CVE-2023-38425

CVE-2023-38425 affects Apple systems (iOS, iPadOS, macOS) where the kernel could be compromised due to a memory handling issue in a component named in Apple’s advisories. The vulnerability could allow an app to execute arbitrary code with kernel privileges, according to the CVE entry. It has been...

CVE-2023-41254

CVE-2023-41254 is a privacy-related issue in Apple platforms where log entries could reveal sensitive user data. It affects iOS/iPadOS 16.7.2 and 17.1, watchOS 10.1, macOS Ventura 13.6.1 and Sonoma 14.1. The root cause is improper private data redaction in logs. The issue is fixed in iOS/iPadOS 1...

CVE-2023-42841

CVE-2023-42841: The issue is addressed by improved memory handling and is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, and macOS Ventura 13.6.1. Description states: an app may be able to execute arbitrary code with kernel privileges. This is confirmed by con...

CVE-2019-8686

CVE-2019-8686 is a memory corruption issue associated with WebKit/WebKitGTK family that Apple and multiple Linux advisories linked to, fixed in Apple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2) and WebKitGTK-based packages (e.g., webkitgtk4 2.28.2 in AL2/CentOS advisories...

CVE-2020-3864

CVE-2020-3864 is a logic issue where a DOM object context may not have had a unique security origin. It is fixed in Apple/software updates across multiple platforms: iCloud for Windows 7.17, iTunes for Windows 12.10.4, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 1...

CVE-2020-9893

CVE-2020-9893 is a use-after-free vulnerability in WebKit that was fixed in Apple OS updates. According to the initial entry, it could allow a remote attacker to cause an unexpected application termination or arbitrary code execution. The connected Apple advisories confirm affected products and p...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2024-54551

CVE-2024-54551 is a denial-of-service vulnerability in web content processing within WebKit-based components. The connected documents indicate the issue is addressed by memory-handling improvements and fixes in specific Apple platforms: watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, vis...

CVE-2019-8687

CVE-2019-8687 is a memory corruption issue in WebKit-related components (Apple WebKit/WebKitGTK family) that could allow arbitrary code execution when processing malicious web content. Affected: Apple devices (iOS, macOS, tvOS, Safari, iTunes/Apple Windows), and WebKitGTK/WebKit on Linux. Mitigat...

CVE-2021-30799

CVE-2021-30799 affects WebKitGTK/WebKit, with multiple memory corruption issues in WebKitGTK/WPE WebKit before 2.32.3 that may lead to arbitrary code execution or memory corruption when processing malicious web content. Upstream fix: WebKitGTK 2.32.3. Public advisories (Arch Linux ASA-202107-67, ...

CVE-2021-30797

CVE-2021-30797 is a WebKit/WebKitGTK/WebKit2GTK-related vulnerability affecting WebKit-based components. In Arch Linux advisories ASA-202107-67/68, CVE-2021-30797 is listed among multiple issues in webkit2gtk that could allow arbitrary code execution when processing malicious web content, with pa...

CVE-2023-40423

CVE-2023-40423 is an Apple vulnerability where improved memory handling fixed an issue that could let an app execute arbitrary code with kernel privileges. Affected/fixed versions per sources: iOS 17.1/iPadOS 17.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1, macOS Sonoma 14.1, and earlier OS ver...

CVE-2019-8518

CVE-2019-8518 is a WebKit memory corruption issue fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The vulnerability allows arbitrary code execution when processing malicious web content. Exploit discussion notes an out-of-bounds acce...

CVE-2019-8813

CVE-2019-8813 is a WebKit/WebKit-derived issue classified as a logic vulnerability in state management that can enable universal cross-site scripting when processing malicious web content. The publicly documented fixes indicate the vulnerability is addressed in iOS 13.2, iPadOS 13.2, tvOS 13.2, a...

CVE-2023-42849

CVE-2023-42849 affects Apple platforms (iOS/iPadOS 17.1/16.7.2; macOS Monterey 12.7.1, Ventura/Sonoma 13.6.1/14.1; watchOS 10.1) where the issue concerns memory handling. The root cause allows an attacker who already has kernel code execution to bypass kernel memory mitigations, potentially eleva...

CVE-2019-8814

CVE-2019-8814 involves multiple memory corruption issues in WebKit that may be triggered by processing malicious web content, potentially enabling arbitrary code execution. Affected: WebKit/WebKitGTK/WebKit processes across Apple platforms (Safari on iOS/iPadOS/tvOS/macOS) and related WebKitGTK/W...

CVE-2021-30720

CVE-2021-30720 is a logic issue in WebKit-based components (notably WebKitGTK/WebKit) that could allow a malicious website to access restricted ports on arbitrary servers. The vulnerability is fixed in Apple platforms as of tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and ...

CVE-2022-26700

CVE-2022-26700: A memory corruption issue in WebKit-derived components is addressed. According to the CVE page, processing maliciously crafted web content may lead to arbitrary code execution. Apple specifies fixes in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, and Safa...

CVE-2023-41976

CVE-2023-41976 is a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. Affected products include Apple platforms: iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, and tvOS 17.1. The issue is fixed ...

CVE-2019-8681

CVE-2019-8681 is a memory corruption issue addressed in the WebKit/WebKitGTK stack. The Apple security content indicates it affects WebKit components and is fixed in Apple platforms: iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, and corresponding Windows components (iTunes for Windows...

CVE-2023-40416

CVE-2023-40416 affects Apple ImageIO: processing an image may disclose process memory. Fixed in iOS 17.1 / iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 / iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. The Nessus/OpenVAS entries corroborate the vulnerability family (memory disclosure vi...

CVE-2023-41982

CVE-2023-41982 affects Apple devices where an attacker with physical access can use Siri from a locked device to access sensitive user data. The issue is addressed by restricting options offered on a locked device and is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, and ...

CVE-2019-8559

CVE-2019-8559 is a memory corruption vulnerability associated with WebKit/WebKitGTK4 affecting multiple Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes/iCloud for Windows) and WebKitGTK/WebKitGTK4 deployments. The issue is triggered by processing malicious web content, pote...

CVE-2019-8677

CVE-2019-8677 is described as a set of memory-corruption issues in WebKit/WebKitGTK4 that could allow arbitrary code execution when processing malicious web content. Public advisories link this to WebKitGTK/WebKit components and show remediation via updated WebKitGTK/WebKit versions. In practice,...

CVE-2021-30689

CVE-2021-30689 affects WebKitGTK and WPE WebKit prior to version 2.32.3. The vulnerability is a logic issue that can allow processing of malicious web content to lead to universal cross-site scripting (XSS). Affected products include WebKitGTK and WebKit in various WebKit-based stacks; the issue ...

CVE-2022-22600

CVE-2022-22600 affects Apple platforms: tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The bulletin states a bypass of certain Privacy preferences via a malicious app, due to an issue in permissions logic. The available sources in the initial description confirm the fix w...

CVE-2019-8558

CVE-2019-8558 involves memory corruption in WebKit/WebKitGTK components affecting Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11). The issue arises when processing malicious web content, potentially allowing arbitrary code execut...

CVE-2022-46689

CVE-2022-46689 is a local privilege-escalation race condition in Apple's XNU kernel related to copy-on-write handling. Public sources describe PoCs/exploits (e.g., MacDirtyCow family) that could enable an app to execute arbitrary code with kernel privileges by exploiting a race window in COW oper...

CVE-2024-4558

CVE-2024-4558: Use-after-free in ANGLE within Google Chrome/Chromium's WebKit/ANGLE path allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affects Chrome/Chromium builds prior to version 124.0.6367.155. The issue is addressed in the referenced Chrome update;...

CVE-2021-30749

CVE-2021-30749 is a WebKitGTK/WebKit memory corruption issue that can lead to arbitrary code execution when processing malicious web content. It affects WebKitGTK/WebKit prior to version 2.32.3 and is addressed upstream in 2.32.3; Debian/Arch advisories also enumerate related CVEs in the same Web...

CVE-2019-8611

CVE-2019-8611 refers to multiple memory corruption issues in Apple’s WebKit/related components. The description specifies that processing maliciously crafted web content may lead to arbitrary code execution, and that fixes were implemented in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1...

CVE-2019-8666

CVE-2019-8666 is a WebKit memory corruption vulnerability affecting Apple platforms. The issue is described as memory handling improvements addressing multiple memory corruption flaws, with the impact that processing maliciously crafted web content may lead to arbitrary code execution. Apple’s ad...

CVE-2021-30934

The CVE-2021-30934 entry is valid and has concrete details across connected documents. It concerns WebKit/WebKitGTK family processing malicious web content leading to arbitrary code execution due to a buffer overflow. Affected products include Apple platforms: Safari 15.2, macOS Monterey 12.1, iO...

CVE-2021-36976

CVE-2021-36976 affects libarchive 3.4.1 through 3.5.1 with a use-after-free in copy_string (invoked by do_uncompress_block and process_block). Connected advisories show affected packages across multiple distributions (e.g., Debian libarchive updates to 3.4.3-2+deb11u2; Fedora/libarchive 3.5.3-1; ...

CVE-2023-41997

CVE-2023-41997 affects Apple platforms where the issue is mitigated by code changes that restrict options on a locked device to prevent Siri from leaking data. The public description confirms vulnerable behavior: an attacker with physical access could use Siri to access sensitive user data. The f...

CVE-2023-42857

CVE-2023-42857 describes a privacy issue where private data redaction for log entries was improved. Affected platforms: macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. Root cause: leakage of sensitive user data through logs due to insufficient redaction. Impact: an app may be able to access sensiti...

CVE-2019-8601

CVE-2019-8601 refers to multiple memory corruption issues addressed in Apple’s WebKit-related components. The description indicates that malformed web content could be exploited to achieve arbitrary code execution, due to memory handling problems that were fixed. Affected platforms/derivatives (f...

CVE-2019-8823

CVE-2019-8823 affects WebKitGTK/WebKitGTK4. Affected component: WebKitGTK4, part of WebKit; issue described as memory corruption in WebKit leading to possible arbitrary code execution when processing malicious web content. Public references in Apple advisories (WebKit) list CVE-2019-8823 among We...

CVE-2025-31205

CVE-2025-31205 targets WebKitGTK/WebKit components across multiple platforms. Affected: WebKitGTK/WebKit-based browsers using the GTK toolkit; vulnerability allows a malicious website to exfiltrate data cross-origin. Root cause: cross-origin data leakage via processing/execution paths in web cont...

CVE-2020-11760

CVE-2020-11760 affects OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in ImfRle.cpp (function rleUncompress). OpenEXR releases indicate the fix is to upgrade to v2.4.1. Public references in the connected documents confirm the CVE entry is included among OpenEXR issu...

CVE-2023-41977

CVE-2023-41977 is a Safari-related issue where improved cache handling fixes a vulnerability that could allow a malicious website to reveal browsing history. Affected products/versions (per connected sources): macOS Sonoma 14.1; iOS 16.7.2; iPadOS 16.7.2. Remedy: Apple has addressed the issue in ...

CVE-2024-54658

CVE-2024-54658 is a memory-handling issue in processing web content that can lead to a denial-of-service. The primary public description states the fix is in Apple software: iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, and macOS Sonoma 14.4. The vulnerability is m...

CVE-2019-8689

CVE-2019-8689 pertains to multiple memory corruption issues in Apple’s WebKit/Safari stack that, when processing malicious web content, could lead to arbitrary code execution. The entry is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, a...

CVE-2019-8563

CVE-2019-8563 is a memory corruption issue reported by Apple, addressed as part of WebKit/Apple platform updates. The vulnerability could allow arbitrary code execution when processing maliciously crafted web content. It is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for...

CVE-2020-11765

CVE-2020-11765 concerns OpenEXR prior to 2.4.1, where an off-by-one error in the ImfXdr.h read function used by DwaCompressor::Classifier::Classifier caused an out-of-bounds read. Public disclosures and vendor advisories (OpenEXR/OpenEXR 2.4.1 release notes; GLSA-202107-27; Debian DLA-2358-1) con...

CVE-2023-40413

CVE-2023-40413 affects Apple platforms (iOS 17.1/iPadOS 17.1 and earlier/macOS/macOS Sonoma 14.1 etc.) in the Find My component. The issue is described as an improvement in cache handling that could allow an app to read sensitive location information. The vulnerability is fixed in iOS 17.1/iPadOS...

CVE-2019-8536

CVE-2019-8536 is a memory corruption vulnerability affecting WebKit-based components exposed when processing malicious web content. The issue could lead to arbitrary code execution and is addressed by updates in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud ...

CVE-2019-8673

CVE-2019-8673 is a memory corruption issue in WebKit-related components that can be triggered by processing malicious web content. Public docs link this to WebKit/WebKitGTK families and list iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/Windows components as patched. Upstream a...

CVE-2020-11758

CVE-2020-11758 affects OpenEXR before 2.4.1 via an out-of-bounds read in ImfOptimizedPixelReading.h. Public docs (Debian DLA-2358-1) note potential denial of service and possible arbitrary code execution when processing malformed EXR files; OpenEXR/ImageIO entries reference the same CVE family. R...

CVE-2023-40449

CVE-2023-40449 is an Apple vulnerability where an application may cause a denial-of-service due to an issue in memory handling. The published entry specifies a local attack surface with user interaction required, and the root cause is related to memory handling that could be exploited by a compro...