CVE-2020-36222

CVE-2020-36222 affects OpenLDAP and is caused by an assertion failure in slapd during saslAuthzTo validation, leading to a denial of service. The connected documents confirm OpenLDAP versions before 2.4.57 are vulnerable, with the issue fixed in 2.4.57 (OPENLDAP_REL_ENG_2_4_57). Impact is a denia...

CVE-2020-36227

CVE-2020-36227 is an OpenLDAP flaw that causes an infinite loop in slapd when processing the cancel_extop Cancel operation, leading to denial of service. Public details in connected advisories confirm OpenLDAP before 2.4.57 is affected. Remediation documented in connected sources recommends upgra...

CVE-2021-30889

CVE-2021-30889 : Buffer overflow in WebKitGTK leading to arbitrary code execution when processing malicious web content. Affected product: WebKitGTK/WebKit. Root cause: buffer overflow in WebKitGTK components (WebCore::ImageBufferCairoImageSurfaceBackend::create). Public references in ALAS2 advis...

CVE-2022-32885

CVE-2022-32885 is a WebKitGTK/WebKit memory corruption issue triggered by processing malicious web content. The connected advisories confirm the root cause as memory corruption from handling web content and show affected/patch targets across platforms: Apple devices (iOS 15.6, iPadOS 15.6, macOS ...

CVE-2021-30888

CVE-2021-30888 is an information-leakage flaw in WebKitGTK and WebKit where a malicious website using Content Security Policy can leak information via redirect behavior. Remediation is provided by Apple in the iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, tvOS 15.1, and w...

CVE-2021-39537

CVE-2021-39537 affects ncurses: _nc_captoinfo in captoinfo.c has a heap-based buffer overflow when processing terminfo data, observed in ncurses up to v6.2-1. Connected advisories confirm this is a real issue and provide mitigations/patch paths: Debian DLA-3682-1 and related Debian notes, Cloud F...

CVE-2022-1897

CVE-2022-1897 is described in connected Astra Linux bulletin as an Out-of-bounds Write in vim/vim prior to 8.2. The bulletin confirms the issue type but does not provide vendor/version specifics beyond Vim before 8.2. Remediation (where documented) is to update Vim to fixed versions per affected ...

CVE-2022-26709

CVE-2022-26709 is a use-after-free in WebKitGTK that can lead to arbitrary code execution when processing malicious web content. The initial CVE entry notes the fix across Apple platforms (tvOS 15.5, iOS 15.5/iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5). Connected advisories (Debia...

CVE-2022-0572

CVE-2022-0572 affects vim/vim prior to 8.2. Cause: a heap-based buffer overflow in vim’s ex_retab() (indent.c) triggered by repeated use of :retab. Impact per sources: vulnerability could crash Vim and, in some reporting, enable arbitrary code execution. Affected product: vim/vim (GitHub vim/vim)...

CVE-2022-26776

CVE-2022-26776 affects macOS, with the issue addressed by improved checks and a fix in macOS Monterey 12.4 and macOS Big Sur 11.6.6. The advisory notes that an attacker could cause unexpected application termination or arbitrary code execution. Public references in the connected documents align w...

CVE-2022-22594

CVE-2022-22594 describes a cross-origin data exfiltration issue in WebKit/WebKitGTK via cross-origin tracking, later fixed in Safari 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, tvOS 15.3, and macOS Monterey 12.2. The connected documents indicate the vulnerability allowed tracking of sensitive user ...

CVE-2022-24836

CVE-2022-24836 affects Nokogiri, a Ruby HTML/XML parser. The issue is an inefficient regular expression used to detect encoding in HTML documents in versions = 1.13.4 (or applicable patches) as noted in multiple sources (Debian/Alpine/Amazon/DLA advisories and vendor notices). If upgrade is not p...

CVE-2025-24126

CVE-2025-24126 describes an input validation issue in AirPlay across Apple platforms. The vulnerability allows a local-network actor to cause an unexpected termination or memory corruption. Patches are provided in visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18....

CVE-2020-36225

CVE-2020-36225 : OpenLDAP before 2.4.57 contains a flaw in the saslAuthzTo processing that allows a double free and slapd crash, causing denial of service. Multiple connected advisories confirm OpenLDAP vulnerability and reference a fix in later releases (2.4.58 in some updates). Affected product...

CVE-2021-30890

CVE-2021-30890 is a WebKit/WebKitGTK/WebKitGTK-derived vulnerability described as a logic/state issue where processing maliciously crafted web content may lead to universal cross-site scripting. Public mentions appear in multiple connected advisories: Debian DSA-5030-1 (webkit2gtk) and DSA-5031-1...

CVE-2021-4136

CVE-2021-4136 is a Vim vulnerability described as a heap-based buffer overflow in Vim when processing crafted input, potentially crash or execute code. Connected sources (ALAS2023-2023-098 and macOS Big Sur/ Catalina advisories) list Vim with this CVE among multiple Vim issues and show remediatio...

CVE-2022-46698

CVE-2022-46698 is a logic issue in WebKitGTK where processing malicious web content may disclose sensitive user information. Multiple connected advisories confirm this issue in WebKitGTK/WebKit2GTK components and list it among fixed CVEs after updates to WebKitGTK packages. Affected products incl...

CVE-2022-42867

CVE-2022-42867 is a use-after-free in WebKit/WebKitGTK (WebKitGTK). The root cause is a memory management issue that, when processing malicious web content, could lead to arbitrary code execution. The advisory notes this is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16....

CVE-2025-31257

CVE-2025-31257 affects WebKit/WebKitGTK components used by Safari across Apple platforms. The issue is described as a memory handling problem that may cause a crash when processing maliciously crafted web content. Concrete fixes exist in watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequo...

CVE-2021-1820

CVE-2021-1820 is a memory initialization issue fixed in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The description states that processing maliciously crafted web content may lead to disclosure of process memory. Connected documentation confirms the vulnerability is a m...

CVE-2022-0629

CVE-2022-0629 affects Vim (vim/vim) prior to 8.2. The connected Cloud Foundry USN advisory notes a stack-based buffer overflow in vim's ga_concat_shorten_esc() in src/testing.c that can be triggered by opening a crafted file, potentially crashing the editor and causing a denial of service (no exp...

CVE-2022-22592

CVE-2022-22592 is a WebKit/WebKitGTK logic issue (state management) that may allow malicious web content to bypass or prevent enforcement of Content Security Policy. In the connected advisories, the vulnerability is cited across multiple ecosystems: Apple platforms (WebKit/WebKitGPU stack) with f...

CVE-2021-30954

CVE-2021-30954 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2. The connected Astra Linux advisory a...

CVE-2023-23514

CVE-2023-23514 is a macOS kernel-use-after-free vulnerability. In macOS Ventura 13.3 (and related updates) the issue was addressed by improved memory management, fixing a flaw that could allow an app to execute arbitrary code with kernel privileges. Public references in Apple advisories show the ...

CVE-2026-65346

An integer overflow in Apple's ImageIO framework (CVE-2026-65346) allows arbitrary code execution when processing a malicious image on iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. No in-the-wild exploitation is reported; updates are available via Apple's security advisories.

CVE-2022-26696

CVE-2022-26696 pertains to macOS Monterey, where a sandbox escape was possible through a sandboxed process. The issue was addressed by improved environment sanitization and is fixed in macOS Monterey 12.4. Public notes describe the vulnerability as allowing sandbox restriction circumvention, with...

CVE-2022-2000

CVE-2022-2000 is an Out-of-bounds Write affecting vim in Vim 8.2 before 8.2.2434. Debian LTS advisory DLA-3204-1 and Debian security notes document the fix: vim version 2:8.2.2434-3+deb11u3 for Debian 11 (bullseye) addresses CVE-2022-2000, with multiple other CVEs also patched in that update. Ast...

CVE-2022-26751

CVE-2022-26751 describes a memory corruption issue triggered by processing a maliciously crafted image. The vulnerability is addressed by Apple in iTunes 12.12.4 for Windows, and in iOS 15.5 / iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, and macOS Monterey 12.4. The fixed...

CVE-2022-32922

CVE-2022-32922 describes a use-after-free in Safari-related web content processing that could lead to arbitrary code execution. Affected products/versions include Safari 16.1, iOS 16.1, iPadOS 16, and macOS Ventura 13; the issue is addressed by memory-management fixes in these versions. The conne...

CVE-2024-54534

CVE-2024-54534 is an Apple memory-corruption issue triggered by processing malicious web content. Public details in connected documents show the vulnerability affects multiple Apple platforms (watchOS, visionOS, tvOS, macOS, Safari, iOS, iPadOS) and is mitigated by memory-management fixes. Fixed ...

CVE-2021-30928

CVE-2021-30928 is a memory corruption vulnerability in CoreGraphics affecting processing of maliciously crafted images, leading to arbitrary code execution. The Apple advisories indicate the issue is fixed in macOS Big Sur 11.6 and in iOS 14.8 / 15, iPadOS 14.8 / 15, watchOS 8, and tvOS 15. The A...

CVE-2019-14899

CVE-2019-14899 is a routing-path/kernel issue affecting macOS (and cited across Linux, FreeBSD, OpenBSD, iOS, Android). The root cause is a VPN-tunnel routing problem that allows a local/adjacent attacker to inject into active VPN connections, enabling data injection and potential VPN hijacking. ...

CVE-2021-1826

CVE-2021-1826 describes a logic issue in WebKit where processing malicious web content could trigger universal cross-site scripting on Apple platforms. The vulnerability was fixed in Apple software updates across multiple OSes: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5...

CVE-2022-0361

CVE-2022-0361 is a Vim vulnerability described as a heap-based buffer overflow in the Vim source (vim/vim) prior to 8.2. The initial description and connected docs confirm the issue exists in Vim code paths that could lead to memory corruption. Public materials here do not provide concrete root-c...

CVE-2022-22662

CVE-2022-22662 is a WebKitGTK/WebKitGTK4 cookie management issue (state management) that may disclose sensitive user information when processing malicious web content. It is fixed by macOS Security Update 2022-003 for Catalina and macOS Big Sur 11.6.5, as cited across multiple sources in the conn...

CVE-2023-28201

CVE-2023-28201 affects Apple WebKit Web Inspector used by Safari/WebKit components on macOS ( Ventura 13.3 ), iOS 16.4 / 15.7.4, iPadOS 16.4 / 15.7.4, and tvOS 16.4. The root cause is related to improved state management in WebKit; the issue could allow a remote attacker to cause unexpected app t...

CVE-2021-30953

CVE-2021-30953 is a WebKit Web content handling vulnerability (out-of-bounds read) that could allow arbitrary code execution. It is fixed in Safari 15.2, iOS 15.2, iPadOS 15.2, macOS Monterey 12.1, and tvOS 15.2. Public sources in the Connected Documents corroborate the issue as an out-of-bounds ...

CVE-2022-0351

CVE-2022-0351 affects vim/vim prior to 8.2. In a command, a condition with many parentheses can cause a crash due to a missing recursion limit. This is documented in Debian/Ubuntu advisories and vendor bulletins (e.g., Cloud Foundry USN and Debian DLA). Impact is crash and potential memory effect...

CVE-2022-22624

CVE-2022-22624 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. The CVE is fixed in platforms referenced in the connected docs (e.g., macOS Safari upgrades; WebKitGTK/WebKit2GTK updates in Debian, AlmaLinux adv...

CVE-2023-28198

CVE-2023-28198: A use-after-free in WebKit processing web content was fixed. Affected: Apple platforms (iOS/iPadOS/macOS) as per the description. Impact stated: arbitrary code execution if exploited via processing web content. Root cause: memory management/use-after-free vulnerability. Remediatio...

CVE-2023-28320

The CVE-2023-28320 issue affects curl/libcurl when built with a synchronous resolver, where name resolution can hang via alarm() and siglongjmp(). It uses a non-mutex-protected global buffer, risking crashes or misbehavior in multi-threaded apps. Affected: curl

CVE-2024-54467

CVE-2024-54467 involves a cookie-management issue in WebKitGTK (webkit2gtk) that can allow a malicious website to exfiltrate data cross-origin. The initial description notes fixes across Apple platforms (watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18, iPadOS 18, tvOS 18). Connected d...

CVE-2021-30809

CVE-2021-30809 is a WebKit/WebKitGTK use-after-free vulnerability. The Debian/AlmaLinux/Amazon advisories and Debian security tracker describe it as a use-after-free issue in WebKitGTK that could allow arbitrary code execution when processing malicious web content, with fixes implemented in Safar...

CVE-2021-30823

CVE-2021-30823 is a logic issue in WebKit that allowed bypassing HSTS when processing web content. It is addressed in macOS Monterey 12.0.1, iOS 14.8/iPadOS 14.8, tvOS 15, Safari 15, and watchOS 8. Connected sources also list WebKitGTK+ and Apple advisories referencing the same CVE as part of a b...

CVE-2025-24150

CVE-2025-24150 concerns WebKitGTK/WebKit components where copying a URL from Web Inspector may lead to command injection. The Initial Description identifies Apple platforms fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Connected documents corroborate the CVE in WebKitGTK con...

CVE-2023-32445

CVE-2023-32445 is a cross-site scripting vulnerability triggered when processing a document. The issue affects Apple platforms including Safari, macOS Ventura, iOS, iPadOS, watchOS, and tvOS as listed, with exploitation potential tied to document handling. Apple states the vulnerability is resolv...

CVE-2025-30427

CVE-2025-30427 is a use-after-free vulnerability in processing maliciously crafted web content that may lead to an unexpected Safari crash. Affected in multiple Apple platforms; fixes are implemented in visionOS 2.4, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, and Safari 18.4. Debian...

CVE-2021-28544

CVE-2021-28544 affects Apache Subversion (subversion) by leaking the copyfrom path in path-based authz protected copy operations. Affected components include httpd and svnserve services; root cause is disclosure of the original node’s copyfrom path, not its contents. Exploitation details are not ...

CVE-2022-1620

CVE-2022-1620: NULL Pointer Dereference in vim_regexec_string (regexp.c:2729) in vim/vim up to 8.2.4901. The issue allows a crafted input to crash the Vim process (DoS). Affected: Vim before 8.2.4901; mitigations/remediation are to upgrade Vim to a fixed version (>= 8.2.4901) as indicated by v...

CVE-2023-34425

CVE-2023-34425 involves an issue in Apple software where improved memory handling fixes allow arbitrary code execution with kernel privileges. Affected are watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5. The...