CVE-2022-22586

CVE-2022-22586 refers to an out-of-bounds write vulnerability in the macOS Monterey AMD kernel that could allow a malicious application to execute arbitrary code with kernel privileges. The issue was fixed in macOS Monterey 12.2 by improved bounds checking. Connected sources corroborate: the NVD/...

CVE-2022-32870

CVE-2022-32870 is a logic issue fixed in Apple platforms (iOS 16, macOS Ventura 13, watchOS 9) that could allow a user with physical access to a device to use Siri to obtain some call history information. The root cause is described as improved state management. Public references in the CVE entry...

CVE-2022-32879

CVE-2022-32879 corresponds to a logic/state-management issue in Apple platforms that could allow a user with physical access to view contacts from the lock screen. Connected sources provide concrete details: affected modalities are macOS, iOS, iPadOS, watchOS, and tvOS; root cause stated as a log...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2023-27928

The CVE-2023-27928 vulnerability concerns a privacy issue where private data redaction for log entries was insufficient, potentially allowing an app to access information about a user’s contacts. Affected products and versions include: macOS Big Sur 11.7.5; macOS Ventura 13.3; iOS 15.7.4 and iOS ...

CVE-2023-40389

CVE-2023-40389 affects macOS Monterey 12.7.4 and macOS Ventura 13.6.5, where the issue is described as an elevation of data-container access restriction that could allow an app to access sensitive user data. The connected documents confirm the root cause as improper restriction of data container ...

CVE-2024-27823

CVE-2024-27823 involves a race condition that Apple fixed by improved locking. It affects Apple platforms (macOS Sonoma 14.5; macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS/iPadOS 16.7.8 and 17.5; watchOS 10.5; visionOS 1.3; tvOS 17.5). An attacker in a privileged network position may be able t...

CVE-2024-40786

CVE-2024-40786 is an Apple vulnerability addressed by state-management improvements. The issue affects Apple devices and is fixed in iOS 16.7.9, iPadOS 16.7.9, iOS 17.6, iPadOS 17.6, and macOS Ventura 13.6.8. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low...

CVE-2024-44255

CVE-2024-44255 is a path handling issue addressed by Apple in versions listed as fixed: visionOS 2.1, iOS 18.1 / iPadOS 18.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The issue allowed a malicious app to run arbitrary shortcuts without user consent due to improved p...

CVE-2024-54525

CVE-2024-54525 describes a logic issue in file handling where restoring a maliciously crafted backup file could modify protected system files. The issue affects Apple platforms across multiple OS lines via the MobileBackup stack, with fixes in: visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia...

CVE-2024-54537

CVE-2024-54537 affects macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. In QuickTime Player, an app may read and write files outside its sandbox due to insufficient entitlement checks. The issue was addressed with additional entitlement checks; fixed in the listed OS versions.

CVE-2025-24086

CVE-2025-24086 affects Apple image processing via the ImageIO component. The Apple advisory notes that processing an image may lead to a denial-of-service, caused by a memory handling issue, and lists affected platforms as iPadOS/iPadOS 17.x, macOS Ventura/ Sonoma, visionOS, iOS/iPadOS 18.x, macO...

CVE-2025-24173

The CVE-2025-24173 issue involves insufficient entitlement checks that could allow an app to escape its sandbox. Affected products/versions include visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4/iPadOS 18.4, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Impact is high (CVE-...

CVE-2021-30996

CVE-2021-30996 is a race condition affecting Apple platforms (notably IOMobileFrameBuffer and Kernel components) that could allow a malicious app to execute arbitrary code with kernel privileges. It was fixed in macOS Monterey 12.1 and iOS 15.2 / iPadOS 15.2. Public details in connected sources c...

CVE-2023-40424

CVE-2023-40424 affects Apple platforms (iOS/iPadOS/watchOS/macOS Sonoma 14) where an app may access user‑sensitive data. Connected sources show the root cause as a vulnerability in privacy/data‑exposure controls, with remediation involving improved checks in components such as TCC and AppSandbox....

CVE-2023-40541

CVE-2023-40541 concerns macOS Shortcuts where a shortcut could output sensitive user data without consent. The vulnerability is fixed in macOS Sonoma 14, addressed by adding an additional user-consent prompt. Connected sources consistently describe the issue as a permissions/consent gap rather th...

CVE-2023-41986

CVE-2023-41986 affects Apple platforms; an app may be able to modify protected parts of the file system. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Attack vector is local with user interaction required; no exploitation status is provided beyond the fix in these OS versions. Rem...

CVE-2023-42872

CVE-2023-42872 is an Apple security issue where an app may access sensitive user data due to insufficient permissions checks in the AppleMobileFileIntegrity component. The vulnerability is tied to macOS, iOS, and iPadOS and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Public documentation ...

CVE-2024-27802

CVE-2024-27802 involves an out-of-bounds read addressed by improved input validation in Apple platforms. Affected products include macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8/iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5/iPadOS 17.5, and macOS Sonoma 14.5. The issue arises when pro...

CVE-2024-54530

CVE-2024-54530 affects Apple devices with iOS 18.2 and iPadOS 18.2 (and corresponding macOS/watchOS/visionOS updates) where the password autofill feature may fill in passwords after a failed authentication. The issue is addressed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2, and iP...

CVE-2025-24144

The CVE-2025-24144 information disclosure issue is fixed in Apple OS releases: macOS Sequoia 15.3, macOS Sonoma 14.7.6, visionOS 2.3, iPadOS 17.7.7, iPadOS 18.3, iOS 18.3, macOS Ventura 13.7.6, and watchOS 11.3. The root cause is described as removal of the vulnerable code, leading to potential l...

CVE-2025-43342

CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...

CVE-2026-43700

CVE-2026-43700 describes a cross-origin issue in WebKit/Safari where processing maliciously crafted web content could disclose sensitive user information. The record states the root cause as improper tracking of security origins and the fix shipped in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and...

CVE-2020-27909

CVE-2020-27909 affects Apple CoreAudio across Apple platforms (iOS/iPadOS, macOS/iPadOS/tvOS/watchOS) via processing a maliciously crafted audio file. The issue is an out-of-bounds read that was addressed with improved input validation and is fixed in iOS 14.2 and iPadOS 14.2 (also reflected for ...

CVE-2021-30813

CVE-2021-30813 affects macOS Monterey 12.0.1 and earlier, where a local attacker with access to a host Mac may bypass the Login Window via Remote Desktop on a locked macOS session. Apple fixed this with improved checks (Login Window logic) in Monterey 12.0.1. The vulnerability is described as a l...

CVE-2021-30840

This CVE (CVE-2021-30840) concerns Apple’s FontParser handling of dfont files. A maliciously crafted dfont could lead to arbitrary code execution due to a vulnerability in font processing. Apple indicates the issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Connected sources also align...

CVE-2021-30925

CVE-2021-30925 affects Apple platforms (watchOS, macOS Big Sur, iOS, iPadOS) via a sandbox/privacy logic issue where a malicious app could bypass Privacy preferences. Root cause described as improved permissions logic; impact is exposure of restricted data due to bypass. Fixes exist in watchOS 8,...

CVE-2022-32799

CVE-2022-32799 is an out-of-bounds read issue in macOS components that was fixed by Apple in Security Update 2022-005 for Catalina and in macOS Monterey 12.5. The public description notes that a user in a privileged network position could leak sensitive information, with the remediation being the...

CVE-2022-42853

CVE-2022-42853 affects macOS Ventura 13.1. The issue is described as an access flaw that could allow an app to modify protected parts of the file system. It is fixed in macOS Ventura 13.1. CVSSv3.1 (NVD/product-security): 5.5 (Medium), Local access, low attack complexity, no privileges required, ...

CVE-2022-46697

CVE-2022-46697 is an out-of-bounds access vulnerability that could let an app execute arbitrary code with kernel privileges on macOS. The issue is fixed in macOS Ventura 13.1 via improved bounds checking. Affected components are not explicitly enumerated in the provided documents beyond the macOS...

CVE-2023-28197

CVE-2023-28197 is an Apple macOS vulnerability described as an access issue that could allow an app to access user‑sensitive data. The issue is addressed by sandbox/security restrictions and is fixed in macOS updates: Ventura 13.3, Big Sur 11.7.5, and Monterey 12.6.4. The NVD and Red Hat entries ...

CVE-2023-40390

CVE-2023-40390 is a privacy issue in macOS Sonoma that was addressed by moving sensitive data to a protected location. The vulnerability could allow an app to access user-sensitive data. It is fixed in macOS Sonoma 14.2. The accompanying CVSS 3.1 data (LOCAL, LOW complexity, NONE privileges, UI r...

CVE-2023-40434

CVE-2023-40434 describes a configuration issue in Apple platforms that could allow an app to access a user’s Photos Library. The issue is fixed in iOS 17, iPadOS 17, and macOS Sonoma 14. Affected products include iPhone, iPad, and macOS devices running the listed versions. The underlying cause is...

CVE-2023-41979

The CVE-2023-41979 entry concerns macOS Sonoma 14 where a race condition was addressed by improved locking. The issue could allow an app to modify protected parts of the file system, with local attack vector and high integrity impact as per the available data. Patches are available in macOS Sonom...

CVE-2025-24145

CVE-2025-24145 describes a privacy issue where an app may view a contact’s phone number in system logs. Affected products updated: macOS Sequoia 15.3, iOS 18.3, iPadOS 18.3. Root cause relates to private data redaction in log entries; remediation is to apply the updates listed (Sequoia 15.3, iOS ...

CVE-2025-24164

CVE-2025-24164 concerns a logic issue in macOS that could allow an app to modify protected parts of the file system. The vulnerability is addressed by fixes in macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The public descriptions indicate a corrected checkset that prevents unaut...

CVE-2025-24172

CVE-2025-24172 describes a permissions issue fixed by adding sandbox restrictions in macOS, with patches in macOS Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The advisory notes that Block All Remote Content may not apply for all mail previews. This entry is supported by the NVD record, which...

CVE-2025-24242

CVE-2025-24242 affects macOS Sequoia prior to 15.4 due to improper handling of symlinks, where a root-privileged app could access private information. Apple’s advisory confirms the fix is in Sequoia 15.4, addressing the symlink handling issue. In public references, the CVSS-like vector indicates ...

CVE-2020-27910

CVE-2020-27910 affects Apple audio handling across macOS Big Sur 11.0.1 and iOS 14.2/iPadOS 14.2 (also tvOS 14.2, watchOS 7.1). The issue is described as an out-of-bounds read in audio processing, mitigated by improved input validation and addressed in the listed updates. Impact per document: pro...

CVE-2020-27927

CVE-2020-27927 is an Apple font-parsing vulnerability. The issue is described as an out-of-bounds write in the FontParser component that processes malicious font files, leading to arbitrary code execution. Affected platforms include macOS Big Sur 11.0.1 and iOS 14.2 / iPadOS 14.2, tvOS 14.2, and ...

CVE-2021-1821

CVE-2021-1821 is a logic issue in Apple OS components (notably networking-related paths) that was mitigated by state-management fixes. The vulnerability allowed denial of service when a user visited a malicious webpage, and Apple patched it in watchOS 7.6 and macOS Big Sur 11.5. The Apple securit...

CVE-2021-30922

CVE-2021-30922 concerns macOS Intel Graphics Driver family issues: multiple out-of-bounds write vulnerabilities corrected via improved bounds checking. The NVD entry and Red Hat/OpenVAS mappings confirm this CVE is tied to macOS kernel-space impact, with the fixed versions described as part of ma...

CVE-2022-32915

CVE-2022-32915 is a type-confusion vulnerability fixed in macOS Ventura 13. The NVD/NIST entry states: an attacker may execute arbitrary code with kernel privileges via a local vulnerability. Apple’s security updates HT213604/HT213488 corroborate the presence of kernel‑level issues addressed in V...

CVE-2023-27943

CVE-2023-27943 relates to macOS/iOS quarantine handling for files downloaded from the internet. The vulnerability description notes that files may not have the quarantine flag applied, and Apple’s fix is described as “improved checks.” Public documents confirm affected platforms: macOS Ventura 13...

CVE-2023-32378

CVE-2023-32378 is a use-after-free in macOS IOAcceleratorFamily that could allow an app to execute arbitrary code with kernel privileges. Impact and fixes are documented for macOS Big Sur (11.7.5), Monterey (12.6.4), and Ventura (13.3). Exploitation status is not detailed in the provided documents.

CVE-2023-38586

CVE-2023-38586 concerns an access issue in macOS where a sandboxed process may bypass sandbox restrictions. The publicly provided description explicitly states the issue is fixed in macOS Sonoma 14. Multiple connected sources corroborate that the vulnerability involves sandbox restrictions and af...

CVE-2023-40441

CVE-2023-40441 describes a resource-exhaustion (DoS) issue caused by processing web content, mitigated by improved input validation. The fixed versions are: iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability affects Apple devices when handling web content (GPU/WebGL contexts) and can lead ...

CVE-2024-40774

CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...

CVE-2025-24107

CVE-2025-24107 describes a local permissions issue in the Apple kernel that could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3, and iPadOS 18.3. CVSS v3.1 metrics indicate a local attack vector, low privileges r...

CVE-2025-24114

CVE-2025-24114 is a local permission issue in macOS that could allow an app to modify protected parts of the file system. It is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. This entry provides the affected products and versions and states the vulnerability, but expl...