CVE-2022-1620

CVE-2022-1620: NULL Pointer Dereference in vim_regexec_string (regexp.c:2729) in vim/vim up to 8.2.4901. The issue allows a crafted input to crash the Vim process (DoS). Affected: Vim before 8.2.4901; mitigations/remediation are to upgrade Vim to a fixed version (>= 8.2.4901) as indicated by v...

CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

CVE-2023-34425

CVE-2023-34425 involves an issue in Apple software where improved memory handling fixes allow arbitrary code execution with kernel privileges. Affected are watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5. The...

CVE-2022-22628

CVE-2022-22628 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. Connected advisories confirm exploitation potential in WebKitGTK/WebKit2GTK across Linux distributions and related platforms. Mitigations document...

CVE-2023-23530

CVE-2023-23530 relates to an Apple memory handling issue that could allow an app to execute arbitrary code outside its sandbox or with elevated privileges. The vulnerability is addressed in macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3, indicating an Apple memory-management fault in the affected ...

CVE-2022-0696

CVE-2022-0696 is a NULL pointer dereference in Vim. Affected software is vim/vim prior to 8.2.4428. The connected docs confirm this CVE among Vim-related flaws and show patches in Debian/Ubuntu advisories (e.g., DLA-3204-1) and an Ubuntu/Debian security bulletin lineage. Remediation is to update ...

CVE-2022-29181

CVE-2022-29181 affects Nokogiri on Ruby prior to 1.13.6, where the XML/HTML4 SAX parsers do not type-check all inputs. This can allow specially crafted untrusted inputs to cause illegal memory access (segfault) or reads from unrelated memory. The issue is resolved in 1.13.6, with a workaround to ...

CVE-2022-42852

Mode C: CVE-2022-42852 affects WebKitGTK (webkitgtk2/gtk3 WebKit) components used in Linux GTK-based deployments. The issue allows processing of malicious web content to disclose process memory. Public advisories confirm fixes in WebKitGTK-related packages (e.g., Debian webkit2gtk updates, Fedora...

CVE-2022-42799

CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...

CVE-2023-36495

CVE-2023-36495 involves an integer overflow that Apple fixed by improving input validation. Affected platforms include watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8/iPadOS 15.7.8, tvOS 16.6, iOS 16.6/iPadOS 16.6, and macOS Ventura 13.5. The issue could allow an app to execute arbitrary code with...

CVE-2021-36690

CVE-2021-36690: A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via idxGetTableInfo when given a crafted SQL query. The vendor disputes the relevance (user already has full privileges). Public details note remediation via package upgrades; Debian LTS advi...

CVE-2022-26981

Liblouis up to version 3.21.0 is affected by a buffer overflow in compilePassOpcode within compileTranslationTable.c (indirectly via tools/lou_checktable.c). The issue lies in Liblouis 3.21.0 and earlier, with the vulnerable code path being invoked during translation table compilation. The effect...

CVE-2022-46692

CVE-2022-46692 is a logic issue in WebKitGTK/WebKit causing a bypass of the Same Origin Policy when processing malicious web content. The Apple ecosystem fixes (Safari 16.2, iOS 16.2/iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, etc.) are documented in the initial CVE description. Connected advis...

CVE-2021-30848

CVE-2021-30848 is a memory corruption vulnerability in WebKit/WebKitGTK. The issue may be triggered by processing malicious web content and could lead to code execution. Public advisories confirm fixes in Apple Safari/WebKit products (iOS 14.8, iPadOS 14.8, Safari 15, iOS 15, iPadOS 15) and relat...

CVE-2023-38598

CVE-2023-38598 is a use-after-free in Apple operating system components that was addressed via memory-management fixes. The vulnerability can lead to arbitrary code execution with kernel privileges and is fixed in multiple Apple OS versions: watchOS 9.6, macOS Big Sur 11.7.9, macOS Monterey 12.6....

CVE-2023-38604

The CVE-2023-38604 issue is an out-of-bounds write addressed by input validation fixes. Affected Apple platforms include watchOS 9.6; macOS Big Sur 11.7.9; macOS Monterey 12.6.8; macOS Ventura 13.5; iOS 15.7.8 / 16.6; iPadOS 15.7.8 / 16.6; tvOS 16.6. The vulnerability could allow an app to execut...

CVE-2022-0368

CVE-2022-0368 affects the Vim/ Vim project, with an out-of-bounds read in vim/vim prior to 8.2. The entry lists a mix of impact indicators (C/H/I/A high/partial) and a CVSS 3.1 base score of 7.8 (LOCAL, HIGH) indicating local access and user interaction is required. The documents do not provide a...

CVE-2022-1616

CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...

CVE-2022-1629

CVE-2022-1629 is a Vim/vim vulnerability (buffer over-read in find_next_quote) affecting Vim before version 8.2.4925, enabling crashes, memory modification, and potential remote code execution. Connected advisories corroborate the issue in Vim across Linux distros (Astra Linux and Cloud Foundry/C...

CVE-2022-22590

CVE-2022-22590 is a use-after-free in WebKit/WebKitGTK (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Affected lines in connected docs indicate WebKitGTK/WebKit implementations and that Apple fixed the issue in iOS 15.3/iPadOS 15.3/watchOS 8.4/...

CVE-2022-32823

CVE-2022-32823 describes a memory initialization issue that could allow an app to leak sensitive user information. It is fixed in Apple OS updates: iOS/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update 2022-005 Catalina. The vulnerability is local...

CVE-2023-32654

CVE-2023-32654 affects macOS Ventura 13.5, where a logic issue in state management could allow reading information belonging to another user. The fix is macOS Ventura 13.5 (patch). External references note this as an Apple information disclosure update; exploitation details are not provided in th...

CVE-2024-44192

CVE-2024-44192 affects WebKitGTK/WebKitGTK4 (webkitgtk and webkitgtk4). The issue is described as processing maliciously crafted web content may lead to an unexpected process crash. Public reports in connected docs confirm Debian LTS (DLA-4218-1) fix WebKitGTK 2.48.3-1~deb11u1, and Amazon Linux/A...

CVE-2021-30951

CVE-2021-30951 is a WebKit-family use-after-free vulnerability that may be triggered by processing malicious web content. Affected components include WebKit (Safari/WebKit on Apple platforms) and WebKitGTK/WebKit2GTK variants. The root cause is described as a memory-management issue leading to po...

CVE-2023-38601

CVE-2023-38601 affects macOS (Big Sur 11.7.9, Monterey 12.6.8, Ventura 13.5). The issue was mitigated by removing the vulnerable code; impact: an app may be able to modify protected parts of the file system. Remediation: apply the specified macOS updates (11.7.9/12.6.8/13.5). Root cause details a...

CVE-2022-26722

Summary (CVE-2022-26722): The memory initialization issue is fixed in Security Update 2022-004 for macOS Catalina, macOS Monterey 12.4, and macOS Big Sur 11.6.6. The vulnerability could allow a malicious application to gain root privileges. Publicly available connected documents confirm the same ...

CVE-2026-64747

CVE-2026-64747 is a buffer overflow vulnerability fixed by improved size validation. It affects Apple platforms including iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue may allow an app to execute arbitrary code ...

CVE-2022-1927

CVE-2022-1927: Buffer Over-read in vim/vim prior to 8.2. The Astra Linux bulletin confirms a Vim vulnerability described as a buffer over-read in vim/vim before 8.2. The CloudFoundry/Apple references also discuss Vim issues but do not provide a precise fixed version in the supplied documents. Imp...

CVE-2023-37285

CVE-2023-37285 is an out-of-bounds read vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges. It is fixed in iOS/iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. Exploitation status and in-the-wild detai...

CVE-2022-0554

CVE-2022-0554 is referenced in connected Astra Linux security bulletin as a Vim vulnerability: “Out-of-range Pointer Offset” in the GitHub Vim/vim repository, affecting Vim prior to 8.2. The Astra bulletin repeats the description but provides no additional technical details (affected versions, ex...

CVE-2022-22589

CVE-2022-22589 is a validation issue in WebKit/WebKitGTK where processing a maliciously crafted mail message could lead to running arbitrary JavaScript. The trusted component is WebKit/WebKitGTK in Apple platforms (iOS, iPadOS, watchOS, tvOS, macOS Monterey 12.2+; Safari 15.3) and WebKitGTK for L...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2025-24213

CVE-2025-24213 is a type-confusion vulnerability in WebKit-related components that can lead to memory corruption. Affected platforms include Apple OSes (macOS Sequoia 15.5, iOS 18.5 / iPadOS 18.5, tvOS 18.5, watchOS 11.5, visionOS 2.5, Safari 18.5) with fixation described as improved handling of ...

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2021-30884

CVE-2021-30884 relates to WebKit-based rendering components (notably WebKitGTK/WebKit on embedded platforms) where an issue in CSS compositing could allow a malicious website to reveal browsing history. The root cause is described as limitations or restrictions on CSS compositing. The vulnerabili...

CVE-2023-38571

CVE-2023-38571 affects macOS (Big Sur, Monterey, Ventura) where an app may bypass Privacy preferences due to insufficient validation of symlinks. Root cause: improved validation of symlinks. Impact: Privacy settings bypass possible. The vulnerability is fixed in macOS Big Sur 11.7.9, macOS Monter...

CVE-2023-4781

CVE-2023-4781 affects Vim (vim/vim) prior to 9.0.1873. The issue is described as a heap-based buffer/overflow in code related to Vim’s substitution handling (vim_regsub_both) with multiple related CVEs cited in downstream advisories. Impact, as reported by the connected documents, includes potent...

CVE-2024-23286

CVE-2024-23286 concerns a buffer overflow fix tied to memory handling in Apple platforms. Affected components/versions (as stated): macOS Monterey 12.7.4; macOS Ventura 13.6.5; macOS Sonoma 14.4; visionOS 1.1; iOS 17.4 and iPadOS 17.4; watchOS 10.4; iOS 16.7.6 and iPadOS 16.7.6; tvOS 17.4. Underl...

CVE-2022-26716

CVE-2022-26716 is a memory corruption vulnerability in WebKitGTK/WebKit exposure that could allow arbitrary code execution when processing malicious web content. Public records in connected advisories (AlmaLinux ALAS2-2023-2088 and ALMA 2022:7704/8054) confirm fixes in WebKitGTK/WebKitGTK3/4 pack...

CVE-2022-26719

CVE-2022-26719 is a memory corruption vulnerability in WebKitGTK/WebKit. The Apple advisory states that processing malicious web content may lead to arbitrary code execution and that fixes are applied in macOS Monterey 12.4, iOS 15.5/iPadOS 15.5, tvOS 15.5, watchOS 8.6, and Safari 15.5. Related a...

CVE-2023-38609

CVE-2023-38609 is an injection issue in macOS/macOS Ventura prior to 13.5 that could allow an app to bypass certain Privacy preferences. Apple fixed this by improving input validation, with the vulnerability addressed in macOS Ventura 13.5. Remediation per the sources is to update to macOS Ventur...

CVE-2022-1968

CVE-2022-1968 affects the Vim editor (vim/vim) prior to 8.2. The public bulletins in connected docs describe a memory-safety issue: a Use-After-Free in Vim (notably involving utf_ptr2char) that can crash Vim and, in some variants, may enable memory corruption or worse. The Debian/CloudFoundry/Ama...

CVE-2022-26762

CVE-2022-26762 is a memory corruption issue addressed by macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges via a local vector. Affected components are not explicitly enumerated in the provided documents beyond the ...

CVE-2022-22677

CVE-2022-22677 describes a logic issue in the handling of concurrent media (WebKit/WebRTC) that could interrupt video self-preview when a phone call is answered. Affected software is Apple platforms implementing WebKit/WebRTC (notably macOS Monterey and iOS/iPadOS in the 12.4/15.5 family). The ro...

CVE-2022-46700

CVE-2022-46700 corresponds to a memory corruption issue in WebKitGTK/WebKit2GTK. The vulnerability arises from processing malicious web content, potentially allowing arbitrary code execution. Public advisories (Debian DSA-5308/5309, Fedora package update, AlmaLinux advisories) indicate that WebKi...

CVE-2025-24203

CVE-2025-24203 is a local kernel memory bug (VM_BEHAVIOR_ZERO_WIRED_PAGES) that enables a user-process to zero wired kernel pages, creating a kernel read/write primitive. Public materials describe chaining this bug with additional flaws (e.g., sandbox escape, PID/file-signature bypass) to achieve...

CVE-2023-40397

CVE-2023-40397 is a documented WebKit/WebKitGTK+ related vulnerability. The connected documents indicate a remote attacker could cause arbitrary JavaScript code execution, with fixes implemented in macOS Ventura 13.5. The primary entry notes the issue was addressed with improved checks and is fix...

CVE-2025-24209

CVE-2025-24209 is a WebKitGTK/WebKit-related vulnerability where processing maliciously crafted web content could cause an unexpected process crash due to a buffer/ memory handling issue. The issue affects webkitgtk/webkit2gtk, and multiple Linux distributions have assigned advisories to fix it (...

CVE-2022-2042

CVE-2022-2042 is a real use-after-free vulnerability in Vim. The connected Astra Linux bulletins describe the flaw as a use-after-free in Vim’s skipwhite() in src/charset.c, leading to a crash or memory corruption if a crafted file is opened. No exploitation details are provided in the documents....

CVE-2022-26772

CVE-2022-26772 concerns a memory corruption issue in macOS Monterey that was addressed with improved state management. The vulnerability could allow an application to execute arbitrary code with kernel privileges, highlighting a high-severity, local-privilege escalation path. Apple’s security con...