CVE-2023-32429

Technical details about CVE-2023-32429 are not provided in the connected documents. Available info mentions macOS Ventura 13.5 fix and privacy-preference bypass, but there are no specifics on affected components, root cause, vectors, or remediation beyond the OS update.

CVE-2023-40416

CVE-2023-40416 affects Apple ImageIO: processing an image may disclose process memory. Fixed in iOS 17.1 / iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 / iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. The Nessus/OpenVAS entries corroborate the vulnerability family (memory disclosure vi...

CVE-2023-41976

CVE-2023-41976 is a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. Affected products include Apple platforms: iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, and tvOS 17.1. The issue is fixed ...

CVE-2024-4558

CVE-2024-4558: Use-after-free in ANGLE within Google Chrome/Chromium's WebKit/ANGLE path allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affects Chrome/Chromium builds prior to version 124.0.6367.155. The issue is addressed in the referenced Chrome update;...

CVE-2025-24103

Technical details (affected product, component, root cause, impact or remediation) for CVE-2025-24103 are not provided in the connected documents; monitor for updates.

CVE-2023-41982

CVE-2023-41982 affects Apple devices where an attacker with physical access can use Siri from a locked device to access sensitive user data. The issue is addressed by restricting options offered on a locked device and is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, and ...

CVE-2020-36226

CVE-2020-36226 affects OpenLDAP prior to 2.4.57, where a memch->bv_len miscalculation in the saslAuthzTo processing can crash slapd, causing denial of service. Connected advisories (Astra Linux, ALAS summaries) corroborate OpenLDAP crashes/denial of service under OpenLDAP 2.x before 2.4.57 dur...

CVE-2021-30934

The CVE-2021-30934 entry is valid and has concrete details across connected documents. It concerns WebKit/WebKitGTK family processing malicious web content leading to arbitrary code execution due to a buffer overflow. Affected products include Apple platforms: Safari 15.2, macOS Monterey 12.1, iO...

CVE-2022-0685

CVE-2022-0685 affects Vim in the Vim/Vim GitHub repo prior to 8.2.4418, due to an out-of-range pointer offset that enables a heap-based overflow when processing certain indentation-related data. Reports from Astra Linux, Cloud Foundry, Debian/Ubuntu advisories, and Apple security content confirm ...

CVE-2021-36976

CVE-2021-36976 affects libarchive 3.4.1 through 3.5.1 with a use-after-free in copy_string (invoked by do_uncompress_block and process_block). Connected advisories show affected packages across multiple distributions (e.g., Debian libarchive updates to 3.4.3-2+deb11u2; Fedora/libarchive 3.5.3-1; ...

CVE-2023-40404

CVE-2023-40404 is a use-after-free vulnerability fixed in macOS Sonoma 14.1 that could allow an app to execute arbitrary code with kernel privileges. Public details in the provided documents confirm a kernel/root-privilege impact on macOS Sonoma 14.1 and reference PoC/exploit activity (GenEtherEx...

CVE-2022-0714

CVE-2022-0714 affects vim/vim prior to 8.2.4436. Technical details across connected docs indicate a heap-based buffer overflow in Vim’s code path (notably in vim/vim’s charset handling in win_lbr_chartabsize() and associated regexp/line processing). Impact stated includes crashes, possible memory...

CVE-2023-41989

CVE-2023-41989 affects macOS; fixed in macOS Sonoma 14.1. The issue allowed an attacker to execute arbitrary code as root from the Lock Screen by restricting options on a locked device. Impact is root-level code execution on the locked screen; remediation is updating to Sonoma 14.1 per the NVD en...

CVE-2024-54658

CVE-2024-54658 is a memory-handling issue in processing web content that can lead to a denial-of-service. The primary public description states the fix is in Apple software: iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, and macOS Sonoma 14.4. The vulnerability is m...

CVE-2025-31205

CVE-2025-31205 targets WebKitGTK/WebKit components across multiple platforms. Affected: WebKitGTK/WebKit-based browsers using the GTK toolkit; vulnerability allows a malicious website to exfiltrate data cross-origin. Root cause: cross-origin data leakage via processing/execution paths in web cont...

CVE-2023-42857

CVE-2023-42857 describes a privacy issue where private data redaction for log entries was improved. Affected platforms: macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. Root cause: leakage of sensitive user data through logs due to insufficient redaction. Impact: an app may be able to access sensiti...

CVE-2023-40401

CVE-2023-40401 affects macOS Ventura prior to the 13.6.1 security update. The issue, tracked under Passkeys, could allow an attacker to access passkeys without authentication. Apple fixed this in macOS Ventura 13.6.1 by adding permissions checks. The NVD assigns a CVSS v3.1 base score of 7.5 (Hig...

CVE-2023-41977

CVE-2023-41977 is a Safari-related issue where improved cache handling fixes a vulnerability that could allow a malicious website to reveal browsing history. Affected products/versions (per connected sources): macOS Sonoma 14.1; iOS 16.7.2; iPadOS 16.7.2. Remedy: Apple has addressed the issue in ...

CVE-2023-4752

CVE-2023-4752 is a use-after-free in Vim’s ins_compl_get_exp() affecting Vim/vim before 9.0.1858. Connected advisories confirm the issue and list affected platforms/distributions (Debian, AlmaLinux, Amazon Linux, etc.). Remediation in publicly referenced notes is to upgrade Vim to a version conta...

CVE-2020-36221

CVE-2020-36221 is an integer underflow in OpenLDAP’s Certificate Exact Assertion processing that crashes slapd, causing denial of service. The issue affects OpenLDAP before 2.4.57; Astra Linux and ALAS advisories explicitly reference the underflow and the need to upgrade to 2.4.57 or newer to fix...

CVE-2021-30682

CVE-2021-30682 is a WebKit/Apple logic-issue vulnerability disclosed as fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. The issue allows a malicious application to leak sensitive user information due to improper restrictions. Connected sources confir...

CVE-2023-40449

CVE-2023-40449 is an Apple vulnerability where an application may cause a denial-of-service due to an issue in memory handling. The published entry specifies a local attack surface with user interaction required, and the root cause is related to memory handling that could be exploited by a compro...

CVE-2025-24138

CVE-2025-24138 is a macOS vulnerability addressed by improved state management. The issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. Description: A malicious application may be able to leak sensitive user information. Technical context from the sources confirms...

CVE-2022-0359

CVE-2022-0359 is described in connected docs as a Heap-based Buffer Overflow in vim/vim prior to 8.2. The Astra Linux bulletin reiterates the issue, and Cloud Foundry’s USN listing includes this CVE among Vim-related flaws. The provided materials do not specify the exact affected product version ...

CVE-2022-0943

CVE-2022-0943 affects Vim/vim before 8.2.4563. The vulnerability is described as a heap-based buffer overflow in Vim. The connected documents confirm this CVE is listed among Vim-related issues, but do not provide a detailed root cause or exploit specifics beyond the heap-based overflow. Remediat...

CVE-2022-32816

CVE-2022-32816 is a WebKitGTK/WebKit issue where visiting a website that frames malicious content may lead to UI spoofing. Connected advisories confirm this vulnerability in WebKitGTK/WebKit related packages (e.g., webkitgtk/webkit2gtk) with upstream fixes around version 2.36.5+; Arch Linux ASA-2...

CVE-2023-40413

CVE-2023-40413 affects Apple platforms (iOS 17.1/iPadOS 17.1 and earlier/macOS/macOS Sonoma 14.1 etc.) in the Find My component. The issue is described as an improvement in cache handling that could allow an app to read sensitive location information. The vulnerability is fixed in iOS 17.1/iPadOS...

CVE-2023-42850

CVE-2023-42850: A macOS Sonoma 14.1 issue where LaunchServices’ permissions logic could allow an app to access sensitive user data. The vulnerability is fixed in macOS Sonoma 14.1; affected product is macOS Sonoma (LaunchServices). The NVD entry indicates a local attack vector with low attack com...

CVE-2020-36224

CVE-2020-36224 is an OpenLDAP vulnerability present in OpenLDAP releases before 2.4.57. It can cause a denial of service due to an invalid pointer free in the saslAuthzTo processing, crashing slapd. A fix is available in OpenLDAP 2.4.57 and later; upgrade to a version at or beyond that release (v...

CVE-2022-1942

CVE-2022-1942 is a vim/vim vulnerability (affecting Vim prior to 8.2) where a heap-based buffer overflow can be triggered by opening a command-line window from a substitute expression. Debian LTS advisory DLA-3204-1 (vim 2:8.1.0875-5+deb10u4) and Debian 11/NVD entries categorize it as a heap-base...

CVE-2023-41975

CVE-2023-41975 involves a privacy vulnerability in macOS where a website could access the microphone without showing the microphone-use indicator. The issue was addressed by removing the vulnerable code and is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1. Connected ...

CVE-2023-42438

CVE-2023-42438 affects macOS Sonoma 14.1. The vulnerability is described as an inconsistent user interface issue that is fixed via improved state management, with the possibility of UI spoofing when visiting a malicious website. The fix is implemented in macOS Sonoma 14.1. CVSS v3.1 base score is...

CVE-2023-23520

CVE-2023-23520 involves a race condition in the Apple Crash Reporter that could allow a user to read arbitrary files as root. The issue was addressed with additional validation and patched in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3. Affected components and exact root...

CVE-2023-42847

CVE-2023-42847 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. The issue allowed access to passkeys without authentication due to insufficient checks. Affected products: macOS Sonoma 14.1+, iOS 17.1, iPadOS 17.1. Impact, as stated: an attacker may ac...

CVE-2021-1817

CVE-2021-1817 is a memory corruption bug in Apple WebKit/WebKitGTK components exploited by processing maliciously crafted web content. Affected in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, tvOS 14.5; remediation is to upgrade to the fixed OS versions (e.g., macOS Big Sur 11.3+, iOS/...

CVE-2021-30851

CVE-2021-30851 affects WebKitGTK and WPE WebKit. A memory corruption vulnerability could allow arbitrary code execution when processing malicious web content. Upstream fix is WebKitGTK/WebKit/WPE WebKit 2.34.1; Debian/Arch Linux advisories (DSA-4995/4996, ASA-202110-10) note remediation by upgrad...

CVE-2023-40421

CVE-2023-40421 is a macOS permission issue affecting macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1 where an app may access sensitive user data. The vulnerability is mitigated by OS updates; Apple lists the fixes under the indicated Sonoma/Monterey/Ventura versions. The connec...

CVE-2022-21658

CVE-2022-21658 affects Rust’s std::fs::remove_dir_all, due to a race condition (CWE-363) that could allow an attacker to trick a privileged process into deleting files/directories outside the target. Affected Rust releases: 1.0.0–1.58.0; patch released in 1.58.1. Impact can be significant for pri...

CVE-2022-26706

CVE-2022-26706 concerns an access issue in Apple’s sandboxing that allowed a sandboxed process to circumvent sandbox restrictions. Apple fixed the bug in tvOS 15.5, iOS 15.5 / iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, and macOS Monterey 12.4. The vulnerability was addressed by tightening sa...

CVE-2023-41988

CVE-2023-41988 concerns an issue where an attacker with physical access could use Siri to access sensitive user data on locked devices. The fixed behavior is to restrict options offered on a locked device. Affected/affected-by details in the provided documents indicate remediation in macOS Sonoma...

CVE-2023-42842

CVE-2023-42842 affects macOS Sonoma 14.1. The Nessus/OpenVAS data and NVD entry indicate the issue is fixed in macOS Sonoma 14.1 and that an app may be able to access sensitive user data. The CVSS v3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) assigns a base score of 5.5 (Medium) with Local at...

CVE-2020-36223

CVE-2020-36223 affects OpenLDAP before 2.4.57 and causes a slapd crash due to a flaw in the Values Return Filter control handling, resulting in denial of service via a double free and an out-of-bounds read. The initial description and connected advisories identify the same root cause and impact, ...

CVE-2022-0729

CVE-2022-0729 affects vim/vim; described as an out-of-range pointer offset in the GitHub repo prior to 8.2.4440. The vulnerability relates to memory access errors that can lead to a crash or potentially arbitrary code execution, as noted across multiple sources referencing Vim’s memory handling. ...

CVE-2023-40405

CVE-2023-40405 concerns a privacy issue in macOS Sonoma 14.1 where an app may read location information due to insufficient private data redaction in log entries. The vulnerability is addressed in macOS Sonoma 14.1 with the fix described as improved private data redaction for logs. Affected produ...

CVE-2022-26711

CVE-2022-26711 describes an integer overflow in Apple's ImageIO WebP parsing. The root cause is an overflow in row-bytes calculation leading to an undersized buffer and out-of-bounds access during image decoding, enabling arbitrary code execution in apps using ImageIO (Safari, Preview, Mail, Mess...

CVE-2023-40444

CVE-2023-40444 affects macOS Sonoma 14.1, addressing a permissions flaw that could allow an app to access user-sensitive data. The fix is included in macOS Sonoma 14.1; the provided documents do not specify other affected versions or exploit details. Recommendation: update to macOS Sonoma 14.1 or...

CVE-2020-36228

CVE-2020-36228 is an integer underflow in OpenLDAP’s Certificate List Exact Assertion processing that can crash slapd, causing denial of service. It affects OpenLDAP releases before 2.4.57. Public advisories confirm the issue and reference related CVEs in the same 2.4.x stream. The vulnerability ...

CVE-2021-4166

CVE-2021-4166 is a Vim vulnerability categorized as an out-of-bounds read affecting Vim buffers. Public references in the connected documents confirm the issue, with remediation guidance tied to Vim updates. The Cloud Foundry advisory (USN-6026-1) and related AWS/Linux bulletins indicate Vim fixe...

CVE-2021-30846

CVE-2021-30846 is a memory corruption vulnerability in WebKitGTK and WPE WebKit that could allow remote code execution when processing malicious web content. It is publicly fixed upstream in WebKitGTK/WPE WebKit around version 2.34.1 (Arch Linux ASA-202110-9/ASA-202110-10 indicate vulnerability i...

CVE-2023-42854

CVE-2023-42854 affects macOS: the issue was fixed by removing the vulnerable code. Affected versions include macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1. The documented impact is that an app may cause a denial-of-service to Endpoint Security clients. Remediation is availabl...