CVE-2024-44210

CVE-2024-44210 is a macOS Sequoia vulnerability affecting StorageKit where an app may be able to access user-sensitive data due to insufficient permissions checks. The issue is fixed in macOS Sequoia 15.1. Affected product context from connected docs confirms the CVE is addressed by an OS update;...

CVE-2025-31201

CVE-2025-31201 is an Apple vulnerability that enables an attacker with arbitrary read/write capability to bypass Pointer Authentication. The issue is tied to the RPAC path and is fixed in iOS/iPadOS 18.4.1, tvOS 18.4.1, visionOS 2.4.1, and macOS Sequoia 15.4.1. Public records note high severity (...

CVE-2019-20838

CVE-2019-20838 is a PCRE/PCRE2 vulnerability where libpcre had a subject buffer over-read during JIT compilation in non-UTF mode when the pattern uses \X or \R with more than one fixed quantifier. Affected versions include PCRE up to 8.43; remediation is to upgrade to a patched PCRE (e.g., 8.43+;...

CVE-2023-32418

CVE-2023-32418 is a macOS/Apple vulnerability where processing a file could cause an unexpected app termination or arbitrary code execution. The issue was addressed with improved checks and is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9. Public references in the d...

CVE-2023-38410

CVE-2023-38410 is an Apple kernel privilege-elevation issue that Apple fixed via updated checks. Affected platforms include iOS 16.6/iPadOS 16.6 and macOS Ventura 13.5. The issue could allow a local attacker with low privileges to elevate to high/root privileges. The mitigation is to upgrade to t...

CVE-2023-38424

CVE-2023-38424 affects Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). The issue stems from improved memory handling and may allow an app to execute arbitrary code with kernel privileges. Impact is described as local, with user interaction required for exploitation; CVSS notes high i...

CVE-2023-36862

CVE-2023-36862 describes a downgrade issue in Intel-based macOS where an app could determine a user’s current location. In the connected CNVD entry, the vulnerability is framed as an Apple macOS Ventura information-disclosure flaw that could reveal location, aligning with the NVD description. The...

CVE-2023-38593

CVE-2023-38593 is a logic-issue vulnerability addressed by Apple in updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, and watchOS 9.6. The root cause is described as a logic issue with improved checks, and the impact noted is the potential for an app...

CVE-2022-22639

Technical details for CVE-2022-22639 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-30749

CVE-2021-30749 is a WebKitGTK/WebKit memory corruption issue that can lead to arbitrary code execution when processing malicious web content. It affects WebKitGTK/WebKit prior to version 2.32.3 and is addressed upstream in 2.32.3; Debian/Arch advisories also enumerate related CVEs in the same Web...

CVE-2021-30952

CVE-2021-30952 is an Apple WebKit/WebKitGTK-affected integer overflow in processing malicious web content that can lead to arbitrary code execution. The issue is addressed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, iPadOS 15.2, and watchOS 8.3, with fixes via input validation impro...

CVE-2023-38259

CVE-2023-38259 is described in the connected documents as a macOS logic issue where an app may be able to access user-sensitive data. The vulnerability is stated to be fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9. The sources consistently frame the issue as an inte...

CVE-2021-30689

CVE-2021-30689 affects WebKitGTK and WPE WebKit prior to version 2.32.3. The vulnerability is a logic issue that can allow processing of malicious web content to lead to universal cross-site scripting (XSS). Affected products include WebKitGTK and WebKit in various WebKit-based stacks; the issue ...

CVE-2023-32381

CVE-2023-32381 describes a use‑after‑free vulnerability that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in multiple Apple OS updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5; iOS 16.6 and iPadOS 16.6; tvOS 16.6; watchOS 9.6. Att...

CVE-2023-38403

CVE-2023-38403 affects iperf3 builds prior to 3.14 (versions < 3.14). The vulnerability arises from a memory/length handling issue that can cause an integer overflow and heap corruption, with the potential for crash or arbitrary code execution as described in the reports. Exploitation status i...

CVE-2022-0318

CVE-2022-0318 affects Vim and is described in connected bulletins as a Heap-based Buffer Overflow in Vim prior to 8.2. Debian’s DLA-3204-1 notes the Vim fix as part of a security update for Vim 2:8.1.0875-5+deb10u4, addressing CVE-2022-0318 among others. AstraLinux bulletin reiterates the Vim hea...

CVE-2023-38258

CVE-2023-38258 concerns macOS: processing a 3D model may disclose process memory. The issue was addressed with improved checks and is reported as fixed in macOS Ventura 13.5 and macOS Monterey 12.6.8. Affected components include the Model I/O subsystem responsible for 3D model handling, with memo...

CVE-2023-42844

CVE-2023-42844 affects macOS, with the issue arising from improper handling of symlinks during resolution. The vulnerability could allow a website to access sensitive user data when resolving symlinks. Affected products/versions: macOS Ventura 13.6.1, macOS Monterey 12.7.1, and macOS Sonoma 14.1....

CVE-2022-26700

CVE-2022-26700: A memory corruption issue in WebKit-derived components is addressed. According to the CVE page, processing maliciously crafted web content may lead to arbitrary code execution. Apple specifies fixes in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, and Safa...

CVE-2025-24106

CVE-2025-24106 affects macOS. The issue is described as a parsing problem that may lead to an unexpected app termination. It has been addressed with fixes in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. According to NVD metrics, the CVSSv3.1 base score is 5.5 (MEDIUM) with a...

CVE-2021-30758

CVE-2021-30758 describes a type confusion issue in WebKit that could allow arbitrary code execution when processing malicious web content. The initial description ties the vulnerability to Apple products and fixes in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. Connect...

CVE-2023-32364

CVE-2023-32364 affects macOS Ventura prior to 13.5; a logic issue could allow a sandboxed process to bypass sandbox restrictions. Apple fixed this with the macOS Ventura 13.5 update. The NVD entry lists a local attack vector, no privileges required, with user interaction required, and high impact...

CVE-2023-38261

CVE-2023-38261 affects Apple devices (iOS, iPadOS, macOS) with a kernel-privilege arbitrary code execution possibility. The description states the issue was mitigated by improved memory handling and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The available connected documents corro...

CVE-2023-40447

CVE-2023-40447 is a WebKit-related vulnerability that could allow arbitrary code execution when processing web content. The weakness is addressed in Safari 17.1, iOS 17.1/iPadOS 17.1, watchOS 10.1, macOS Sonoma 14.1, macOS Ventura 13.6.1, iOS 16.7.2/iPadOS 16.7.2, macOS Monterey 12.7.1, and relat...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2021-4193

CVE-2021-4193 is a Vim vulnerability described as an Out-of-bounds Read. Connected sources confirm Vim as affected and indicate fixes via Linux/Ubuntu advisories and vendor bulletins. Astra Linux explicitly names a Vim issue (vim) in its security bulletin, while Cloud Foundry’s USN-6026-1 lists V...

CVE-2023-38608

CVE-2023-38608 is an Apple macOS Ventura 13.5 vulnerability. Connected sources indicate the issue is a local-information-disclosure flaw in which an app could access user-sensitive data due to insufficient permissions checks. Apple’s advisory (HT213843) and recurring references (Voice Memos entry...

CVE-2023-41072

CVE-2023-41072 concerns a privacy issue addressed by Apple: improved private data redaction for log entries. Affected products include macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. The issue could allow an app to access sensitive user data due to insufficient redaction in logs. The NVD entry mirro...

CVE-2023-38602

CVE-2023-38602 is a local permissions issue in macOS where an app may modify protected parts of the file system. Affected versions include macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9. Root cause: insufficient restrictions allowing access to protected filesystem areas. Miti...

CVE-2020-36229

CVE-2020-36229 affects OpenLDAP prior to 2.4.57, where a flaw in ldap_X509dn2bv causes a slapd crash during X.509 DN parsing in ad_keystring, leading to denial of service. Public details confirm the vulnerability, its root cause in OpenLDAP’s X.509 DN parsing path, and that upgrading to OpenLDAP ...

CVE-2023-38564

CVE-2023-38564 affects Apple macOS Ventura, fixed in macOS Ventura 13.5. The issue allowed an app to modify protected parts of the file system due to improved checks. Attack vector and exploit details are not provided in the connected documents; the primary remediation is applying the macOS Ventu...

CVE-2023-38425

CVE-2023-38425 affects Apple systems (iOS, iPadOS, macOS) where the kernel could be compromised due to a memory handling issue in a component named in Apple’s advisories. The vulnerability could allow an app to execute arbitrary code with kernel privileges, according to the CVE entry. It has been...

CVE-2023-42841

CVE-2023-42841: The issue is addressed by improved memory handling and is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, and macOS Ventura 13.6.1. Description states: an app may be able to execute arbitrary code with kernel privileges. This is confirmed by con...

CVE-2023-42845

CVE-2023-42845 is an authentication issue in Apple platforms where Photos in the Hidden Photos Album could be viewed without authentication. The vulnerability is addressed by improved state management and is fixed in macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. No exploitation details are provid...

CVE-2024-54551

CVE-2024-54551 is a denial-of-service vulnerability in web content processing within WebKit-based components. The connected documents indicate the issue is addressed by memory-handling improvements and fixes in specific Apple platforms: watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, vis...

CVE-2021-30799

CVE-2021-30799 affects WebKitGTK/WebKit, with multiple memory corruption issues in WebKitGTK/WPE WebKit before 2.32.3 that may lead to arbitrary code execution or memory corruption when processing malicious web content. Upstream fix: WebKitGTK 2.32.3. Public advisories (Arch Linux ASA-202107-67, ...

CVE-2023-40423

CVE-2023-40423 is an Apple vulnerability where improved memory handling fixed an issue that could let an app execute arbitrary code with kernel privileges. Affected/fixed versions per sources: iOS 17.1/iPadOS 17.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1, macOS Sonoma 14.1, and earlier OS ver...

CVE-2023-41254

CVE-2023-41254 is a privacy-related issue in Apple platforms where log entries could reveal sensitive user data. It affects iOS/iPadOS 16.7.2 and 17.1, watchOS 10.1, macOS Ventura 13.6.1 and Sonoma 14.1. The root cause is improper private data redaction in logs. The issue is fixed in iOS/iPadOS 1...

CVE-2023-42931

CVE-2023-42931 is an LPE in macOS where a process may gain admin/root privileges without authentication. Public details confirm a root-privilege path via improper handling of permissions, with fixed versions: macOS Monterey 12.7.2, macOS Ventura 13.6.3, macOS Sonoma 14.2. Exploitation details in ...

CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...

CVE-2022-46689

CVE-2022-46689 is a local privilege-escalation race condition in Apple's XNU kernel related to copy-on-write handling. Public sources describe PoCs/exploits (e.g., MacDirtyCow family) that could enable an app to execute arbitrary code with kernel privileges by exploiting a race window in COW oper...

CVE-2023-42861

CVE-2023-42861 affects macOS (Login Window) with a logic issue that allowed unlocking another standard user’s locked screen on the same Mac. The vulnerability is addressed in macOS Sonoma 14.1, per Red Hat/NVD/NCSC Apple advisories in the connected documents. Practical impact is limited to scenar...

CVE-2021-30797

CVE-2021-30797 is a WebKit/WebKitGTK/WebKit2GTK-related vulnerability affecting WebKit-based components. In Arch Linux advisories ASA-202107-67/68, CVE-2021-30797 is listed among multiple issues in webkit2gtk that could allow arbitrary code execution when processing malicious web content, with pa...

CVE-2021-30818

CVE-2021-30818 is a type confusion vulnerability in WebKitGTK/WebKit, leading to arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms (iOS 14.8+, iPadOS 14.8+, Safari 15+, watchOS 8, tvOS 15) and is correlated with WebKitGTK/WebKit fixes in Linux p...

CVE-2023-42849

CVE-2023-42849 affects Apple platforms (iOS/iPadOS 17.1/16.7.2; macOS Monterey 12.7.1, Ventura/Sonoma 13.6.1/14.1; watchOS 10.1) where the issue concerns memory handling. The root cause allows an attacker who already has kernel code execution to bypass kernel memory mitigations, potentially eleva...

CVE-2025-24093

CVE-2025-24093 is a macOS sandbox/permissions issue where an app may access removable volumes without user consent. The issue affects macOS Ventura 13.7.3 and macOS Sonoma 14.7.3 and is classified with a high impact (C/H/I/A) and critical base score (9.8) in CVSS 3.1. The root cause is a permissi...

CVE-2023-41077

The CVE-2023-41077 entry affects macOS, with the explicit issue described as: "An app may be able to access protected user data". Connected sources confirm the vulnerable component as part of macOS imaging/handling stack (as noted in the context of ImageIO and related Apple advisories) and state ...

CVE-2023-42856

CVE-2023-42856 affects macOS (Sonoma 14.1, Monterey 12.7.1, Ventura 13.6.1) where processing a file may lead to unexpected app termination or arbitrary code execution. The issue was addressed with improved memory handling. No further technical specifics are provided in the documents beyond the af...

CVE-2024-4558

CVE-2024-4558: Use-after-free in ANGLE within Google Chrome/Chromium's WebKit/ANGLE path allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affects Chrome/Chromium builds prior to version 124.0.6367.155. The issue is addressed in the referenced Chrome update;...

CVE-2022-0685

CVE-2022-0685 affects Vim in the Vim/Vim GitHub repo prior to 8.2.4418, due to an out-of-range pointer offset that enables a heap-based overflow when processing certain indentation-related data. Reports from Astra Linux, Cloud Foundry, Debian/Ubuntu advisories, and Apple security content confirm ...