CVE-2018-4362

CVE-2018-4362 affects Safari/WebKit on macOS and iOS, describing an inconsistent user interface issue that was addressed with improved state management. Public documentation notes that the issue affected versions prior to Safari 11.1.2 and iOS 12, with a fix delivered in Safari 11.1.2 (and corres...

CVE-2024-44235

CVE-2024-44235 concerns Apple iOS/iPadOS where an attacker with physical access could view restricted content from a locked device. The Apple advisories indicate the issue was addressed with improved checks and is fixed in iOS 18.1 and iPadOS 18.1. Red Hat and other sources reference the same vul...

CVE-2025-43445

CVE-2025-43445 is an out-of-bounds read vulnerability that Apple fixed via input validation improvements. The CVE affects media processing paths and can cause an app to terminate unexpectedly or memory corruption when handling a malicious media file. Affected platforms and versions, per available...

CVE-2026-20617

CVE-2026-20617 describes a race condition in CoreServices that could allow an app to gain root privileges. The issue was mitigated by improved state handling and is fixed in multiple Apple platforms: iOS 26.3, iPadOS 26.3, watchOS 26.3, tvOS 26.3, visionOS 26.3, macOS Sonoma 14.8.4, and macOS Tah...

CVE-2026-20664

CVE-2026-20664 is a memory-handling vulnerability where processing malicious web content may cause an unexpected process crash. It is fixed in Safari 26.4, iOS 26.4/iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4. The connected advisories corroborate a fixed-upgrade path (WebKitGTK/WebKit2GTK re...

CVE-2026-20675

CVE-2026-20675 is an Apple vulnerability tied to processing maliciously crafted images that could disclose user information. Connected sources confirm the issue affects multiple Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS, including Apple TV firmware references) and is addressed ...

CVE-2026-28857

CVE-2026-28857 is a memory handling issue affecting processing of malicious web content that can lead to an unexpected process crash. The issue is addressed and fixed in Safari 26.4, iOS 26.4 / iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4. The CVSSv3.1 vector from the initial document indicat...

CVE-2026-28905

CVE-2026-28905 is an Apple memory-handling flaw affecting how web content is processed, potentially causing an application/process crash. The primary description specifies the issue is fixed in Apple OS updates: iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and visionOS 26.5. The CVSSv3.1 m...

CVE-2026-28936

CVE-2026-28936 affects Apple platforms and is described as a vulnerability where processing a maliciously crafted file may lead to an unexpected app termination. It has been fixed in multiple updates: iOS 18.7.9 and iPadOS 18.7.9; iOS 26.5 and iPadOS 26.5; macOS Sonoma 14.8.7; macOS Tahoe 26.5; a...

CVE-2009-0960

CVE-2009-0960 affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1, specifically the Mail component. The underlying issue is that there is no option to disable remote image loading in HTML email, which allows a remote attacker to determine the device’s address and when an emai...

CVE-2012-0604

Technical details about CVE-2012-0604 are not provided in the connected documents. Monitor for updates.

CVE-2012-0613

CVE-2012-0613 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The issue allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted web site. The provided documents do not include a remediation patch versio...

CVE-2012-0623

CVE-2012-0623 refers to a WebKit vulnerability affecting Apple iOS prior to 5.1 and iTunes prior to 10.6. The issue allows remote attackers to cause memory corruption, potentially enabling arbitrary code execution or a denial of service via a crafted web site. The provided documents identify WebK...

CVE-2012-0643

CVE-2012-0643 affects Apple iOS: the kernel before 5.1 mishandles debug system calls, allowing a crafted program to bypass sandbox restrictions and execute arbitrary code. Affected: iOS devices with iOS

CVE-2017-7001

CVE-2017-7001 affects Apple devices including iOS before 10.3.2 and macOS before 10.12.5, specifically the SQLite component. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Apple’s security ...

CVE-2018-4387

CVE-2018-4387 affects Apple iOS prior to 12.1. Description: a lock-screen vulnerability allowing access to photos via Reply With Message on a locked device, addressed by improved state management. Affected: iOS versions before 12.1. Reported in multiple sources (NVD entry and Red Hat CVE page) wi...

CVE-2019-8742

CVE-2019-8742 affects iOS where a person with physical access to a locked device could access contacts from the lock screen. The issue was fixed in iOS 13; exploitation is local (requires physical access) and the CVSS metrics indicate low impact (partial confidentiality impact, no integrity/avail...

CVE-2020-3888

CVE-2020-3888 affects Apple’s Web App component (iOS/iPadOS Safari/WebKit). Description: a logic issue where a malicious page could interfere with other web contexts. Root cause: improved restrictions address the logic issue. Impact: potential interference with other web contexts within Web App/W...

CVE-2023-40385

CVE-2023-40385 affects Apple platforms: macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. The issue stems from vulnerable code related to DNS query handling that could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. The public documents consistently state that A...

CVE-2023-42831

CVE-2023-42831 affects Apple operating systems, with remediation in macOS Big Sur 11.7.9, iOS 15.7.8, iPadOS 15.7.8, macOS Monterey 12.6.8, and macOS Ventura 13.5. The issue was addressed by removing the vulnerable code, and may allow an app to fingerprint the user.

CVE-2024-40851

CVE-2024-40851 affects Apple iOS 18.1 and iPadOS 18.1. The issue allowed an attacker with physical access to view contact photos from the lock screen due to insufficient restrictions on options presented on a locked device. Apple fixed this in iOS 18.1 / iPadOS 18.1 via strengthened authenticatio...

CVE-2024-54485

CVE-2024-54485 affects Apple iOS/iPadOS where a user’s lock-screen notifications could be viewed by an attacker with physical access. The issue is mitigated by updates: iPadOS 17.7.3, iOS 18.2, and iPadOS 18.2 fix the flaw by adding additional logic to prevent lock-screen notification content exp...

CVE-2025-43186

The CVE-2025-43186 issue is a memory-handling vulnerability fixed across multiple Apple platforms: watchOS 11.6, iOS 18.6, iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, and macOS Ventura 13.7.7. The vulnerability arises during file parsing and may cause an unexpec...

CVE-2025-43427

CVE-2025-43427 is a WebKitGTK/WebKit issue where processing maliciously crafted web content may cause an unexpected process crash. The connected advisories show WebKitGTK/WebKit updates addressing this and related CVEs (e.g., 43392, 43429–43432, 43434, 43458, 66287). The fix is implemented via up...

CVE-2025-43431

CVE-2025-43431 is a WebKitGTK/WebKit2GTK memory corruption issue triggered by processing malicious web content. Public advisories show fixes across Linux distros: AL2 webkitgtk4 2.50.4-1.amzn2.*; Debian/webkit2gtk 2.50.2-1~deb11u1 (and related stable/bookworm updates); Mageia/alma/other entries l...

CVE-2026-28819

CVE-2026-28819 is an out-of-bounds write vulnerability fixed by updates: iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. The issue may enable arbitrary code execution with kernel privileges. Exploitation details are not provided in the supplied document...

CVE-2026-28903

CVE-2026-28903 affects WebKitGTK4 (webkitgtk4) in Amazon Linux 2 AL2. The issue is a memory handling/problem in processing malicious web content that may trigger an unexpected process crash. Fixes are shipped as webkitgtk4 2.52.4-1.amzn2 (and related devel/jsc packages) in ALAS2-2026-3381; update...

CVE-2026-28954

CVE-2026-28954 describes a file-quarantine bypass where a malicious disk image could bypass Gatekeeper checks. Concrete details from connected advisories confirm affected Apple platforms and fixed versions: iOS 18.7.9 and iPadOS 18.7.9; macOS Sequoia 15.7.7; macOS Sonoma 14.8.7; macOS Tahoe 26.5....

CVE-2026-28983

Apple fixed CVE-2026-28983 as a type confusion vulnerability. Affected platforms include iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, with fixes shipped in iOS 18.7.9/iPadOS 18.7.9 (and corresponding OS updates for other devices). Impact: remote attacker may cause denial of service. Roo...

CVE-2026-39872

CVE-2026-39872 affects WebKit-based browser components used in Safari and related Apple platforms. The issue involves improper memory handling that could be triggered by processing malicious web content, potentially causing an unexpected process crash. Apple notes the fix in Safari 26.5.2, iOS 26...

CVE-2026-43797

CVE-2026-43797 concerns an information-disclosure issue where an app could access a user’s contacts. The CVE description notes the issue was addressed with improved checks and is fixed in Apple updates: iOS 26.6 and iPadOS 26.6, and macOS Tahoe 26.6. The accompanying metrics indicate a CVSS v3.1 ...

CVE-2026-64716

CVE-2026-64716 is a memory handling vulnerability in Apple platforms. Processing a maliciously crafted image may corrupt process memory. Affected products/versions include iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Roo...

CVE-2026-64769

CVE-2026-64769 is an out-of-bounds write vulnerability addressed by Apple in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. The issue enables a remote attacker to cause unexpected application termination or heap corruption due to improv...

CVE-2009-0959

CVE-2009-0959 affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The vulnerability is in the MPEG-4 video codec and is caused by an input validation issue in a crafted MPEG-4 video file, leading to a denial of service (device reset). Exploitation details are not provided in...

CVE-2011-2871

Technical details for CVE-2011-2871 are not publicly provided in the connected documents. The available materials describe WebKit/iOS-related vulnerability consequences but do not specify affected components, versions, or remediation. Monitor for updates in future disclosures.

CVE-2011-2873

WebKit (as used in Apple iOS before 5.1 and iTunes before 10.6) is vulnerable to remote code execution or memory corruption via a crafted web site. The issue, described for CVE-2011-2873, is a WebKit memory-corruption/DoS vulnerability distinct from other WebKit issues. Connected documents do not...

CVE-2012-0593

CVE-2012-0593 concerns WebKit used in Apple iOS prior to 5.1 and iTunes prior to 10.6. The issue allows a remote attacker to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption leading to application crash. The provided documents do not supply add...

CVE-2012-0598

CVE-2012-0598 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows a crafted web site to cause remote arbitrary code execution or a denial of service through memory corruption, potentially crashing the application. The provided documents do not specify a...

CVE-2012-0609

Technical details for CVE-2012-0609 are not publicly available in the provided documents. Monitor for updates from official advisories; no product, vector, impact, or remediation specifics are present here.

CVE-2012-0616

Technical details for CVE-2012-0616 are not publicly provided in the connected documents. Monitor for updates.

CVE-2012-0633

Technical details for CVE-2012-0633 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-1824

CVE-2016-1824 affects Apple’s IOHIDFamily and is described across Apple security advisories as a memory corruption issue in IOHIDFamily that could allow an attacker to execute arbitrary code with kernel privileges or cause a denial of service when a crafted app interacts with the HID subsystem. T...

CVE-2016-4594

CVE-2016-4594 corresponds to an unauthorized access issue in Apple’s Sandbox Profiles component. The vulnerability enables a local attacker to access the process list via a crafted app making privileged API calls. Affected platforms include iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to...

CVE-2016-4650

CVE-2016-4650 is a heap-based buffer overflow in IOHIDFamily (kernel extension) on Apple platforms. Documents show that the vulnerability allows local attackers to execute arbitrary code with kernel privileges or cause memory corruption/DOS when a crafted app is processed. The CVE is linked to Ap...

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2023-42869

CVE-2023-42869 is a set of multiple memory corruption issues in libxml2 that were addressed through improved input validation. The CVE entry notes the fixes are included in Apple products: macOS Ventura 13.4, iOS 16.5, and iPadOS 16.5. Connected sources corroborate that the libxml2 problems were ...

CVE-2023-42923

CVE-2023-42923 affects Apple iOS and iPadOS, specifically the Safari Private Browsing feature. The issue is described as an authentication bypass in Private Browsing tabs, addressed through improved state management and fixed in iOS 17.2 and iPadOS 17.2. Public documents from NVD/Red Hat/CVE list...

CVE-2024-40826

CVE-2024-40826 affects Apple products (iOS/iPadOS 18 and macOS Sequoia 15). The issue is a privacy flaw where an unencrypted document may be written to a temporary file during print preview. Apple documents remediation: the vulnerability is fixed in iOS 18, iPadOS 18, and macOS Sequoia 15. Refere...

CVE-2024-40840

CVE-2024-40840 affects Apple iOS 18 and iPadOS 18. The issue arises from a state-management weakness that could allow an attacker with physical access to use Siri to access sensitive user data. Apple states the vulnerability is fixed in iOS 18 / iPadOS 18. Practical impact is limited to scenarios...

CVE-2024-44139

CVE-2024-44139 affects iOS 18 and iPadOS 18; fix implemented in those versions. The vulnerability allowed an attacker with physical access to potentially access contacts from the lock screen. Root cause described as requiring improved checks; no explicit exploitation details are provided in the s...