CVE-2026-43666

CVE-2026-43666 corresponds to an out-of-bounds write issue fixed by Apple in multiple platforms. Affected products include iOS 18.7.9 and iPadOS 18.7.9 (also 26.5 for iOS/iPadOS), macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The vulnerab...

CVE-2026-64758

CVE-2026-64758 is actively addressed for Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) via improved bounds checks in ImageIO. The issue affects processing a maliciously crafted file and may cause an unexpected app termination. Public details in connected sources (Apple secur...

CVE-2010-1753

The CVE-2010-1753 entry affects Apple iOS prior to version 4 on iPhone and iPod touch, where ImageIO can be driven by a crafted JPEG image to cause remote arbitrary code execution or a denial of service via memory corruption and application crash. The underlying component is ImageIO’s JPEG handli...

CVE-2011-2871

Technical details for CVE-2011-2871 are not publicly provided in the connected documents. The available materials describe WebKit/iOS-related vulnerability consequences but do not specify affected components, versions, or remediation. Monitor for updates in future disclosures.

CVE-2012-0623

CVE-2012-0623 refers to a WebKit vulnerability affecting Apple iOS prior to 5.1 and iTunes prior to 10.6. The issue allows remote attackers to cause memory corruption, potentially enabling arbitrary code execution or a denial of service via a crafted web site. The provided documents identify WebK...

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2018-4439

CVE-2018-4439 corresponds to a logic issue that was addressed with improved validation. It affects multiple Apple software versions prior to their patch levels: iOS before 12.1.1, Safari 12.0.2, iTunes 12.9.2 for Windows, and iCloud for Windows 7.9. The available connected documents confirm the r...

CVE-2020-27902

CVE-2020-27902 is an Apple iOS/iPadOS vulnerability describing an authentication issue where a user with physical access could access stored passwords without authentication. Apple fixed this issue in iOS 14.2 and iPadOS 14.2 by improving state management. The CVE appears under Keyboard in the Ap...

CVE-2020-3890

CVE-2020-3890 affects Apple iOS/iPadOS Messages Composition: a logic/deletion issue allowed deleted message groups to be suggested as autocompletion. Root cause: deletion handling in Messages Composition. Impact: potential leakage of deleted content via autocomplete suggestions. Mitigation: patch...

CVE-2022-46715

CVE-2022-46715 is a logic issue in Apple iOS/iPadOS where an app may bypass certain Privacy preferences. Connected Apple security content specifies the issue exists in iOS prior to 16.1 and iPadOS prior to 16, with a fix in iOS 16.1 and iPadOS 16. The root cause is described as a logic issue addr...

CVE-2023-42923

CVE-2023-42923 affects Apple iOS and iPadOS, specifically the Safari Private Browsing feature. The issue is described as an authentication bypass in Private Browsing tabs, addressed through improved state management and fixed in iOS 17.2 and iPadOS 17.2. Public documents from NVD/Red Hat/CVE list...

CVE-2024-40839

CVE-2024-40839 affects Apple iOS and iPadOS (Lock Screen). Reported issue arises from improper/insufficient state management that could allow a local attacker with physical access to view notification contents on the lock screen. The vulnerability is fixed in iOS 17.5 and iPadOS 17.5. Connected s...

CVE-2024-44139

CVE-2024-44139 affects iOS 18 and iPadOS 18; fix implemented in those versions. The vulnerability allowed an attacker with physical access to potentially access contacts from the lock screen. Root cause described as requiring improved checks; no explicit exploitation details are provided in the s...

CVE-2025-31210

CVE-2025-31210 affects iOS/iPadOS where processing web content can cause a denial-of-service. Apple attributes this to a FaceTime-related/web-content handling issue and provides fixes in iPadOS 17.7.7, iOS 18.5, and iPadOS 18.5. The vulnerability is resolved by these updates; no exploitation deta...

CVE-2025-31225

Apple fixed CVE-2025-31225 in iOS 18.5 and iPadOS 18.5. The issue exposed privacy risk where call history from deleted apps could still appear in Spotlight search results. Affected products include iPhone XS and later and iPad models supported by iPadOS 18.5; the root cause is a privacy data hand...

CVE-2025-46279

CVE-2025-46279 describes a permissions issue in Apple operating systems where an app may identify other apps installed on a user’s device. Affected platforms include watchOS, iOS/iPadOS, macOS, visionOS, and tvOS. The root cause involves insufficient restrictions on app visibility of installed so...

CVE-2026-28819

CVE-2026-28819 is an out-of-bounds write vulnerability fixed by updates: iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. The issue may enable arbitrary code execution with kernel privileges. Exploitation details are not provided in the supplied document...

CVE-2026-28907

CVE-2026-28907 relates to improved input validation that fixes a CSP bypass when processing malicious web content. Affected products/contexts cited in connected docs include Safari 26.5; iOS 18.7.9, iPadOS 18.7.9 and 26.5; macOS Tahoe 26.5; tvOS 26.5; visionOS 26.5; watchOS 26.5. Remediation is p...

CVE-2026-28942

CVE-2026-28942 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK (processing malicious web content) that can cause an unexpected crash. The issue is referenced across multiple advisories (Red Hat, SUSE, Oracle Linux, Amazon Linux 2) and is addressed by platform-specific security updates. ...

CVE-2026-28986

CVE-2026-28986 is a race-condition vulnerability that Apple fixed with additional validation. According to connected sources, the issue could cause an app to trigger an unexpected system termination. It is addressed in multiple Apple OS updates: iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5,...

CVE-2026-43729

CVE-2026-43729: Apple fixed a local, memory-corruption issue triggered by processing a specially crafted image. Affected products include iOS/iPadOS 26.6 and macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. Root cause involves improved memory handling to address use-after-fre...

CVE-2026-43732

CVE-2026-43732 describes a path handling issue in WebKit used by Safari and Apple OS components. The vulnerability arises from insufficient validation in path handling when processing web content, potentially allowing disclosure of sensitive user information. Apple fixes are included in Safari 26...

CVE-2026-43800

CVE-2026-43800 is an information-disclosure vulnerability resolved by removing the vulnerable code. Public records show fixes in Apple operating systems across multiple devices: iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. The issue could allow an app to access sensitive user d...

CVE-2011-2870

CVE-2011-2870 affects WebKit as used in Apple iOS (pre-5.1) and iTunes (pre-10.6). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, due to memory corruption that can lead to an application crash. The provided documents do...

CVE-2012-0626

WebKit vulnerability CVE-2012-0626 affects Apple iOS (before 5.1) and iTunes (before 10.6). A crafted web site can trigger memory corruption in WebKit, leading to remote code execution or a denial of service (application crash). The description does not specify exact vulnerable component versions...

CVE-2012-0633

Technical details for CVE-2012-0633 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-1814

Affected software/hardware: Apple TV (4th generation) running tvOS. Issue: IOAcceleratorFamily contains a vulnerability that can be triggered by a crafted app, leading to a NULL pointer dereference and denial of service. Root cause: memory access validation/locking issues in IOAcceleratorFamily, ...

CVE-2017-7113

The CVE-2017-7113 entry affects Apple iOS prior to 11.1 and specifically targets the UIKit component. The issue allows characters in a secure text field to be revealed during focus-change events, indicating a local-type disclosure vulnerability in the secure input handling. The Apple security pag...

CVE-2018-4093

Summary: CVE-2018-4093 is a kernel-level memory-read bypass affecting Apple platforms. The vulnerability exists in the Kernel component across iOS before 11.2.5, macOS before 10.13.3, tvOS before 11.2.5, and watchOS before 4.2.2. The issue allows a crafted app to bypass memory-read restrictions a...

CVE-2018-4147

CVE-2018-4147 affects Apple/WebKit-based components across multiple platforms: iCloud for Windows (before 7.3), Safari (before 11.0.3), iTunes for Windows (before 12.7.3), and iOS (before 11.2.5). The connected documents describe the root cause as memory corruption issues and note remediation thr...

CVE-2018-4216

CVE-2018-4216 is a vulnerability described as a logic issue in the handling of call URLs in the iOS Phone component, addressed by improved state management. Affected product: Apple iOS versions prior to 11.4.1 (iPhone/iOS devices). Root cause: a logic/state-management flaw in URL handling within ...

CVE-2019-8617

CVE-2019-8617 corresponds to a sandbox bypass vulnerability in the iOS Photos Storage component. The Apple advisory states that an attacker could have a sandboxed process circumvent sandbox restrictions, with the issue fixed in iOS 12.3. Public references list the CVE as part of iOS security upda...

CVE-2023-42871

CVE-2023-42871 : A kernel-memory-management issue allows an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability affects Apple platforms and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The issue is described as arising from improved memory ...

CVE-2025-43496

The CVE-2025-43496 issue affects Apple platforms (watchOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 26.1; iOS 18.7.2/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Description: remote content could be loaded even when the device setting Load Remote Images is off. Root cause: insufficient logi...

CVE-2026-20636

CVE-2026-20636 is a memory-handling issue in the WebKit/Web content processing path that may lead to an unexpected process crash when processing malicious web content. According to the CVE entry, the vulnerability is fixed in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3...

CVE-2026-20688

CVE-2026-20688 describes a path handling issue fixed by improved validation. Affected software includes Apple operating systems: iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, and visionOS 26.4. The underlying flaw allows a malicious app to break out of its...

CVE-2026-28865

CVE-2026-28865 is an authentication issue in Apple platforms that Apple fixed with state-management improvements. The advisory indicates the vulnerability affects 802.1X/network authentication and could allow an attacker in a privileged network position to intercept traffic. Patches are present i...

CVE-2026-43654

The CVE-2026-43654 issue affects Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS) and is resolved in versions including iOS 18.7.9 / iPadOS 18.7.9, iOS 26.5 / iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Description:...

CVE-2026-43816

CVE-2026-43816 is an out-of-bounds write issue addressed by Apple in iOS 26.6 / iPadOS 26.6 / macOS Tahoe 26.6 / tvOS 26.6 / visionOS 26.6 / watchOS 26.6. The vulnerability’s impact, as documented, is that an affected app may cause an unexpected system termination. The CVSS vector indicates a loc...

CVE-2026-64721

CVE-2026-64721 concerns an Apple platform state-management issue that may allow an app to access sensitive user data. The issue is fixed in: iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Connected advisories corroborate s...

CVE-2026-64765

CVE-2026-64765 affects multiple Apple OSes (iOS/iPadOS, macOS Sequoia/Sonoma/Tahoe, tvOS, visionOS, watchOS) where an integer overflow occurs during processing of a malicious file. Root cause: improved input validation addresses an overflow in an affected component, preventing potential arbitrary...

CVE-2009-0958

Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1 store an exception for a hostname after the user accepts an untrusted Exchange certificate, causing the certificate to be accepted in future use and enabling remote Exchange servers to obtain sensitive information such as credential...

CVE-2009-1683

The CVE-2009-1683 issue affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1, where a remote attacker can trigger a denial of service (device reset) via a crafted ICMP echo request. The root cause is described as a logic issue in the Telephony component, leading to an assertio...

CVE-2009-2795

CVE-2009-2795: Heap-based buffer overflow in the Recovery Mode component of Apple iPhone OS before 3.1 and iPhone OS before 3.1.1 for iPod touch allows local users to bypass the passcode and access arbitrary data via vectors related to "command parsing." This description is supported by multiple ...

CVE-2012-0614

Technical details about CVE-2012-0614 are not publicly provided in the supplied connected documents. Monitor for updates from vendors or security feeds to obtain affected products, impact, and remediation guidance.

CVE-2016-1750

CVE-2016-1750 involves a use-after-free vulnerability in the kernel that affects Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2. The flaw could let an attacker’s crafted app execute arbitrary code with kernel/priviliged context. Apple documentation attributes t...

CVE-2025-43419

CVE-2025-43419 affects WebKitGTK/WebKit content processing. The vulnerability is described as memory corruption caused by improper memory handling during processing of malicious web content. Affected packages in various Linux distributions (e.g., webkitgtk4) have been addressed by updates to vers...

CVE-2025-43536

CVE-2025-43536 is a use-after-free in WebKitGTK/WebKit2GTK triggered by processing malicious web content, leading to an unexpected process crash. Affected package: webkitgtk4 (WebKitGTK). Fixes are provided in WebKitGTK/WebKit2GTK updates: Debian 11 bullseye and Debian 12 bookworm patches (2.50.4...

CVE-2026-28902

CVE-2026-28902 affects WebKitGTK/webkit2gtk across multiple Linux distributions (RH/RHEL 8/9, SUSE, Oracle Linux, Amazon Linux 2). The issue stems from improper memory handling when processing malicious web content, potentially causing an unexpected process crash. The advisories indicate remediat...

CVE-2026-28904

CVE-2026-28904 is a memory-handling issue affecting Apple platforms where processing malicious web content may cause an unexpected process crash. Connected advisories confirm fixes across multiple OS versions: iOS/iPadOS 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26....