CVE-2020-9931

CVE-2020-9931 is an Apple Bluetooth vulnerability affecting iOS/iPadOS that allows a remote attacker to cause a denial of service. The issue stems from an input-validation deficit in Bluetooth handling, and Apple fixed it in iOS 13.6 and iPadOS 13.6. Connected documents also reference Apple’s HT2...

CVE-2022-46710

CVE-2022-46710 covers a logic issue in iCloud Photo Library where Location data may be shared via iCloud links even if Location metadata is disabled in the Share Sheet. Affected: iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1 (and related Apple security content). Root cause: improper checks around...

CVE-2023-28208

CVE-2023-28208 describes a logic issue in Apple platforms where a user could send a text from a secondary eSIM even when a contact was configured to use the primary eSIM. Affected: macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. Impact: potential unauthorized text sending within Messages; CVSS v3....

CVE-2023-40456

CVE-2023-40456 affects Apple platforms (tvOS, iOS, iPadOS, watchOS) where an app may access edited photos saved to a temporary directory due to inadequate access checks. Root cause: insufficient checks in Photos Storage. Impact: potential exposure of edited photos in a temp directory. Mitigation:...

CVE-2024-40833

CVE-2024-40833 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8, and iOS/iPadOS 16.7.9. The issue allows a Shortcut to access sensitive data from certain actions without user prompts. The description notes improved checks as the fix. ...

CVE-2024-40867

The CVE-2024-40867 issue is an Apple-specific Web content sandbox breakout risk caused by a custom URL scheme handling flaw. Affected products are iOS 18.1 and iPadOS 18.1; Apple fixed the issue in these releases through improved input validation. The vulnerability affects the WebKit/Web content ...

CVE-2024-44217

CVE-2024-44217 concerns a permissions issue related to password autofill that could occur after a failed authentication attempt. Apple has addressed this vulnerability by removing vulnerable code and adding additional checks, with fixes published in iOS 18 and iPadOS 18. Related Red Hat and other...

CVE-2024-44277

CVE-2024-44277 affects Apple iOS family components where memory handling vulnerability may allow an app to trigger unexpected system termination or corrupt kernel memory. According to connected sources, the issue is addressed in iOS 18.1, iPadOS 18.1, visionOS 2.1, and tvOS 18.1, with fixed memor...

CVE-2024-54488

CVE-2024-54488 is an Apple logic-issue vulnerability in file handling that allows viewing photos in the Hidden Photos Album without authentication. Affected products include macOS Ventura 13.7.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2 (also iPadOS 17.7.3). Root cause p...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

CVE-2025-43436

CVE-2025-43436 is a permissions issue affecting Apple OS components (notably CoreServices) where an app may enumerate a user’s installed apps. The connected Nessus entry for Apple TV (and related Apple platforms) confirms CoreServices involvement and ties the CVE to an exposure of installed apps....

CVE-2026-20615

CVE-2026-20615 is a path-handling vulnerability described across multiple sources as fixed by Apple in iOS 26.3/iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, and visionOS 26.3. The issue, reported in CoreServices (path validation), could allow an app to gain root privileges due to improper ...

CVE-2026-20644

CVE-2026-20644 affects WebKit/Web content handling in Apple platforms. The issue, described as a memory handling problem, could cause an unexpected process crash when processing maliciously crafted web content. It is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS ...

CVE-2026-43668

CVE-2026-43668 is a use-after-free vulnerability in Apple software that was fixed by memory-management improvements. It affects multiple Apple platforms (iOS, iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) across several versions, including iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPa...

CVE-2009-2206

The CVE-2009-2206 issue affects Apple iPhone OS AudioCodecs (CoreAudio) where multiple heap-based buffer overflows occur while parsing AAC/MP3 streams. Vulnerable on iPhone OS <3.1 and iPod touch

CVE-2011-2867

Technical details for CVE-2011-2867 are not publicly provided in the supplied documents. Monitor for updates from the related sources (OpenVAS/Nessus/ENISA/Vulners records) for targeted information.

CVE-2012-0601

Technical details for CVE-2012-0601 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2012-0603

Technical details about CVE-2012-0603 (affected WebKit on iOS 5.1 and iTunes 10.6) are not provided in the connected documents; no product/version specifics or remediation are disclosed here; monitor for updates.

CVE-2016-1775

CVE-2016-1775 corresponds to a TrueTypeScaler memory corruption issue in Apple’s font processing stack. In affected products (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2), a crafted font file could lead to arbitrary code execution or memory corruption, i.e., a remote ...

CVE-2016-4584

The provided connected documents identify CVE-2016-4584 as a WebKit Page Loading vulnerability in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The root cause is memory corruption in WebKit Page Loading, allowing a remote attacker to execute arbitrary code or cause a d...

CVE-2016-4632

CVE-2016-4632 affects ImageIO in Apple iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, and watchOS

CVE-2017-2507

CVE-2017-2507 affects Apple iOS (<10.3.2), macOS (<10.12.5), tvOS (<10.2.1), and watchOS (

CVE-2017-6976

CVE-2017-6976 describes a sandbox bypass in Apple iOS Sandbox Profiles affecting iOS versions before 10.3, where a crafted app may bypass access restrictions to iCloud user records. Connected sources confirm the issue and identify Sandbox Profiles as the vulnerable component, with Apple addressin...

CVE-2018-4092

CVE-2018-4092 affects Apple OS kernels across iOS, macOS, tvOS, and watchOS. The root cause is a race condition in the Kernel that can allow a crafted app to bypass memory-read restrictions. Affected versions include iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4109

CVE-2018-4109 affects Apple platforms via the Graphics Driver. A memory corruption issue in the Graphics Driver could allow a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Affected products are iOS before 11.2.5, tvOS before 11.2.5, and watchOS before ...

CVE-2018-4110

CVE-2018-4110 affects iOS Web App in Apple devices prior to iOS 11.3. The vulnerability allows a remote attacker to bypass cookie persistence restrictions in the Web App component, leading to cookies potentially persisting contrary to intended limits. The CVE entry credits Ben Compton and Jason C...

CVE-2018-4140

CVE-2018-4140 affects Apple iOS before 11.3, in the Telephony component. A remote attacker can trigger a NULL pointer dereference via a Class 0 SMS , causing the device to reboot (DoS). The issue is fixed in iOS 11.3; remediation is to upgrade to iOS 11.3 or later per Apple’s security content ent...

CVE-2018-4322

CVE-2018-4322 is an iOS vulnerability in the Accounts component affecting versions prior to iOS 12. It concerns an entitlement-related issue that could allow a local app to read a persistent account identifier. Apple’s security content notes that the flaw was addressed with improved entitlements ...

CVE-2018-4329

CVE-2018-4329 concerns Safari history deletion on iOS/macOS: clearing a history item may fail to clear visits with redirect chains. The Red Hat and Apple documentation confirm the root cause was an incomplete data deletion, addressed in Safari/iOS 12 with an improved deletion mechanism. Affected ...

CVE-2019-25071

CVE-2019-25071 affects Apple iPhone on iOS up to 12.4.1, where playing an audio/video file can initiate Siri on the same device, enabling commands to be executed remotely. Public demonstrations exist; Apple disputes security implications. Remediation noted as upgrading to iOS 13.0 or later.

CVE-2019-7288

The CVE-2019-7288 issue is a FaceTime Live Photos vulnerability reported in multiple sources. The Red Hat and CNVD entries, along with NVD/NISTA records, confirm that Apple fixed the flaw by updating FaceTime components in macOS Mojave 10.14.3 Supplemental Update and iOS 12.1.4. The available doc...

CVE-2019-8731

CVE-2019-8731 maps to an Apple iOS 13 vulnerability in the Quick Look component where execute permissions were inappropriately granted. The root cause is a permissions validation issue; processing a maliciously crafted file could disclose user information. Apple fixes this with updated permission...

CVE-2021-1862

CVE-2021-1862 describes an information-disclosure issue on Apple devices where a person with physical access could potentially access contacts via Siri search. The vulnerability affects iOS and iPadOS prior to 14.5 and is addressed in iOS 14.5 / iPadOS 14.5 with improved logic for Siri search acc...

CVE-2022-43454

CVE-2022-43454 describes a double-free condition that affects Apple systems where memory management improvements fix the issue. Affected is Apple platforms’ kernel-level handling, with the vulnerability fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. The advisory s...

CVE-2024-44126

CVE-2024-44126 affects Apple ARKit components on macOS and iOS family. The vulnerability allows processing a maliciously crafted file to trigger a heap corruption, with potential impact across confidentiality, integrity, and availability as described in the CVE metrics. Apple’s advisories indicat...

CVE-2026-20642

CVE-2026-20642 is an input validation vulnerability fixed in iOS 26.3 and iPadOS 26.3. The issue could let a person with physical access to an iOS device access photos from the lock screen. Affected software: iOS and iPadOS (prior to 26.3). Root cause: input validation weakness enabling exposure ...

CVE-2026-43711

CVE-2026-43711 describes a memory corruption vulnerability in processing a maliciously crafted video file. Apple lists fixed versions across multiple platforms: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; and watchOS 26.6. The i...

CVE-2026-43744

CVE-2026-43744 describes an out-of-bounds write in CoreAudio when processing an audio stream from a maliciously crafted media file. The issue is addressed in Apple's security updates: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and...

CVE-2026-43769

Summary of CVE-2026-43769 : An integer overflow was addressed via improved input validation. Affected Apple platforms and fixed versions include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue could allow an app t...

CVE-2010-1811

CVE-2010-1811 affects ImageIO in Apple iOS prior to 4.1, where a heap/buffer overflow in TIFF handling could allow a remote attacker to cause arbitrary code execution or a memory corruption/DoS in an affected device (iPhone/iPod touch). The provided documents specify the vulnerability class and i...

CVE-2011-2799

Technical details about CVE-2011-2799 are not publicly available in the provided documents. The connected items reference Apple Safari/iTunes entries and OpenVAS checks but do not specify Chrome-related root cause, affected versions, or a fix; monitor for updates.

CVE-2011-2847

This CVE (CVE-2011-2847) is a use-after-free in Google Chrome's document loader, exploitable via a crafted document to cause a denial of service (and possibly other impact). Affected software: Chrome before 14.0.835.163. Impact is described as DoS/other unspecified effects; remediation is to upgr...

CVE-2011-2868

Technical details for CVE-2011-2868 are not publicly available in the provided connected documents; monitor for updates.

CVE-2012-0591

The CVE-2012-0591 entry concerns WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The root cause is described only at a h...

CVE-2012-0595

CVE-2012-0595 concerns WebKit used in Apple iOS prior to 5.1 and iTunes prior to 10.6. The initial description states that a crafted website can trigger remote code execution or a memory corruption-based denial of service, potentially crashing the application. Connected documents list this CVE in...

CVE-2015-1098

CVE-2015-1098 affects Apple iOS before 8.3 and OS X before 10.10.3, where processing crafted iWork files can lead to remote code execution or memory corruption causing a denial of service. In the provided documents, the vulnerability is tied to iWork file handling with memory corruption as the ro...

CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2015-3753

CVE-2015-3753 affects WebKit used in Apple Safari (before 6.2.8, before 7.1.8 for 7.x, and before 8.0.8 for 8.x; on iOS prior to 8.4.1). The root cause is improper taint checking for CANVAS elements, which could allow remote attackers to bypass the Same Origin Policy and exfiltrate sensitive imag...

CVE-2016-1832

CVE-2016-1832 affects Apple's libc in tvOS (Apple TV 4th generation) and related Apple platforms. Description from the TV security content indicates a memory corruption issue in libc that could allow a local attacker to cause termination or arbitrary code execution; impact is local and memory-cor...

CVE-2016-1858

CVE-2016-1858 affects WebKit used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1. The issue is an improper taint-tracking tracking in WebKit, enabling a remote attacker to obtain sensitive information via a crafted website. The vulnerability is described across multiple sou...