CVE-2025-43507

The CVE-2025-43507 entry describes a privacy issue in Apple platforms where sensitive data was moved, enabling an app to fingerprint the user. Affected products include watchOS, macOS (Tahoe), iOS, iPadOS, and visionOS. Root cause: exposure related to relocating or handling sensitive data that co...

CVE-2025-43536

CVE-2025-43536 is a use-after-free in WebKitGTK/WebKit2GTK triggered by processing malicious web content, leading to an unexpected process crash. Affected package: webkitgtk4 (WebKitGTK). Fixes are provided in WebKitGTK/WebKit2GTK updates: Debian 11 bullseye and Debian 12 bookworm patches (2.50.4...

CVE-2026-28867

CVE-2026-28867: Apple advises that an issue was addressed with improved authentication. Affected products include iOS 18.7.7/iPadOS 18.7.7 and iOS 26.4/iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4. The vulnerability could allow an app to leak sen...

CVE-2026-28902

CVE-2026-28902 affects WebKitGTK/webkit2gtk across multiple Linux distributions (RH/RHEL 8/9, SUSE, Oracle Linux, Amazon Linux 2). The issue stems from improper memory handling when processing malicious web content, potentially causing an unexpected process crash. The advisories indicate remediat...

CVE-2026-28904

CVE-2026-28904 is a memory-handling issue affecting Apple platforms where processing malicious web content may cause an unexpected process crash. Connected advisories confirm fixes across multiple OS versions: iOS/iPadOS 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26....

CVE-2026-28944

CVE-2026-28944 relates to memory-management flaws exposed by processing malicious web content, causing an unexpected process crash. It affects Apple platforms including iOS, iPadOS, macOS Tahoe, and visionOS, and is fixed in versions 26.5 for these systems (per the CVE description and linked advi...

CVE-2026-43658

CVE-2026-43658 describes a memory-handling issue that can cause Safari to crash when processing maliciously crafted web content. The initial description states the fix is in Apple platforms: iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Connected documents c...

CVE-2026-43703

CVE-2026-43703 affects macOS Tahoe 26.5.2, iOS 26.5.2, and iPadOS 26.5.2, linked to a memory handling issue in libxslt when processing malicious web content. Root cause: memory handling flaw leading to an unexpected process crash. Consequence: potential disruption of a process due to crafted web ...

CVE-2012-0618

Technical details for CVE-2012-0618 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-0621

Technical details for CVE-2012-0621 are not publicly available in the provided documents; monitor for updates.

CVE-2012-0625

Technical details for CVE-2012-0625 are not publicly available in the provided documents. Monitor for updates from official advisories; the connected sources do not disclose affected products/versions or remediation .

CVE-2012-0631

Technical details for CVE-2012-0631 are not provided in the connected documents. The sources reference WebKit/iOS Safari vulnerabilities in general but do not specify affected versions, impact, or fixes for this CVE.

CVE-2012-0635

Technical details about CVE-2012-0635 are not publicly provided in the connected documents. The materials reference related WebKit/WebKit vulnerabilities but do not specify this CVE’s affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2012-0641

CVE-2012-0641 affects CFNetwork in Apple iOS prior to 5.1. Root cause: improper construction of request headers during URL parsing, enabling exposure of sensitive information via a malformed URL. Impact per the advisory: information disclosure. Metrics (NVD) show a network attack vector with low ...

CVE-2016-7576

CVE-2016-7576 is a memory corruption vulnerability in the iOS kernel (GasGauge) affecting iOS prior to 9.3.3. The issue was addressed by Apple in iOS 9.3.3 with improved memory handling. NVD notes a high-severity impact with local access, affecting confidentiality, integrity, and availability. Co...

CVE-2018-4275

CVE-2018-4275 is a memory corruption vulnerability affecting Apple iOS versions older than 11.4.1. Multiple sources (NVD entry and Red Hat/NVD cross-references) describe the issue as a memory corruption flaw addressed by improved memory handling, with Apple listing iOS 11.4.1 as the patched relea...

CVE-2018-4335

CVE-2018-4335 affects Apple iOS where the IOMobileFrameBuffer component had a validation issue that allowed reading restricted memory. The root cause is an input/validation defect that was fixed by improved input sanitization. Affected products/versions: iOS versions before 12.0 (iPhone/iPad/touc...

CVE-2018-4379

Summary: CVE-2018-4379 is a lock-screen vulnerability in Apple iOS prior to version 12.0.1 that allows access to the share function from the lock screen. The issue is addressed by restricting options offered on a locked device and is documented as part of iOS 12.0.1. Affected software: Apple iOS ...

CVE-2018-4429

This CVE (CVE-2018-4429) concerns a spoofing vulnerability in the handling of URLs within Apple’s LinkPresentation component. Affected software includes iOS versions prior to 12.1.1 and watchOS prior to 5.1.2, where input handling could be spoofed via malicious content (e.g., emails) leading to U...

CVE-2018-4461

CVE-2018-4461 is a memory corruption issue that affects Apple platforms prior to updated versions (iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2). Root cause: improper input validation leading to memory corruption. Impact and exploit details in the provided documents indicate a hig...

CVE-2021-30999

CVE-2021-30999 affects Apple platforms (notably Safari/WebKit components on iOS and iPadOS). The issue stems from permission logic that can prevent a user from fully deleting browsing history. Affected documentation indicates the vulnerability was addressed with a fix in iOS 14.6 and iPadOS 14.6,...

CVE-2024-44124

CVE-2024-44124 affects iOS 18 and iPadOS 18, where a malicious Bluetooth input device may bypass pairing due to a state-management issue. Connected sources confirm the root cause as improper state management in the Bluetooth pairing flow, with Apple listing the fix in iOS 18 / iPadOS 18. The Red ...

CVE-2025-43440

CVE-2025-43440 is a WebKitGTK/WebKitGTK4 vulnerability affecting WebKitGTK components (webkitgtk4) that can cause an unexpected process crash when processing malicious web content. Connected advisories show the issue being addressed across multiple distributions with concrete fixes: Amazon Linux ...

CVE-2025-43458

CVE-2025-43458 is a WebKitGTK/WebKit-related issue described in multiple advisories as a fault in processing maliciously crafted web content that can trigger an unexpected process crash. The core detail in the CVE entry states the fix was implemented via improved state management, with remediatio...

CVE-2026-20634

CVE-2026-20634 affects Apple ImageIO across multiple platforms. The issue could allow disclosure of process memory when processing a maliciously crafted image. Root cause: memory handling improvements fixed the vulnerability. Fixed in iOS 18.7.5, iPadOS 18.7.5 and iOS 26.3, iPadOS 26.3; macOS Seq...

CVE-2026-28877

CVE-2026-28877 concerns an authorization issue fixed by improved state management across Apple OS updates. Affected platforms include iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, and watchOS 26.4. The vulnerability could allow an app to access sensitive user data....

CVE-2026-28947

Concerning CVE-2026-28947, multiple connected advisories confirm a use-after-free/memory management vulnerability affecting Apple platforms. The issue is triggered by processing malicious web content via Safari, leading to a potential crash. It is addressed in macOS Tahoe 26.5, iOS/iPadOS 26.5, t...

CVE-2026-28952

CVE-2026-28952 is an integer overflow that Apple fixed by improved input validation. The NVD entry states the issue can lead to an app possibly causing unexpected system termination, with fixes in iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5. Related ...

CVE-2026-28972

CVE-2026-28972 describes an out-of-bounds write vulnerability that could cause an app to terminate unexpectedly or write kernel memory. Apple specifies fixes via input validation improvements and lists affected platforms: iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7....

CVE-2026-43661

CVE-2026-43661 affects Apple platforms including iOS 26.5/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. Description: Processing a maliciously crafted image may cause memory corruption due to a buffer overflow in ImageIO; impact is memory corruption with potential for crashes. The vu...

CVE-2026-64743

CVE-2026-64743 is an authorization issue addressed by Apple with improved state management. The NVD entry specifies that the flaw allows an app to access sensitive user data and is fixed in iOS 26.6 / iPadOS 26.6 / macOS Tahoe 26.6 / tvOS 26.6 / visionOS 26.6 / watchOS 26.6. Core metrics show CVS...

CVE-2010-1756

The CVE-2010-1756 issue affects Apple iOS

CVE-2010-1809

The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...

CVE-2010-1817

CVE-2010-1817 describes a buffer overflow in ImageIO on Apple iOS prior to 4.1, exploitable via a crafted GIF file to allow remote code execution or cause a denial of service. Affected software: Apple iOS devices (iPhone/iPod touch) with ImageIO before 4.1. Root cause: overflow in GIF handling wi...

CVE-2012-0590

CVE-2012-0590 is an XSS vulnerability in WebKit as used by Apple iOS before 5.1. The issue arises from a drag-and-drop operation that can allow a user-assisted remote attacker to inject arbitrary script/HTML. The provided connected documents identify the affected components (WebKit/Apple Safari s...

CVE-2012-0610

WebKit in Apple iOS before 5.1 and iTunes before 10.6 is affected. A crafted web site can trigger memory corruption in WebKit, allowing remote code execution or a denial of service (application crash). Affected component: WebKit used by iOS and iTunes. Root cause: memory corruption via crafted we...

CVE-2012-0627

Technical details for CVE-2012-0627 are not publicly available in the provided documents. No product version, vulnerable component, impact, or remediation is specified here; monitor for updates and next disclosures.

CVE-2012-0629

CVE-2012-0629 concerns WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption–related DoS via a crafted website, and is noted as a different vulnerability from other WebKit CVEs in Apple advis...

CVE-2016-1823

CVE-2016-1823 affects Apple iOS 9.3.2 and OS X 10.11.5 (as well as tvOS 9.2.1 and watchOS 2.2.1) via IOHIDDevice::handleReportWithTime. A crafted IOHIDReportType enum can trigger an incorrect cast, causing out-of-bounds read and memory corruption, enabling an attacker to execute arbitrary code in...

CVE-2018-4444

The CVE-2018-4444 entry describes a logic issue addressed with improved state management in WebKit/Safari components. Affected products include Safari (macOS and iOS derivative stacks) and WebKit-based features used by Apple platforms (Safari, iOS, tvOS, iTunes for Windows). Impact note: processi...

CVE-2024-40863

CVE-2024-40863 affects Apple iOS 18 and iPadOS 18. The related documents indicate a local-source vulnerability where a sandboxed app may leak sensitive user information, with the issue fixed in iOS 18 / iPadOS 18. The root cause/technical specifics are not fully enumerated in the provided sources...

CVE-2024-44147

CVE-2024-44147 affects iOS 18 and iPadOS 18. The issue, resolved by Apple through improved state management, could allow an app to gain unauthorized access to the Local Network via the NetworkExtension surface. The vulnerability is fixed in iOS 18/iPadOS 18; no exploitation details are provided b...

CVE-2025-43190

CVE-2025-43190 describes a parsing issue in how directory paths are handled, addressed by improved path validation. The fixed products and versions listed in public records include watchOS 26, macOS Sonoma 14.8, iOS 26, iPadOS 26, visionOS 26, and macOS Sequoia 15.7. The vulnerability could enabl...

CVE-2025-43329

CVE-2025-43329 is a permissions-related sandbox-bypass vulnerability in Apple platforms. The issue allows a locally authenticated app with low privileges and no user interaction to break out of its sandbox. It is fixed in tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The NVD entry states a permissi...

CVE-2025-43359

CVE-2025-43359 describes a logic issue in state management where a UDP server socket bound to a local interface may become bound to all interfaces. This could lead to exposure of network services. The vulnerability affects Apple platforms and is fixed in: tvOS 26, watchOS 26, macOS Sonoma 14.8, i...

CVE-2026-28962

The CVE-2026-28962 issue affects Apple platforms and is addressed by updates to iOS/iPadOS 18.7.9, iOS/iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5. The vulnerability involved processing maliciously crafted web content that could disclose sensitive user information. Root cause is described as...

CVE-2010-1751

Apple iOS before 4 (on iPhone and iPod touch) is affected by CVE-2010-1751 due to the Application Sandbox not preventing access to the photo library, which could allow remote attackers to obtain location information via unspecified vectors. The issue is described across multiple sources as a weak...

CVE-2010-1755

CVE-2010-1755 affects Safari on Apple iOS before 4 (iPhone, iPod touch). The root cause is the improper implementation of the Accept Cookies preference, which could allow remote web servers to track users via cookies. Documented impact is user tracking; CVSS-based metrics indicate low to medium o...

CVE-2011-2872

Technical details for CVE-2011-2872 are not provided in the supplied documents; no affected products, impact, or remediation can be confirmed. Monitor for updates from official advisories.

CVE-2012-0597

CVE-2012-0597 pertains to WebKit used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted website, driven by memory corruption in WebKit. The provided sources describe the affected software...