CVE-2019-8536

CVE-2019-8536 is a memory corruption vulnerability affecting WebKit-based components exposed when processing malicious web content. The issue could lead to arbitrary code execution and is addressed by updates in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud ...

CVE-2019-8672

CVE-2019-8672 is a WebKit memory-corruption vulnerability affecting Apple platforms. Apple’s HT210346 notes fixes in iOS 12.4, macOS 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, and related Apple software (iTunes/iCloud for Windows). Description: memory corruption issues addressed with improve...

CVE-2019-8676

CVE-2019-8676 is a WebKit-related vulnerability described as multiple memory corruption issues that could allow arbitrary code execution when processing malicious web content. The referenced advisories indicate fixes in: iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows...

CVE-2019-8808

CVE-2019-8808 refers to memory corruption issues in WebKit-related components that could allow arbitrary code execution when processing malicious web content. Publicly documented fixes target Apple platforms: iOS/iPadOS 13.2, watchOS 6.1, tvOS 13.2, Safari 13.0.3, and iTunes for Windows 12.10.2; ...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2020-9952

CVE-2020-9952 refers to an input validation issue that could enable a cross-site scripting (XSS) attack when processing maliciously crafted web content. The official guidance states this was addressed with improved input validation and is fixed in Apple software releases: iOS 14.0 and iPadOS 14.0...

CVE-2019-8673

CVE-2019-8673 is a memory corruption issue in WebKit-related components that can be triggered by processing malicious web content. Public docs link this to WebKit/WebKitGTK families and list iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/Windows components as patched. Upstream a...

CVE-2020-11764

OpenEXR before 2.4.1 contains an out-of-bounds write in copyIntoFrameBuffer (ImfMisc.cpp), CVE-2020-11764. Amazon Linux 2 ALAS2-2020-1499 confirms the OpenEXR fix and provides updated packages; Red Hat/CentOS advisories (RHSA-2020:4039) also address CVE-2020-11764 among related OpenEXR issues. Re...

CVE-2020-3864

CVE-2020-3864 is a logic issue where a DOM object context may not have had a unique security origin. It is fixed in Apple/software updates across multiple platforms: iCloud for Windows 7.17, iTunes for Windows 12.10.4, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 1...

CVE-2023-42841

CVE-2023-42841: The issue is addressed by improved memory handling and is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, and macOS Ventura 13.6.1. Description states: an app may be able to execute arbitrary code with kernel privileges. This is confirmed by con...

CVE-2019-8544

CVE-2019-8544 is a memory corruption vulnerability addressed by Apple in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, and related Windows/iCloud components. The description states that processing maliciously crafted web content may lead to arbitrary code execution, and the fix was implemented t...

CVE-2019-8671

CVE-2019-8671 is a WebKit memory-corruption issue reported by Apple and addressed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, and iCloud for Windows 7.13/10.6. The advisory indicates that processing malicious web content may lead to arbitrary code execu...

CVE-2019-8679

CVE-2019-8679 is a WebKit-related memory corruption issue publicly documented by Apple and multiple Linux advisories. Apple’s HT210346/HT210351 entries associate CVE-2019-8679 with WebKit and describe fixes for memory corruption in processed web content, mitigating arbitrary code execution. Affec...

CVE-2023-38425

CVE-2023-38425 affects Apple systems (iOS, iPadOS, macOS) where the kernel could be compromised due to a memory handling issue in a component named in Apple’s advisories. The vulnerability could allow an app to execute arbitrary code with kernel privileges, according to the CVE entry. It has been...

CVE-2024-54551

CVE-2024-54551 is a denial-of-service vulnerability in web content processing within WebKit-based components. The connected documents indicate the issue is addressed by memory-handling improvements and fixes in specific Apple platforms: watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, vis...

CVE-2019-8686

CVE-2019-8686 is a memory corruption issue associated with WebKit/WebKitGTK family that Apple and multiple Linux advisories linked to, fixed in Apple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2) and WebKitGTK-based packages (e.g., webkitgtk4 2.28.2 in AL2/CentOS advisories...

CVE-2019-8813

CVE-2019-8813 is a WebKit/WebKit-derived issue classified as a logic vulnerability in state management that can enable universal cross-site scripting when processing malicious web content. The publicly documented fixes indicate the vulnerability is addressed in iOS 13.2, iPadOS 13.2, tvOS 13.2, a...

CVE-2023-40423

CVE-2023-40423 is an Apple vulnerability where improved memory handling fixed an issue that could let an app execute arbitrary code with kernel privileges. Affected/fixed versions per sources: iOS 17.1/iPadOS 17.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1, macOS Sonoma 14.1, and earlier OS ver...

CVE-2023-41254

CVE-2023-41254 is a privacy-related issue in Apple platforms where log entries could reveal sensitive user data. It affects iOS/iPadOS 16.7.2 and 17.1, watchOS 10.1, macOS Ventura 13.6.1 and Sonoma 14.1. The root cause is improper private data redaction in logs. The issue is fixed in iOS/iPadOS 1...

CVE-2019-8814

CVE-2019-8814 involves multiple memory corruption issues in WebKit that may be triggered by processing malicious web content, potentially enabling arbitrary code execution. Affected: WebKit/WebKitGTK/WebKit processes across Apple platforms (Safari on iOS/iPadOS/tvOS/macOS) and related WebKitGTK/W...

CVE-2021-30799

CVE-2021-30799 affects WebKitGTK/WebKit, with multiple memory corruption issues in WebKitGTK/WPE WebKit before 2.32.3 that may lead to arbitrary code execution or memory corruption when processing malicious web content. Upstream fix: WebKitGTK 2.32.3. Public advisories (Arch Linux ASA-202107-67, ...

CVE-2019-8518

CVE-2019-8518 is a WebKit memory corruption issue fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The vulnerability allows arbitrary code execution when processing malicious web content. Exploit discussion notes an out-of-bounds acce...

CVE-2021-30797

CVE-2021-30797 is a WebKit/WebKitGTK/WebKit2GTK-related vulnerability affecting WebKit-based components. In Arch Linux advisories ASA-202107-67/68, CVE-2021-30797 is listed among multiple issues in webkit2gtk that could allow arbitrary code execution when processing malicious web content, with pa...

CVE-2023-42849

CVE-2023-42849 affects Apple platforms (iOS/iPadOS 17.1/16.7.2; macOS Monterey 12.7.1, Ventura/Sonoma 13.6.1/14.1; watchOS 10.1) where the issue concerns memory handling. The root cause allows an attacker who already has kernel code execution to bypass kernel memory mitigations, potentially eleva...

CVE-2019-8535

CVE-2019-8535 is a WebKitGTK/WebKit-related memory corruption issue (memory handling/state management) that affected WebKitGTK4. The connected advisory ALAS2-2020-1563 lists CVE-2019-8535 among the WebKitGTK-related CVEs and notes a fix in the upstream WebKitGTK4 release (2.28.2) with updated mem...

CVE-2019-8681

CVE-2019-8681 is a memory corruption issue addressed in the WebKit/WebKitGTK stack. The Apple security content indicates it affects WebKit components and is fixed in Apple platforms: iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, and corresponding Windows components (iTunes for Windows...

CVE-2023-41997

CVE-2023-41997 affects Apple platforms where the issue is mitigated by code changes that restrict options on a locked device to prevent Siri from leaking data. The public description confirms vulnerable behavior: an attacker with physical access could use Siri to access sensitive user data. The f...

CVE-2019-8558

CVE-2019-8558 involves memory corruption in WebKit/WebKitGTK components affecting Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11). The issue arises when processing malicious web content, potentially allowing arbitrary code execut...

CVE-2021-30818

CVE-2021-30818 is a type confusion vulnerability in WebKitGTK/WebKit, leading to arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms (iOS 14.8+, iPadOS 14.8+, Safari 15+, watchOS 8, tvOS 15) and is correlated with WebKitGTK/WebKit fixes in Linux p...

CVE-2022-22600

CVE-2022-22600 affects Apple platforms: tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. The bulletin states a bypass of certain Privacy preferences via a malicious app, due to an issue in permissions logic. The available sources in the initial description confirm the fix w...

CVE-2023-40416

CVE-2023-40416 affects Apple ImageIO: processing an image may disclose process memory. Fixed in iOS 17.1 / iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 / iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. The Nessus/OpenVAS entries corroborate the vulnerability family (memory disclosure vi...

CVE-2023-41976

CVE-2023-41976 is a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. Affected products include Apple platforms: iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, and tvOS 17.1. The issue is fixed ...

CVE-2024-4558

CVE-2024-4558: Use-after-free in ANGLE within Google Chrome/Chromium's WebKit/ANGLE path allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affects Chrome/Chromium builds prior to version 124.0.6367.155. The issue is addressed in the referenced Chrome update;...

CVE-2023-41982

CVE-2023-41982 affects Apple devices where an attacker with physical access can use Siri from a locked device to access sensitive user data. The issue is addressed by restricting options offered on a locked device and is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, and ...

CVE-2019-8559

CVE-2019-8559 is a memory corruption vulnerability associated with WebKit/WebKitGTK4 affecting multiple Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes/iCloud for Windows) and WebKitGTK/WebKitGTK4 deployments. The issue is triggered by processing malicious web content, pote...

CVE-2019-8677

CVE-2019-8677 is described as a set of memory-corruption issues in WebKit/WebKitGTK4 that could allow arbitrary code execution when processing malicious web content. Public advisories link this to WebKitGTK/WebKit components and show remediation via updated WebKitGTK/WebKit versions. In practice,...

CVE-2022-46689

CVE-2022-46689 is a local privilege-escalation race condition in Apple's XNU kernel related to copy-on-write handling. Public sources describe PoCs/exploits (e.g., MacDirtyCow family) that could enable an app to execute arbitrary code with kernel privileges by exploiting a race window in COW oper...

CVE-2019-8595

CVE-2019-8595 is a memory corruption issue addressed across Apple platforms and WebKitGTK/WebKit ecosystems. According to the connected advisories, it affects processing malicious web content and could lead to arbitrary code execution. Affected fixes are in Apple: iOS 12.3, macOS Mojave 10.14.5, ...

CVE-2021-30934

The CVE-2021-30934 entry is valid and has concrete details across connected documents. It concerns WebKit/WebKitGTK family processing malicious web content leading to arbitrary code execution due to a buffer overflow. Affected products include Apple platforms: Safari 15.2, macOS Monterey 12.1, iO...

CVE-2021-36976

CVE-2021-36976 affects libarchive 3.4.1 through 3.5.1 with a use-after-free in copy_string (invoked by do_uncompress_block and process_block). Connected advisories show affected packages across multiple distributions (e.g., Debian libarchive updates to 3.4.3-2+deb11u2; Fedora/libarchive 3.5.3-1; ...

CVE-2019-8611

CVE-2019-8611 refers to multiple memory corruption issues in Apple’s WebKit/related components. The description specifies that processing maliciously crafted web content may lead to arbitrary code execution, and that fixes were implemented in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1...

CVE-2019-8644

CVE-2019-8644 is a memory-corruption family in WebKit-derived components that Apple patched across multiple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/iCloud for Windows). The issue enables arbitrary code execution when processing malicious web content. Remediatio...

CVE-2019-8666

CVE-2019-8666 is a WebKit memory corruption vulnerability affecting Apple platforms. The issue is described as memory handling improvements addressing multiple memory corruption flaws, with the impact that processing maliciously crafted web content may lead to arbitrary code execution. Apple’s ad...

CVE-2024-54658

CVE-2024-54658 is a memory-handling issue in processing web content that can lead to a denial-of-service. The primary public description states the fix is in Apple software: iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, and macOS Sonoma 14.4. The vulnerability is m...

CVE-2019-8823

CVE-2019-8823 affects WebKitGTK/WebKitGTK4. Affected component: WebKitGTK4, part of WebKit; issue described as memory corruption in WebKit leading to possible arbitrary code execution when processing malicious web content. Public references in Apple advisories (WebKit) list CVE-2019-8823 among We...

CVE-2023-42857

CVE-2023-42857 describes a privacy issue where private data redaction for log entries was improved. Affected platforms: macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. Root cause: leakage of sensitive user data through logs due to insufficient redaction. Impact: an app may be able to access sensiti...

CVE-2025-31205

CVE-2025-31205 targets WebKitGTK/WebKit components across multiple platforms. Affected: WebKitGTK/WebKit-based browsers using the GTK toolkit; vulnerability allows a malicious website to exfiltrate data cross-origin. Root cause: cross-origin data leakage via processing/execution paths in web cont...

CVE-2019-8563

CVE-2019-8563 is a memory corruption issue reported by Apple, addressed as part of WebKit/Apple platform updates. The vulnerability could allow arbitrary code execution when processing maliciously crafted web content. It is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for...

CVE-2020-11760

CVE-2020-11760 affects OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in ImfRle.cpp (function rleUncompress). OpenEXR releases indicate the fix is to upgrade to v2.4.1. Public references in the connected documents confirm the CVE entry is included among OpenEXR issu...

CVE-2023-41977

CVE-2023-41977 is a Safari-related issue where improved cache handling fixes a vulnerability that could allow a malicious website to reveal browsing history. Affected products/versions (per connected sources): macOS Sonoma 14.1; iOS 16.7.2; iPadOS 16.7.2. Remedy: Apple has addressed the issue in ...