CVE-2020-27907

CVE-2020-27907 is a memory corruption issue reported by Apple, with the impact described as arbitrary code execution under kernel privileges. The vulnerability is addressed by memory handling fixes in macOS Big Sur 11.1 and Security Updates for Catalina (2020-001) and Mojave (2020-007). These fix...

CVE-2022-22583

CVE-2022-22583 describes a permissions issue in macOS where improved validation fixes allow an application to access restricted files. The vulnerability is addressed in Security Update 2022-001 for Catalina, macOS Monterey 12.2, and macOS Big Sur 11.6.3. The initial entry notes a local-permission...

CVE-2022-32811

CVE-2022-32811 describes a memory corruption flaw that is mitigated by improved locking. Affected software includes macOS Monterey 12.5, macOS Big Sur 11.6.8, and Security Update 2022-005 Catalina. The issue could allow an app to execute arbitrary code with kernel privileges. Remediation is upgra...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2024-23236

CVE-2024-23236 is a local, correctness-type issue in macOS Sonoma 14.5 where an app may read arbitrary files. The publicly documented fix is in macOS Sonoma 14.5 (Apple security content cites CFNetwork as affected). The provided sources indicate the vulnerability is addressed by the macOS 14.5 up...

CVE-2024-54539

This CVE-2024-54539 affects macOS and is addressed by patches in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. The underlying issue is described as improved state management that prevents an app from capturing keyboard events from the lock screen. Affected components are not ...

CVE-2024-54564

The CVE-2024-54564 issue concerns Apple platforms, where a file received over AirDrop may not have the quarantine flag applied due to an improved state-management approach. This affects visionOS 1.3, macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6, where the quarantine handling was addressed and fix...

CVE-2025-24129

CVE-2025-24129 is a type confusion vulnerability in Apple AirPlay that affects iOS 18.3/iPadOS 18.3, visionOS 2.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Root cause: type confusion in AirPlay code leading to potential application termination. Impact: a remote attacker on the local netwo...

CVE-2025-24153

CVE-2025-24153 affects macOS Sequoia 15.3 where a buffer overflow in memory handling allowed an app with root privileges to potentially execute arbitrary code with kernel privileges. The issue is addressed in macOS Sequoia 15.3 (patch/fix provided by Apple). The NVD/NCSC entries corroborate a ker...

CVE-2025-31187

CVE-2025-31187 affects macOS releases and was mitigated by removing the vulnerable code. The issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The vulnerability could allow an app to modify protected parts of the file system. According to the CVE, the attack vec...

CVE-2025-31213

Summary: CVE-2025-31213 describes a logging issue that could reveal associated usernames and websites from a user’s iCloud Keychain. Apple fixed the flaw in multiple Apple OS updates: iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. Affected software: Apple's iPad...

CVE-2021-1803

CVE-2021-1803 affects macOS Big Sur with a permissions logic flaw in Sandbox/privilege handling that could let a local application enumerate a user’s iCloud documents. The issue is fixed in macOS Big Sur 11.0.1 by an update to permissions logic (Apple HT211931). No public exploit details are prov...

CVE-2021-30798

CVE-2021-30798 is a logic issue (state management) fixed on Apple platforms. The vulnerability could allow a malicious app to bypass certain Privacy preferences. Affected products include iOS, macOS Big Sur, and watchOS; fixes are in iOS 14.7, macOS Big Sur 11.5, and watchOS 7.6. The initial desc...

CVE-2021-30871

CVE-2021-30871 affects Apple platforms (iOS, watchOS, macOS Big Sur 11.5) where a local attacker could access analytics data due to a change in entitlement. Mitigation: Apple addressed the issue with updates to iOS 14.7, watchOS 7.6, and macOS Big Sur 11.5. Technical details in the provided docum...

CVE-2021-30966

CVE-2021-30966 is a logic issue in CFNetwork Proxies that could cause user traffic to be leaked to a proxy server despite PAC configurations. Public details in Apple security updates show the issue affects macOS Monterey 12.1 (and related updates for other Apple platforms) and was addressed in Mo...

CVE-2022-32897

CVE-2022-32897 concerns macOS Monterey 12.5, where a memory corruption in ImageIO/TIFF handling allows arbitrary code execution if a malicious TIFF is processed. The issue is described as memory corruption due to improved validation and is explicitly fixed in macOS Monterey 12.5. The public descr...

CVE-2022-32928

CVE-2022-32928 describes a logic issue in Apple systems that could allow a user in a privileged network position to intercept mail credentials. The vulnerability is fixed in iOS 16, macOS Ventura 13, and watchOS 9. Connected sources confirm the issue relates to Apple software components and the v...

CVE-2023-28190

Technical details about CVE-2023-28190 are not publicly provided in the supplied documents. Monitoring for updates is advised.

CVE-2023-40392

The CVE-2023-40392 entry concerns a privacy issue in macOS where an app may be able to read sensitive location information due to inadequate redaction in log entries. The Red Hat/Apple/NVD entries align on: affected platform is macOS, specifically macOS Ventura 13.5 and earlier in the context of ...

CVE-2023-42969

CVE-2023-42969 describes a sandbox escape whereby an app may break out of its sandbox due to improper handling of caches. Affected platforms include iOS and iPadOS prior to 17, and macOS prior to the listed versions ( Sonoma 14, Ventura 13.6, Monterey 12.7). Apple fixed the issue in iOS 17/iPadOS...

CVE-2024-40797

This CVE-2024-40797 affects macOS where visiting a malicious website may cause user interface spoofing. It is addressed by improved state management and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The NVD/NDA references describe a network-accessible issue with UI spoo...

CVE-2025-31198

CVE-2025-31198 refers to a macOS path-handling issue fixed by improved symlink validation. Affected components are tied to macOS releases: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The issue’s CVSS metrics indicate local attack vector, low attack complexity, no privileges required, user in...

CVE-2025-31202

CVE-2025-31202 affects Apple platforms via AirPlay components (e.g., AirPlay in Vision Pro, iOS/iPadOS, macOS, tvOS, visionOS). Root cause: a null pointer dereference fixed by input validation improvements. Impact: attacker on the local network can cause a denial-of-service. Affected versions inc...

CVE-2021-30792

CVE-2021-30792 is an out-of-bounds write vulnerability in image processing that can cause arbitrary code execution when processing a specially crafted image. It is fixed in iOS 14.7 and macOS Big Sur 11.5. According to the provided sources, exploitation would require processing a malicious image,...

CVE-2023-28180

CVE-2023-28180 affects macOS Ventura 13.3 (macOS). It is a denial-of-service vulnerability caused by memory handling issues that an attacker in a privileged network position can trigger, leading to high availability impact. The fix is in macOS Ventura 13.3; users should update to that version to ...

CVE-2024-40785

CVE-2024-40785 is addressed in SUSE/openSUSE webkit2gtk3 updates. The vulnerability is fixed by upgrading webkit2gtk3 to version 2.44.3 (SUSE-SU-2024:3109-1 / SUSE-SU-2024:3091-1), with CVEs including 40776, 40779, 40780, 40782, 40785, 40789, 40794, 4558. The OSV entry confirms the fix in the web...

CVE-2024-40786

CVE-2024-40786 is an Apple vulnerability addressed by state-management improvements. The issue affects Apple devices and is fixed in iOS 16.7.9, iPadOS 16.7.9, iOS 17.6, iPadOS 17.6, and macOS Ventura 13.6.8. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low...

CVE-2021-30668

CVE-2021-30668 affects macOS Big Sur, where a local attacker with physical access could bypass the Login Window during a software update. The issue was addressed by Apple with improved checks and is fixed in macOS Big Sur 11.4. The public descriptions note a logic/state management improvement, en...

CVE-2021-30811

CVE-2021-30811 is an Apple security issue affecting iOS/iPadOS, watchOS with the AppleMobileFileIntegrity component. The underlying problem enabled a local attacker to read sensitive information. The CVE is fixed by Apple in iOS 15/iPadOS 15 and watchOS 8, addressing the issue through improved ch...

CVE-2022-22584

CVE-2022-22584 is a memory corruption vulnerability in Apple software where improved validation addresses the issue. The flaw could allow arbitrary code execution when processing a maliciously crafted file. Fixed in the following official updates: tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, an...

CVE-2022-48578

CVE-2022-48578 affects macOS Monterey AppleScript handling. The information provided shows an out-of-bounds read issue addressed by improved bounds checking, fixed in macOS Monterey 12.5. The AppleScript processing could lead to unexpected termination or disclosure of process memory, indicating a...

CVE-2023-40399

Apple CVE-2023-40399 affects multiple Apple platforms (tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14). The issue is described as a memory handling defect that may allow an app to disclose kernel memory. The fixed versions are explicitly listed in the NVD entry and Apple advisory content...

CVE-2023-42982

CVE-2023-42982 affects Apple macOS. Processing a file may cause denial-of-service or disclosure of memory contents. The issue is mitigated by macOS 14, with the root cause described as improved checks in the file-processing path. Affected: macOS prior to 14; remediation: update to macOS 14 or lat...

CVE-2024-44155

CVE-2024-44155 affects Apple Safari and related OS components via a custom URL scheme handling issue. The root cause is improved input validation, addressing a vulnerability that could allow malicious web content to violate the iframe sandboxing policy. Public details indicate the fix is applied ...

CVE-2024-54475

CVE-2024-54475 is a macOS privacy vulnerability where an app may determine the user’s current location via log data. Apple fixes: macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. Remediation: update to the affected versions. This entry is supported by Apple advisory and various secu...

CVE-2025-30467

CVE-2025-30467 affects Apple Safari (and related Apple platforms) with an address bar spoofing vulnerability. The available documents indicate the issue occurs when visiting a malicious website that can spoof the address bar, potentially confusing users about the site they are on. Apple’s patches...

CVE-2020-27944

The CVE-2020-27944 entry concerns a memory corruption vulnerability in FontParser when processing maliciously crafted font files. Apple security disclosures (HT212003/HT212005/HT212009) indicate the issue could allow arbitrary code execution and is addressed by updates in watchOS 7.2, macOS Big S...

CVE-2022-22585

CVE-2022-22585 affects Apple platforms via a path validation/symlink handling issue. The root cause is inadequate path sanitization, allowing an application to access a user’s files. The vulnerability is fixed in iOS 15.3, iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, and macOS Big Su...

CVE-2023-35990

CVE-2023-35990 affects Apple platforms (iOS, iPadOS, watchOS, macOS Sonoma) where an app could determine which other apps are installed on the device. The issue is mitigated by Apple’s fixes in iOS 17/iPadOS 17, watchOS 10, iOS 16.7/iPadOS 16.7, and macOS Sonoma 14. The root cause is linked to in...

CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2024-54537

CVE-2024-54537 affects macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. In QuickTime Player, an app may read and write files outside its sandbox due to insufficient entitlement checks. The issue was addressed with additional entitlement checks; fixed in the listed OS versions.

CVE-2025-24131

CVE-2025-24131 is an AirPlay vulnerability affecting Apple devices. A memory handling issue could allow a privileged attacker on the local network to cause a denial-of-service. The vulnerability is addressed in Apple security updates: iOS/iPadOS 18.3, visionOS 2.3, macOS Sonoma 14.7.5 (and relate...

CVE-2025-24282

A library injection issue in macOS Sequoia was addressed with additional restrictions. The vulnerability could allow an app to modify protected parts of the file system and is fixed in macOS Sequoia 15.4. Affected product: macOS Sequoia; fix version: 15.4. CVE-2025-24282. Exploitation status is n...

CVE-2020-9965

CVE-2020-9965 is an out-of-bounds read in Disk Images that Apple fixes with improved input validation across macOS Big Sur 11.0.1 and related OS versions (watchOS 7.0, tvOS 14.0, iOS/iPadOS 14.0). The bulletin notes that an affected application may be able to execute arbitrary code with kernel pr...

CVE-2022-32870

CVE-2022-32870 is a logic issue fixed in Apple platforms (iOS 16, macOS Ventura 13, watchOS 9) that could allow a user with physical access to a device to use Siri to obtain some call history information. The root cause is described as improved state management. Public references in the CVE entry...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-42826

CVE-2023-42826 involves a vulnerability in macOS where processing a file could lead to arbitrary code execution. The NVD entry notes the issue was addressed with improved checks and that it is fixed in macOS Sonoma 14. Connected sources describe the underlying flaw as a buffer out-of-bounds write...

CVE-2024-27823

CVE-2024-27823 involves a race condition that Apple fixed by improved locking. It affects Apple platforms (macOS Sonoma 14.5; macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS/iPadOS 16.7.8 and 17.5; watchOS 10.5; visionOS 1.3; tvOS 17.5). An attacker in a privileged network position may be able t...