CVE-2023-40441

CVE-2023-40441 describes a resource-exhaustion (DoS) issue caused by processing web content, mitigated by improved input validation. The fixed versions are: iOS 17, iPadOS 17, and macOS Sonoma 14. The vulnerability affects Apple devices when handling web content (GPU/WebGL contexts) and can lead ...

CVE-2024-40774

CVE-2024-40774 is a downgrade issue addressed by stricter code-signing restrictions. Affected platforms include macOS Ventura 13.6.8, Monterey 12.7.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, tvOS 17.6, and macOS Sonoma 14.6; the flaw could allow an app to bypass Privacy preferences. Remediation is th...

CVE-2024-40788

CVE-2024-40788 is a local, type-confusion vulnerability in memory handling that could allow a local attacker to cause an unexpected system shutdown . The vulnerability is fixed in: iOS/iPadOS 16.7.9 and 17.6, macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, and on watchOS 10.6, tvO...

CVE-2024-40799

CVE-2024-40799 is an out-of-bounds read vulnerability fixed by Apple in multiple OS updates. Affected platforms include iOS 16.7.9 / 17.6, iPadOS 16.7.9 / 17.6, macOS Ventura 13.6.8, Monterey 12.7.6, macOS Sonoma 14.6, and the watchOS 10.6, tvOS 17.6, visionOS 1.3 lineups. The issue occurs when p...

CVE-2024-54525

CVE-2024-54525 describes a logic issue in file handling where restoring a maliciously crafted backup file could modify protected system files. The issue affects Apple platforms across multiple OS lines via the MobileBackup stack, with fixes in: visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia...

CVE-2025-24172

CVE-2025-24172 describes a permissions issue fixed by adding sandbox restrictions in macOS, with patches in macOS Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The advisory notes that Block All Remote Content may not apply for all mail previews. This entry is supported by the NVD record, which...

CVE-2026-43700

CVE-2026-43700 describes a cross-origin issue in WebKit/Safari where processing maliciously crafted web content could disclose sensitive user information. The record states the root cause as improper tracking of security origins and the fix shipped in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and...

CVE-2026-43704

Summary of CVE-2026-43704 : A use-after-free vulnerability in Web Extensions for Safari/WebKit allowed an attacker-controlled extension to trigger an unexpected process crash. The issue is addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Af...

CVE-2020-27910

CVE-2020-27910 affects Apple audio handling across macOS Big Sur 11.0.1 and iOS 14.2/iPadOS 14.2 (also tvOS 14.2, watchOS 7.1). The issue is described as an out-of-bounds read in audio processing, mitigated by improved input validation and addressed in the listed updates. Impact per document: pro...

CVE-2021-30874

CVE-2021-30874 affects Apple iOS/iPadOS 15 where an authorization issue in NetworkExtension could allow a VPN configuration to be installed by an app without user permission. Root cause cited as improved state management; fix implemented in iOS 15 / iPadOS 15. Implication: local apps may cause VP...

CVE-2023-23533

CVE-2023-23533 affects macOS Monterey 12.6.4 and macOS Ventura 13.3. A logic issue was addressed with improved checks that could allow an app to modify protected parts of the file system. The fix is in macOS Ventura 13.3 and Monterey 12.6.4. No exploit details are provided in the sources; status ...

CVE-2023-32378

CVE-2023-32378 is a use-after-free in macOS IOAcceleratorFamily that could allow an app to execute arbitrary code with kernel privileges. Impact and fixes are documented for macOS Big Sur (11.7.5), Monterey (12.6.4), and Ventura (13.3). Exploitation status is not detailed in the provided documents.

CVE-2023-40393

The CVE-2023-40393 issue is an authentication-related flaw in Apple macOS Sonoma 14 where photos in the Hidden Photos Album could be viewed without authentication. The Red Hat/Apple documentation confirms the fix is included in macOS Sonoma 14 (and iOS 17 / iPadOS 17 for corresponding platforms) ...

CVE-2023-42983

CVE-2023-42983 affects Apple macOS. Affected component: file processing in macOS leading to denial of service or potential memory disclosure. Root cause: issue addressed with improved checks; fixed in macOS 14. Exploit details are not provided in the documents. CVSSv3.1 base score 6.4 (Medium) wi...

CVE-2024-23299

CVE-2024-23299 is about a sandbox escape in macOS. The issue is resolved by Apple in macOS Sonoma 14.4, macOS Ventura 13.6.5, and macOS Monterey 12.7.4 through improved checks; a fixed sandbox isolation condition is noted for Disk Images and related components in the Sonoma security content. Red ...

CVE-2024-40804

Apple macOS Sonoma 14.6 fixes CVE-2024-40804: a vulnerability that could allow a malicious application to access private information was addressed by improved checks. The available documents confirm the fix is in macOS Sonoma 14.6; they do not provide public details about the underlying flaw or e...

CVE-2024-44125

CVE-2024-44125 affects macOS and was addressed with updates in macOS Sonoma 14.7 and macOS Sequoia 15. A malicious application may leak sensitive user information due to insufficient checks; Apple’s security content states the issue was fixed by improved checks. The vulnerability is labeled with ...

CVE-2024-44164

This CVE (CVE-2024-44164) affects Apple platforms and describes a potential bypass of Privacy preferences. Public references indicate fixes in iOS 17.7 / iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The provided documents do not specify the affected product families, ...

CVE-2025-24107

CVE-2025-24107 describes a local permissions issue in the Apple kernel that could allow a malicious app to gain root privileges. The vulnerability is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3, and iPadOS 18.3. CVSS v3.1 metrics indicate a local attack vector, low privileges r...

CVE-2025-24114

CVE-2025-24114 is a local permission issue in macOS that could allow an app to modify protected parts of the file system. It is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. This entry provides the affected products and versions and states the vulnerability, but expl...

CVE-2025-24144

The CVE-2025-24144 information disclosure issue is fixed in Apple OS releases: macOS Sequoia 15.3, macOS Sonoma 14.7.6, visionOS 2.3, iPadOS 17.7.7, iPadOS 18.3, iOS 18.3, macOS Ventura 13.7.6, and watchOS 11.3. The root cause is described as removal of the vulnerable code, leading to potential l...

CVE-2025-24191

CVE-2025-24191 affects macOS Sequoia prior to 15.4. Root cause: improved validation of environment variables; an app could modify protected parts of the file system. Remediation: upgrade to macOS Sequoia 15.4 (addresses the issue). Public exploitation status is not detailed in the provided docume...

CVE-2025-30470

The CVE-2025-30470 entry corresponds to a path-handling issue in Apple Maps that could allow an app to read sensitive location information. Concrete details from connected sources show this flaw affecting Maps functionality on Apple Watch (watchOS 11.4 security content lists CVE-2025-30470 under ...

CVE-2025-31246

CVE-2025-31246 affects macOS AFP handling (afpfs) where connecting to a malicious AFP server may corrupt kernel memory. Apple fixes address with improved memory handling in macOS Sequoia 15.5 and macOS Sonoma 14.7.6. The NVD entry confirms the issue is resolved by these updates; other connected s...

CVE-2025-43342

CVE-2025-43342 affects WebKitGTK/webkitgtk4 (WebKitGTK engine). The description and connected advisories indicate a correctness issue where processing maliciously crafted web content may cause an unexpected process crash. The vulnerability is tracked with a high severity (CVSSv3.1: 9.8, CRITICAL;...

CVE-2022-32858

CVE-2022-32858 affects Apple platforms (iOS, macOS, watchOS) where a memory handling issue could allow an app to leak sensitive kernel state. The official description indicates the root cause is improved memory handling, and Apple fixed it in iOS 16, macOS Ventura 13, and watchOS 9. Connected sou...

CVE-2022-32915

CVE-2022-32915 is a type-confusion vulnerability fixed in macOS Ventura 13. The NVD/NIST entry states: an attacker may execute arbitrary code with kernel privileges via a local vulnerability. Apple’s security updates HT213604/HT213488 corroborate the presence of kernel‑level issues addressed in V...

CVE-2023-32385

CVE-2023-32385 affects Apple’s PDFKit on iOS 16.5/iPadOS 16.5 and macOS Ventura 13.4. The issue is described as a denial-of-service caused by a PDF file opening that may lead to the application terminating unexpectedly, with the underlying fix being improved memory handling. Connected sources con...

CVE-2023-40429

CVE-2023-40429 is an Apple permission-issue vulnerability addressed by improved input/permissions validation. Affected products include tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The issue could allow an app to access sensitive user data. The fix is included in the listed OS upd...

CVE-2023-40439

CVE-2023-40439 is a privacy issue affecting Apple platforms (iOS 16.6, iPadOS 16.6, macOS Ventura 13.5). It enables an app to read sensitive location information due to improved private data redaction for log entries, and is fixed in the cited Apple updates. Red Hat’s RH:CVE-2023-40439 entry simi...

CVE-2024-27853

CVE-2024-27853 affects macOS Sonoma up to version before 14.4 via a vulnerability in libarchive that could allow a malicious ZIP archive to bypass Gatekeeper checks. The issue is fixed in macOS Sonoma 14.4 (HT214084). No exploitation details are provided in the supplied documents; remediation is ...

CVE-2024-27855

CVE-2024-27855 describes a vulnerability in Apple platforms where a shortcut could access sensitive data via certain actions without prompting user consent. Affected products/versions (as publicly documented): macOS Sonoma 14.5; macOS Ventura 13.6.7; iOS 17.5 and iPadOS 17.5; iOS 16.7.8 and iPadO...

CVE-2024-27885

Technical details about CVE-2024-27885 are not publicly available in the provided connected documents. Monitor for updates and vendor advisories for affected macOS versions and remediation.

CVE-2024-44133

CVE-2024-44133 affects macOS on MDM-managed devices. An app could bypass certain Privacy preferences. Apple fixed the issue in macOS Sequoia 15 by removing the vulnerable code. The CVSS base score is 5.5 (Local, Low attack complexity, Low privileges, No user interaction; Impact: Confidentiality n...

CVE-2025-24270

CVE-2025-24270 affects Apple devices via AirPlay. The issue could allow an attacker on the local network to leak sensitive user information. Apple addresses this by removing the vulnerable code, with fixes shipped in macOS Sonoma 14.7.5 and earlier macOS versions, macOS Sequoia 15.4, tvOS 18.4, i...

CVE-2025-30457

Vulnerability CVE-2025-30457 affects macOS: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. Root cause is insufficient validation of symlinks, now addressed by improved validation. A malicious app could create symlinks to protected disk regions. Remediation is applying the specified macOS update...

CVE-2025-43214

CVE-2025-43214 affects WebKit/GPU-based web content handling used by Safari/WebKitGTK; the issue is a memory handling/processing weakness that may cause an unexpected crash when processing malicious web content. The CVE is listed with CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no...

CVE-2026-43663

CVE-2026-43663 affects WebKit/Web content handling on Apple platforms. The issue is a memory handling defect that could let processing malicious web content cause an unexpected process crash. Apple fixes in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Remediation is to upgrad...

CVE-2026-43701

CVE-2026-43701 affects Apple's WebKit/Safari stack. The vulnerability allows a malicious website to process restricted web content outside the sandbox, with a network attack vector and no user interaction required per CVSS. Root cause involves checks in web content handling that could bypass sand...

CVE-2021-1814

CVE-2021-1814 affects macOS Big Sur (and related Apple platforms) in the ImageIO component. A vulnerability in processing a maliciously crafted image could lead to arbitrary code execution. Apple states the issue was addressed with improved checks and a fix is available in macOS Big Sur 11.3 (als...

CVE-2021-30867

The CVE-2021-30867 issue affects Apple iOS/iPadOS and was addressed in iOS 15 / iPadOS 15. A malicious application could access photo metadata without requiring permission to access photos due to an authentication flaw. Apple states the vulnerability was fixed by improved authentication. Public r...

CVE-2021-30964

CVE-2021-30964 describes an inherited permissions issue that could allow a malicious application to bypass Privacy preferences. The issue is fixed in Apple OS updates: macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. The CVE is categorized under privacy controls (TCC) and involves bypa...

CVE-2022-42830

CVE-2022-42830 affects Apple devices and components where a root-privileged app could execute arbitrary code in the kernel due to a memory handling issue. Apple fixes in iOS 16.1, iPadOS 16 and macOS Ventura 13; apply the corresponding updates (HT213488/HT213489 references) to mitigate. The vulne...

CVE-2023-40455

CVE-2023-40455 : A permissions issue in macOS Sonoma 14 allows a sandboxed process to potentially circumvent sandbox restrictions. The Red Hat/Apple records confirm a sandbox-escape risk, with the issue fixed in macOS Sonoma 14. CVSS data from the initial entry shows a critical severity (10.0) ac...

CVE-2024-40816

CVE-2024-40816 is an out-of-bounds read vulnerability addressed by improved input validation. Fixes are in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. A local attacker could cause an unexpected system shutdown; no exploit details are provided in the sources.

CVE-2024-44165

CVE-2024-44165 is a logic-issue vulnerability fixed by Apple in multiple OS updates. It allows network traffic to leak outside a VPN tunnel. Affected are macOS: Ventura 13.7; Sonoma 14.7; Sequoia 15; iOS/iPadOS: 17.7, 18; and visionOS 2. Root cause described as a logic issue addressed with improv...

CVE-2024-44234

CVE-2024-44234 affects multiple Apple platforms (iOS/iPadOS/macOS/tvOS/visionOS/watchOS). The issue stems from improper bounds checks when parsing a maliciously crafted video file, which may lead to an unexpected system termination (crash). The vulnerability is fixed in: iOS 17.7.1 / iPadOS 17.7....

CVE-2024-54486

CVE-2024-54486 involves memory disclosure triggered by processing a maliciously crafted font in Apple platforms. Connected sources confirm the issue affects Apple operating systems and fonts handling, with remediation in updates: iPadOS 17.7.3, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, Ventura 1...

CVE-2024-54528

CVE-2024-54528 involves a logic issue in macOS where an app may overwrite arbitrary files. Connected sources confirm concrete remediation: Apple fixed the issue in macOS Sequoia 15.2, macOS Sonoma 14.7.2, and macOS Ventura 13.7.2. The underlying problem is described as a logic/restrictions issue,...

CVE-2025-24152

CVE-2025-24152 concerns macOS Sequoia 15.3. The NVD entry notes a memory-handling issue that could allow an app to cause an unexpected system termination or corrupt kernel memory. Apple’s security content for macOS Sequoia 15.3 lists CVE-2025-24152 among fixed vulnerabilities, with remediation to...