.

CVE-2011-3040

Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...

CVE-2012-0589

Technical details for CVE-2012-0589 are not provided in the connected documents; sources mention WebKit/XSS in Apple iOS 5.1 generally, but no specific affected versions, components, or fixes are given. Monitor for updates.

CVE-2016-1720

Summary (CVE-2016-1720) : A memory corruption vulnerability in Apple’s IOKit affects iOS < 9.2.1, OS X < 10.11.3, and tvOS

CVE-2016-1784

CVE-2016-1784 affects WebKit History handling in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2, enabling remote websites to cause resource exhaustion and a crash (DoS). Root cause: flaws in History/web content handling within WebKit. Affected products: iOS Safari/WebKit and tvOS. M...

CVE-2016-1808

CVE-2016-1808 concerns a memory corruption issue in the Disk Images parsing path that could allow an attacker to execute arbitrary code in the kernel context on affected Apple platforms. Affected products/versions include iOS prior to 9.3.2, OS X prior to 10.11.5, tvOS prior to 9.2.1, and watchOS...

CVE-2017-13852

CVE-2017-13852 affects Apple OSes (iOS < 11.1, macOS < 10.13.1, tvOS < 11.1, watchOS

CVE-2017-2524

CVE-2017-2524 affects Apple platforms due to a TextInput heap/memory corruption path exposed during NSKeyedArchiver deserialization in TIKeyboardLayout (TextInput). Apple docs and security updates (tvOS 10.2.1, iOS 10.3.2, macOS 10.12.5, watchOS 3.2.2) describe memory corruption that can lead to ...

CVE-2018-4090

CVE-2018-4090 affects Apple OSes including iOS < 11.2.5, macOS < 10.13.3, tvOS < 11.2.5, and watchOS

CVE-2018-4149

CVE-2018-4149 affects the SafariViewController component in iOS prior to 11.3. The issue is a state-management flaw that could allow a malicious website to spoof UI by exploiting input during page load, enabling UI spoofing when a partially loaded page is presented in SafariViewController. Apple’...

CVE-2018-4172

CVE-2018-4172 affects Apple iOS

CVE-2018-4290

CVE-2018-4290 is an Apple iOS/watchOS vulnerability in the Emoji component causing a denial-of-service via memory handling issues on versions prior to iOS 11.4.1 and watchOS 4.3.2. The connected Apple security content confirms a memory handling improvement as the fix, with iOS 11.4.1 (and corresp...

CVE-2018-4430

CVE-2018-4430 describes a lock-screen vulnerability in iOS where an attacker could access contacts on a locked device. The Red Hat and NVD entries mirror the Apple advisory, stating the issue affected versions prior to iOS 12.1.1 and was addressed by improved state management. The Apple security ...

CVE-2018-4431

CVE-2018-4431 refers to a kernel memory initialization issue addressed by Apple via memory handling improvements. Affected products/versions include iOS

CVE-2018-4445

CVE-2018-4445 concerns the Apple Safari/WebKit issue where selecting "Clear History and Website Data" did not clear history. Affects iOS prior to 12.1.1 and Safari before 12.0.2; fixed by Apple in iOS 12.1.1/Safari 12.0.2 with enhanced data deletion. Mitigation is upgrading to the patched version...

CVE-2018-4460

CVE-2018-4460 affects Apple platforms (iOS, macOS Mojave, tvOS, watchOS) prior to 12.1.1. The issue is a denial-of-service in the Kernel resolved by removing the vulnerable code; Apple’s security content notes the patch/update comes with iOS 12.1.1 and corresponding macOS/tvOS/watchOS updates. Th...

CVE-2019-8618

CVE-2019-8618 describes a logic issue where a sandboxed process may bypass sandbox restrictions. Affected products include watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 for High Sierra and Sierra, and iOS 12.2. The fix is stated as an improvement in sandbox restrictions. These Apple...