CVE-2023-28198

CVE-2023-28198: A use-after-free in WebKit processing web content was fixed. Affected: Apple platforms (iOS/iPadOS/macOS) as per the description. Impact stated: arbitrary code execution if exploited via processing web content. Root cause: memory management/use-after-free vulnerability. Remediatio...

CVE-2019-7292

CVE-2019-7292 involves a validation issue that could lead to disclosure of process memory when processing malicious web content. Public references in the provided documents indicate fixes in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The...

CVE-2022-42817

Summary of CVE-2022-42817 (Apple ecosystem) : A logic issue affecting Safari/WebKit on Apple systems could allow leakage of sensitive data when visiting a malicious website. Root cause described as improved state management. Fixed in software updates: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iP...

CVE-2020-9947

CVE-2020-9947 is a use-after-free vulnerability in memory management related to WebKit/Safari on Apple platforms. The advisory states that processing malicious web content may lead to arbitrary code execution. Fixed in watchOS 7.0, iOS 14.0 / iPadOS 14.0, tvOS 14.0, Safari 14.0, and corresponding...

CVE-2022-22590

CVE-2022-22590 is a use-after-free in WebKit/WebKitGTK (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Affected lines in connected docs indicate WebKitGTK/WebKit implementations and that Apple fixed the issue in iOS 15.3/iPadOS 15.3/watchOS 8.4/...

CVE-2022-22628

CVE-2022-22628 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. Connected advisories confirm exploitation potential in WebKitGTK/WebKit2GTK across Linux distributions and related platforms. Mitigations document...

CVE-2022-22624

CVE-2022-22624 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. The CVE is fixed in platforms referenced in the connected docs (e.g., macOS Safari upgrades; WebKitGTK/WebKit2GTK updates in Debian, AlmaLinux adv...

CVE-2023-37285

CVE-2023-37285 is an out-of-bounds read vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges. It is fixed in iOS/iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. Exploitation status and in-the-wild detai...

CVE-2017-2518

CVE-2017-2518 is an SQLite-related vulnerability affecting Apple devices (iOS < 10.3.2; macOS < 10.12.5; tvOS < 10.2.1; watchOS

CVE-2022-26981

Liblouis up to version 3.21.0 is affected by a buffer overflow in compilePassOpcode within compileTranslationTable.c (indirectly via tools/lou_checktable.c). The issue lies in Liblouis 3.21.0 and earlier, with the vulnerable code path being invoked during translation table compilation. The effect...

CVE-2024-44192

CVE-2024-44192 affects WebKitGTK/WebKitGTK4 (webkitgtk and webkitgtk4). The issue is described as processing maliciously crafted web content may lead to an unexpected process crash. Public reports in connected docs confirm Debian LTS (DLA-4218-1) fix WebKitGTK 2.48.3-1~deb11u1, and Amazon Linux/A...

CVE-2021-30884

CVE-2021-30884 relates to WebKit-based rendering components (notably WebKitGTK/WebKit on embedded platforms) where an issue in CSS compositing could allow a malicious website to reveal browsing history. The root cause is described as limitations or restrictions on CSS compositing. The vulnerabili...

CVE-2022-26762

CVE-2022-26762 is a memory corruption issue addressed by macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges via a local vector. Affected components are not explicitly enumerated in the provided documents beyond the ...

CVE-2022-22589

CVE-2022-22589 is a validation issue in WebKit/WebKitGTK where processing a maliciously crafted mail message could lead to running arbitrary JavaScript. The trusted component is WebKit/WebKitGTK in Apple platforms (iOS, iPadOS, watchOS, tvOS, macOS Monterey 12.2+; Safari 15.3) and WebKitGTK for L...

CVE-2024-23286

CVE-2024-23286 concerns a buffer overflow fix tied to memory handling in Apple platforms. Affected components/versions (as stated): macOS Monterey 12.7.4; macOS Ventura 13.6.5; macOS Sonoma 14.4; visionOS 1.1; iOS 17.4 and iPadOS 17.4; watchOS 10.4; iOS 16.7.6 and iPadOS 16.7.6; tvOS 17.4. Underl...

CVE-2019-7285

CVE-2019-7285 technical details are not publicly provided in the supplied connected documents. Sources mention a use-after-free memory issue fixed in iOS 12.2 and related products, but root-cause, affected versions, or precise exploit info are not given here. Monitor for updates.

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2025-24213

CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...

CVE-2022-26716

CVE-2022-26716 is a memory corruption vulnerability in WebKitGTK/WebKit exposure that could allow arbitrary code execution when processing malicious web content. Public records in connected advisories (AlmaLinux ALAS2-2023-2088 and ALMA 2022:7704/8054) confirm fixes in WebKitGTK/WebKitGTK3/4 pack...

CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2018-4162

CVE-2018-4162 affects Apple WebKit in multiple OS components (iOS before 11.3, Safari before 11.1, iCloud/iTunes on Windows, tvOS before 11.3, watchOS before 4.3). The issue enables remote code execution or memory-corruption–driven crashes via a crafted website, with WebKit memory-corruption as t...

CVE-2018-4261

CVE-2018-4261 involves multiple memory corruption issues in Apple’s WebKit/Safari stack. Apple addressed these with improved memory handling. Affected products/versions: iOS < 11.4.1, tvOS < 11.4.1, Safari < 11.1.2, iTunes for Windows < 12.8, iCloud for Windows

CVE-2022-26765

CVE-2022-26765 is a kernel-level race condition that could let a local attacker with arbitrary read/write bypass Pointer Authentication. Apple security updates fix it across multiple OSes: watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The connected Apple advisories expli...

CVE-2018-4233

CVE-2018-4233 concerns a memory corruption/remote code execution bug in Apple’s WebKit (Safari/WebKit engine). The issue arises from a type confusion in the JavaScript JIT, notably involving the Proxy object, allowing an attacker to craft a page that triggers code execution. Affected products inc...

CVE-2020-11759

CVE-2020-11759 affects the OpenEXR open-source image library. The issue arises from integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, allowing an attacker to write to an out-of-bounds pointer in affected builds prior to 2.4.1. The OpenEXR pro...

CVE-2025-24162

CVE-2025-24162 is linked to WebKitGTK/WebKit-derived components in multiple platforms. Connected sources indicate the root cause is improved state management, addressing processing maliciously crafted web content that previously could cause an unexpected process crash. Affected products include v...

CVE-2019-6229

CVE-2019-6229 is a WebKit-related logic issue fixed by Apple in multiple platforms. The vulnerability allowed processing of malicious web content to trigger universal cross-site scripting. Affected/affected-vector details in connected docs show that the issue was mitigated by updates: iOS 12.1.3,...

CVE-2025-24209

CVE-2025-24209 is a WebKitGTK/WebKit-related vulnerability where processing maliciously crafted web content could cause an unexpected process crash due to a buffer/ memory handling issue. The issue affects webkitgtk/webkit2gtk, and multiple Linux distributions have assigned advisories to fix it (...

CVE-2023-23496

CVE-2023-23496 affects Apple Safari/WebKit components; exploitation arises from processing maliciously crafted web content, leading to arbitrary code execution. Publicly documented impact includes macOS Ventura 13.2, macOS Monterey Big Sur/Big Sur? /, iOS 15.7.2 / 16.3, iPadOS 15.7.2 / 16.3, watc...

CVE-2016-1839

CVE-2016-1839 involves libxml2 where the xmlDictAddString function in dict.c can cause a heap-based buffer over-read, leading to a denial of service. The issue affects libxml2 up to version 2.9.4 (as used in Apple iOS, macOS, tvOS, watchOS). A later linked entry (CVE-2017-9050) confirms this was ...

CVE-2018-4270

CVE-2018-4270 is a WebKit/WebKit2GTK memory corruption vulnerability. The public description indicates a memory corruption issue addressed with improved memory handling affecting multiple Apple components: iOS prior to 11.4.1, tvOS prior to 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Wi...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2018-4407

CVE-2018-4407 is grounded in a heap-based memory corruption in Apple XNU’s AWDL path. The bug arises in IO80211AWDLPeer::parseAwdlSyncTreeTLV: TLV type 0x14 (SyncTree TLV) can overflow the 60-byte sync_tree_macs buffer into the adjacent heap, due to the TLV length being capped at 1024 but copied ...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...

CVE-2023-32393

CVE-2023-32393 is a WebKitGTK/WebKit family memory-handling issue where processing web content could lead to arbitrary code execution. The vulnerability is addressed by Apple (watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and is reflected in multiple advisories/NESUS plugins ...

CVE-2026-64747

CVE-2026-64747 is a buffer overflow vulnerability fixed by improved size validation. It affects Apple platforms including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue may allow an app to execute arbitrary code ...

CVE-2023-40403

CVE-2023-40403 involves libxslt and is described as an information disclosure through processing web content, mitigated by improved memory handling. The initial entry states fixes in macOS Ventura 13.6, tvOS 17, iOS 16.7/iPadOS 16.7, iOS 17/iPadOS 17, macOS Monterey 12.7, macOS Sonoma 14, and wat...

CVE-2019-8515

CVE-2019-8515 concerns a cross-origin issue in the WebKit fetch API. The vulnerability could allow disclosure of sensitive user information when processing malicious web content. Apple’s advisories fix it in iOS 12.2, tvOS 12.2, Safari 12.1 for Windows, and iCloud for Windows 7.11; iTunes 12.9.4 ...

CVE-2022-22677

CVE-2022-22677 describes a logic issue in the handling of concurrent media (WebKit/WebRTC) that could interrupt video self-preview when a phone call is answered. Affected software is Apple platforms implementing WebKit/WebRTC (notably macOS Monterey and iOS/iPadOS in the 12.4/15.5 family). The ro...

CVE-2022-32784

CVE-2022-32784 affects Apple Safari/WebKit; the issue was addressed with improved UI handling and is fixed in Safari 15.6, iOS 15.6, and iPadOS 15.6. The description indicates that visiting a maliciously crafted website could leak sensitive data. The connected documents corroborate Safari/iOS/iPa...

CVE-2024-27834

CVE-2024-27834 is a WebKit-related vulnerability where an attacker with arbitrary read/write capability may bypass Pointer Authentication. The issue is identified across WebKitGTK/WebKit2GTK deployments and is addressed by updates across multiple ecosystems: Apple platforms: fixed in iOS 17.5/iPa...

CVE-2018-4372

CVE-2018-4372 covers multiple memory corruption issues addressed in WebKit/Safari components. Affected products/versions include iOS prior to 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8. Root cause: memory handling weaknesses leading to memory corruption...

CVE-2018-4386

CVE-2018-4386 is a memory corruption issue affecting Apple platforms prior to the listed updates. Publicly referenced in Apple advisories for iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, and iCloud for Windows 7.8, the vulnerability is described as multiple memory corruption is...

CVE-2019-6212

CVE-2019-6212 involves multiple memory corruption issues in WebKit-related components. Processing malicious web content could lead to arbitrary code execution. Apple fixed these issues in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, and iCloud for Windows 7.10. The descripti...

CVE-2022-26719

CVE-2022-26719 is a memory corruption vulnerability in WebKitGTK/WebKit. The Apple advisory states that processing malicious web content may lead to arbitrary code execution and that fixes are applied in macOS Monterey 12.4, iOS 15.5/iPadOS 15.5, tvOS 15.5, watchOS 8.6, and Safari 15.5. Related a...

CVE-2025-24264

CVE-2025-24264 affects WebKitGTK/WebKitGTK4: processing malicious web content may cause an unexpected crash in Safari; fixed in Apple platforms (visionOS 2.4, Safari 18.4, etc.) and in WebKitGTK packages across distros (Debian: webkit2gtk 2.48.x; Fedora/Amazon Linux advisories) by upgrading to pa...

CVE-2017-13861

CVE-2017-13861 is an IOSurface/IOKit related bug affecting iOS <11.2, tvOS <11.2, watchOS

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2023-23524

The CVE-2023-23524 issue is a denial-of-service vulnerability caused by improper input validation when processing a certificate. Affected Apple platforms include tvOS 16.3.2, iOS 16.3.1 / iPadOS 16.3.1, watchOS 9.3.1, and macOS Ventura 13.2.1. The root cause is improved input validation in the so...

CVE-2025-24216

CVE-2025-24216 is an Apple WebKit vulnerability: processing malicious web content may cause an unexpected Safari crash. Public records indicate fixes in visionOS 2.4, tvOS 18.4, iPadOS 18.4, iOS 18.4, macOS Sequoia 15.4, and Safari 18.4. The connected documents confirm this CVE within the WebKit/...