CVE-2024-23225

CVE-2024-23225 is a memory-corruption vulnerability in Apple’s kernel that could allow an attacker with local access and kernel read/write capabilities to bypass kernel memory protections. The issue is addressed by patches in iOS 16.7.6 / iPadOS 16.7.6 and iOS 17.4 / iPadOS 17.4. Apple’s advisory...

CVE-2024-44308

CVE-2024-44308 affects WebKit-derived components (Apple WebKit in Safari and WebKitGTK/WebKit2GTK for Linux). The issue, caused by improper handling of maliciously crafted web content, can lead to arbitrary code execution. Public details in the Apple advisory cite a fix in Safari 18.1.1, iOS 18.1...

CVE-2023-4738

CVE-2023-4738: Vim/vim prior to 9.0.1848 has a heap-based buffer overflow in vim_regsub_both(). Affected products include vim/vim; root cause is within the Vim regex substitution code. Impact per sources is a heap-based overflow (no explicit exploit details in the documents). Remediation: upgrade...

CVE-2021-22946

CVE-2021-22946 affects curl before 7.82.0 (and within 7.20.0–7.78.0 per description) where the --ssl-reqd option or CURLUSESSL controls could be bypassed if a server crafts a legitimate response, allowing curl to continue without TLS. Connected sources confirm this flaw exists across multiple eco...

CVE-2025-24085

CVE-2025-24085 is a use-after-free in CoreMedia that could allow privilege escalation. It affects Apple platforms (visionOS, iOS, iPadOS, macOS, watchOS, tvOS) and is fixed in the following releases: visionOS 2.3; iOS 18.3; iPadOS 18.3; macOS Sequoia 15.3; watchOS 11.3; tvOS 18.3. The associated ...

CVE-2025-24154

CVE-2025-24154 is an out-of-bounds write that Apple fixed by improving input validation. Affected OS versions include macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, and macOS Sequoia 15.3. The issue could allow an attacker to cause an unexpected system termination...

CVE-2022-40303

CVE-2022-40303 affects libxml2 prior to 2.10.3. When parsing multi‑gigabyte XML with XML_PARSE_HUGE enabled, integer counters can overflow and cause an access at a negative 2GB offset, typically leading to a segmentation fault. Public sources (including libxml2‑focused advisories and AWS ALAS/BSN...

CVE-2025-43413

CVE-2025-43413 describes an access issue whereby a sandboxed app could observe system-wide network connections. Apple fixed this by applying additional sandbox restrictions in multiple platforms and versions: tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7....

CVE-2020-13631

CVE-2020-13631 affects SQLite up to version 3.32.0, where a vulnerability allows renaming a virtual table to the name of one of its shadow tables (related to alter.c and build.c). Connected advisories confirm the issue in SQLite prior to 3.32.0 and note the remediation is to upgrade SQLite to 3.3...

CVE-2023-38592

CVE-2023-38592 affects WebKitGTK/WebKit processing web content. Description indicates a logic issue that could lead to arbitrary code execution. Concrete remediation details in connected docs include distro advisories for WebKitGTK/webkit2gtk upates (e.g., Debian DSA-5468-1; Fedora/upstream packa...

CVE-2020-13630

CVE-2020-13630 affects SQLite prior to 3.32.0, with a use-after-free in ext/fts3/fts3.c (fts3EvalNextRow) related to the snippet feature. Multiple connected advisories (Astra Linux, BSA, AlmaLinux) confirm the issue in SQLite and reference the same function/file. The provided sources do not quant...

CVE-2023-23518

WebKitGTK (WebKit2GTK) has a confirmed memory corruption flaw tracked as CVE-2023-23518 that could lead to arbitrary code execution when processing malicious web content. The issue is fixed in Safari 16.3 and in WebKitGTK updates around version 2.38.x (e.g., WebKitGTK 2.38.5 per ALAS2-2023-2088; ...

CVE-2023-28322

The CVE-2023-28322 information disclosure issue affects curl/libcurl when performing HTTP(S) transfers and using a reused handle that was previously used for PUT and then changed to POST. The flaw arises from curl incorrectly using the read callback (CURLOPT_READFUNCTION) to supply data for POSTF...

CVE-2025-24174

CVE-2025-24174 affects macOS components and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue is described as an access control/privacy bypass that could allow an app to bypass Privacy preferences, with the underlying root cause described as improved checks ...

CVE-2025-24149

CVE-2025-24149 is an out-of-bounds read resolved by Apple through improved bounds checking. Affected products/versions include iPadOS 17.7.4, iOS 18.3; macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3; visionOS 2.3; watchOS 11.3; and tvOS 18.3. The issue could lead to disclosure of u...

CVE-2023-4735

Vim/vim prior to 9.0.1847 is affected by an out-of-bounds write vulnerability (CVE-2023-4735). The provided documents do not specify the exact impact or exploit details. Remediation per the advisories is to upgrade Vim to 9.0.1847 or newer. Monitor for updates from affected vendors/advisories.

CVE-2022-24070

CVE-2022-24070 affects Subversion’s mod_dav_svn, where a use-after-free during path-based authorization lookups can lead to memory corruption and likely denial-of-service (HTTPD worker crash). The affected range is Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive); other Subversion...

CVE-2023-23517

CVE-2023-23517 is a memory corruption vulnerability in WebKitGTK/WebKit that can be triggered by processing malicious web content, potentially allowing arbitrary code execution. The issue is addressed by WebKitGTK/WebKit updates (e.g., WebKitGTK/WebKit fixes referenced in multiple advisories) and...

CVE-2025-31200

CVE-2025-31200 affects Apple’s CoreAudio, specifically the AudioConverterService AAC decoder, where a memory corruption issue can lead to code execution when processing a malicious audio stream. Affected products include iOS, iPadOS, macOS, and related OSes prior to the patch, with fixes implemen...

CVE-2025-6558

CVE-2025-6558 involves insufficient validation of untrusted input in ANGLE and GPU within Google Chrome, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. Connected sources specify Chrome components ANGLE and GPU as affected, with the patch previously shipped i...

CVE-2025-24151

CVE-2025-24151 affects macOS with a memory handling issue that may allow an app to trigger unexpected termination or kernel memory corruption. The vulnerability is addressed by updates: macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. Connected sources corroborate the fixed vers...

CVE-2025-24123

CVE-2025-24123 affects multiple Apple OSes where parsing a file could cause an unexpected app termination. According to the document, the issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS ...

CVE-2021-1844

CVE-2021-1844 is a memory corruption vulnerability in WebKit/WebKitGTK/WebKitGTK-related workflows triggered by processing malicious web content, with potential arbitrary code execution. Affected components include WebKit/WebKitGTK in Apple products (Safari 14.0.3 and iOS/iPadOS/macOS updates) an...

CVE-2024-2004

CVE-2024-2004 affects curl/libcurl: a logic error in protocol selection fails to remove all explicitly disabled protocols, leaving the default protocol set active. This could allow using a disabled protocol in certain requests (e.g., curl --proto -all,-http). Concrete details appear across multip...

CVE-2025-24109

CVE-2025-24109 relates to a downgrade issue that was addressed by adding code-signing restrictions. The NVD entry states the issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, with the impact described as an app potentially accessing sensitive user data. Affected...

CVE-2023-30774

CVE-2023-30774 affects LibTIFF in libtiff: a heap-based buffer overflow caused by TIFFTAG_INKNAMES/ TIFFTAG_NUMBEROFINKS. Reported in MiracleLinux AXSA plugin; Nessus descriptions confirm a heap overflow that could crash the affected TIFF processing. No explicit remediation or patched version is ...

CVE-2022-32208

CVE-2022-32208 affects curl when performing FTP transfers secured by krb5 prior to version 7.84.0. The vulnerability arises from how message verification failures are handled during krb5-secured FTP transfers, enabling a man-in-the-middle to go unnoticed and potentially inject data to the client....

CVE-2020-8037

CVE-2020-8037 affects tcpdump’s ppp decapsulator and can cause unbounded memory allocation, leading to DoS. Public documents corroborate that tcpdump 4.9.3 and later patch levels address this issue by upgrading the tcpdump package (e.g., 4.9.3-3 in some distributions; Ubuntu/Debian updates list 4...

CVE-2023-41074

CVE-2023-41074 is a WebKit-related vulnerability where processing web content may lead to arbitrary code execution. Connected advisories confirm the issue across multiple platforms and ports, notably WebKit-on-Apple ecosystems (Safari/WebKit) and WebKitGTK+-based products. The root cause is descr...

CVE-2023-27932

CVE-2023-27932 affects WebKitGTK/WebKitGTK-based WebKit implementations (notably WebKit2GTK) and is a Same Origin Policy bypass via processing malicious web content. Public advisories in Debian, Fedora, and AlmaLinux confirm this CVE is fixed by updates to webkit2gtk/webkitgtk components (e.g., D...

CVE-2021-22945

Summary: CVE-2021-22945 affects libcurl/curl when sending data to an MQTT server, where in some cases a pointer to freed memory could be reused and freed again. This is a memory-use-after-free/double-free issue in libcurl. What is affected: libcurl/curl (MQTT data transmission scenarios) with vul...

CVE-2023-23499

The CVE-2023-23499 issue is addressed by enabling hardened runtime and is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, tvOS 16.3, iOS 16.3, and iPadOS 16.3. Affects Apple platforms where an app could access user-sensitive data, as stated in multiple sourc...

CVE-2022-0530

CVE-2022-0530 affects the unzip utility. Affected component: unzip (wide-string to local-string conversion) can cause a heap out-of-bounds write, leading to crash or potential code execution when processing crafted zip files. Public details show multiple vendors reporting the issue with similar d...

CVE-2025-24252

CVE-2025-24252 is a use-after-free vulnerability in Apple’s AirPlay ecosystem that has multiple PoCs and public PoCs outlining crash/RCe and sandbox-escape chains. Public materials describe a local-network attacker potentially exploiting mDNS/AirPlay services to trigger remote code execution or s...

CVE-2021-1788

CVE-2021-1788 : A use-after-free in WebKitGTK/WebKit leads to arbitrary code execution when processing malicious web content. Fixes are documented in macOS/iOS/Safari updates (macOS Big Sur 11.2, Security Update 2021-001 Catalina, Mojave; Safari 14.0.3; iOS 14.4; tvOS 14.4; watchOS 7.3), and in W...

CVE-2022-3970

LibTIFF vulnerability CVE-2022-3970 affects TIFFReadRGBATileExt in libtiff, causing an integer overflow and enabling remote impact. The issue is publicly disclosed; remediation is to apply the patch referenced as 227500897dfb07fb7d27f7aa570050e62617e3be (no explicit version). Multiple connected a...

CVE-2022-40304

CVE-2022-40304: libxml2 before 2.10.3 contains invalid XML entity definitions that can corrupt a hash table key, potentially triggering logic errors and, in at least one case, a double-free. Affected library is libxml2; CVSS v3.1 shows base score 7.8 (HIGH) with LOCAL access, high impact. Public ...

CVE-2022-42915

CVE-2022-42915 affects curl. A double-free can occur in curl 7.77.0 and later when using an HTTP proxy for non-HTTP(S) URLs, if the proxy returns a non-200 status and the URL uses schemes such as dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, or telnet. The error/cleanup path may trigger the me...

CVE-2021-1825

CVE-2021-1825 is a WebKit/WebKit-related input validation issue that could enable cross-site scripting when processing malicious web content. Apple’s security content for Safari 14.1 and related WebKit components lists this CVE under WebKit’s input validation and notes it is fixed in Safari 14.1 ...

CVE-2023-27935

CVE-2023-27935 affects macOS components, with the issue described as being fixed by improved bounds checks. A remote attacker may cause an unexpected app termination or arbitrary code execution. Affected versions include macOS Big Sur 11.7.5, Monterey 12.6.4, and Ventura 13.3. The public details ...

CVE-2021-1799

The CVE-2021-1799 entry describes a port redirection issue in WebKitGTK/WebKit allowing a malicious website to access restricted ports on arbitrary servers. Connected advisories confirm this impacts WebKitGTK and WPE WebKit upstream, with fixes implemented in WebKitGTK prior to 2.30.6 (and in ven...

CVE-2025-24115

The CVE-2025-24115 issue is a path-handling vulnerability in macOS that arises from insufficient validation, enabling an app to read files outside its sandbox. Affected platforms are macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. The root cause is a path handling issue address...

CVE-2024-2379

CVE-2024-2379: Affected product is libcurl’s QUIC implementation when built with wolfSSL. The root cause is an error path that, under certain conditions involving unknown/bad cipher or curve, returns OK and skips certificate verification, effectively bypassing TLS certificate validation. This lea...

CVE-2025-43300

CVE-2025-43300 is a critical memory-corruption vulnerability in Apple’s image-processing path (JPEG Lossless in RawCamera.bundle) triggered by a DNG/ TIFF metadata inconsistency. The root cause is a mismatch between TIFF SamplesPerPixel and the JPEG SOF3 component count, causing an out-of-bounds ...

CVE-2024-44309

CVE-2024-44309 concerns a cookie management issue in Apple environments. The root cause is improper state management that can enable cross-site scripting when processing malicious web content. Affected products/versions include Safari 18.1.1, iOS 17.7.2, iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 1...

CVE-2024-54478

CVE-2024-54478 is an out-of-bounds access vulnerability in Apple’s ICU component that affects multiple Apple platforms. The issue arises when processing malicious web content, potentially causing an unexpected process crash. Affected products include iPadOS, iPadOS 18.2, iOS 18.2, visionOS, tvOS,...

CVE-2022-29458

CVE-2022-29458 affects ncurses 6.3 prior to patch 20220416, with an out-of-bounds read in tinfo/read_entry.c (convert_strings) leading to a segmentation fault. Connected sources confirm the issue is tied to the terminfo processor and mention Linux distributions (e.g., Astra Linux, Cloud Foundry) ...

CVE-2021-45444

CVE-2021-45444 affects zsh up to version 5.8.0, where an attacker-controlled command output inside the prompt can trigger code execution due to recursive PROMPT_SUBST expansion (notably via a %F argument). Connected advisories confirm the issue in zsh and state the fix as upgrading to zsh 5.8.1. ...

CVE-2022-32207

CVE-2022-32207 affects curl: when saving cookies, alt-svc and HSTS data, the final rename can widen target file permissions, exposing updates to more users. Affected versions are curl before 7.84.0; remediation is to upgrade to 7.84.0 or newer (as indicated by multiple advisories).

CVE-2023-28321

CVE-2023-28321 affects curl before 8.1.0, where a private wildcard matching function used for TLS SAN wildcard patterns can mis-match IDN hostnames. IDNs are punycode-encoded (starting with xn--), but the curl wildcard check could still accept patterns like x* that should not match, potentially a...