CVE-2025-30448

CVE-2025-30448 affects Apple platforms including macOS Ventura 13.7.6, macOS Sonoma 14.7.6, macOS Sequoia 15.4, iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, and visionOS 2.5. The issue stems from insufficient entitlement checks, which could allow an attacker to enable iCloud folder sharing without authe...

CVE-2025-30462

CVE-2025-30462 concerns a library injection issue that Apple fixed by adding restrictions. Affected: macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The issue may allow apps that appear to use App Sandbox to launch with fewer restrictions, per the description. Remediation: appl...

CVE-2025-31218

CVE-2025-31218 affects macOS Sequoia 15.5 and earlier where an app could observe hostnames of new network connections via the NetworkExtension path. The issue was addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.5. Reported impact: local attacker may observe hostnames; C...

CVE-2026-20608

CVE-2026-20608 is a vulnerability described as an issue resolved by improved state management that could cause an unexpected process crash when processing malicious web content. Public advisories confirm fixes across multiple platforms and packages: Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5 / iOS 2...

CVE-2021-30819

CVE-2021-30819 is an Apple-specific issue described as an out-of-bounds read in the Model I/O subsystem when processing USD files. The fixed version is iOS 15 and iPadOS 15. The available connected material confirms the root cause (out-of-bounds read) and the affected software milestone, but does...

CVE-2022-32786

CVE-2022-32786 concerns macOS: an issue in handling environment variables was addressed via improved validation. According to NVD/NIST and related sources, the vulnerability could allow an app to modify protected parts of the file system. Affected platforms include macOS Catalina, Big Sur (11.6.8...

CVE-2022-42811

Apple fixed CVE-2022-42811 as a sandbox-related access issue in tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vulnerability could allow an app to access user‑sensitive data; no exploitation status is provided in the sources. Remediation is available via updating to the li...

CVE-2023-29497

The CVE-2023-29497 issue affects macOS Sonoma 14, where an app may access calendar data stored in a temporary directory due to inadequate handling of temporary files. The vulnerability is fixed in macOS Sonoma 14; remediation is to update to Sonoma 14. In practice, the impact is limited to local ...

CVE-2023-38612

CVE-2023-38612 affects Apple platforms where an app may access protected user data due to insufficient checks. The vulnerability is addressed by updates: macOS Monterey 12.7, macOS Ventura 13.6, macOS Sonoma 14, iOS 16.7/iPadOS 16.7, and iOS 17/iPadOS 17. The issue was mitigated by improved check...

CVE-2023-41065

CVE-2023-41065 describes a privacy issue where private data redaction in log entries could allow an app to read sensitive location information. The issue is fixed in multiple Apple platforms: tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The NVD entry rates it as Low risk (CVSS v3....

CVE-2024-40787

CVE-2024-40787 is a local, low-privilege impact issue in Apple platforms where an attacker could bypass internet permission prompts. The root cause involves the handling of user consent prompts, allowing a Shortcut to circumvent Internet permission requirements. Affected products/versions include...

CVE-2024-40795

CVE-2024-40795 affects Apple platforms where an app may be able to read sensitive location information. The issue was addressed with improved data protection and is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and tvOS 17.6. The NVD entry shows a low 3.3 CVSS due to local acce...

CVE-2024-40818

This CVE (CVE-2024-40818) affects Apple devices and is fixed by software updates: iOS 16.7.9/iPadOS 16.7.9, iOS 17.6/iPadOS 17.6, macOS Ventura 13.6.8, macOS Sonoma 14.6, and watchOS 10.6. The vulnerability involves restricting options on a locked device, with an attacker having physical access p...

CVE-2024-40844

CVE-2024-40844 describes a privacy issue where an app may observe data displayed to the user by Shortcuts due to improved handling of temporary files. The issue affects Apple platforms and is fixed in iOS 17.7, iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The underlyi...

CVE-2024-40857

CVE-2024-40857 affects Apple platforms using WebKit: a web content processing flaw that could lead to universal cross-site scripting. The issue was addressed through improved state management and is fixed in Safari 18, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18, iPadOS 18, and tvOS 18 per t...

CVE-2024-54477

CVE-2024-54477 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The issue is described as an access to user-sensitive data via a local issue with high confidentiality impact, low attack complexity, and no user interaction required (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/...

CVE-2024-54492

CVE-2024-54492 concerns an issue where information sent over the network could be at risk due to lack of HTTPS in prior code paths. The vulnerability is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, and visionOS 2.2. Affected products include macOS and Apple mobile platfor...

CVE-2024-54501

CVE-2024-54501 affects Apple operating systems and is tied to processing a maliciously crafted file that may lead to denial of service. The published fix mentions iPadOS 18.2, iOS 18.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, and tvOS 18.2. The d...

CVE-2024-54517

CVE-2024-54517 affects Apple platforms and is resolved by macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, and iPadOS 18.2. The issue involves an out-of-bounds/bounds-check related memory issue that could allow an app to corrupt coprocessor memory. Technical details from the connected docum...

CVE-2025-24120

CVE-2025-24120 affects macOS where an issue was caused by improper lifecycle management of an object. The NVD entry states the vulnerability could allow an attacker to trigger unexpected application termination. Affected platforms and patched versions are macOS Ventura 13.7.3, macOS Sequoia 15.3,...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2025-24128

CVE-2025-24128 concerns address bar spoofing on web content seen in Safari and related WebKit components. The CVE entry states the issue is “addressed by adding additional logic” and is fixed in: macOS Sequoia 15.3, Safari 18.3, iOS 18.3, and iPadOS 18.3. The Apple advisory confirms a Safari 18.3...

CVE-2025-24269

The CVE-2025-24269 entry affects macOS Sequoia 15.4 and is described as an issue of improved memory handling that could cause an unexpected system termination. The vulnerability is fixed in macOS Sequoia 15.4; remediation is to upgrade to that release (or later). The connected Apple advisory conf...

CVE-2025-30464

The CVE-2025-30464 entry describes an out-of-bounds write flaw in macOS kernels that could lead to system termination or kernel memory corruption. Affected products and fixes are clearly stated: macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5 include the mitigation by improved b...

CVE-2025-43213

CVE-2025-43213 affects WebKitGTK/WebKitGTK4 in multiple Linux distributions (AlmaLinux, Red Hat family, Fedora, Amazon Linux) and is tied to memory handling issues that can be exploited by processing malicious web content to cause an unexpected Safari/WebKit crash (and related process crashes in ...

CVE-2025-43272

CVE-2025-43272 is a WebKitGTK-related issue (CVE-2025-43272) addressed via memory-management fixes. Publicly documented fixes reference WebKitGTK/WebKitGTK4 across multiple distributions and platforms (debian, almalinux, amazon linux). The core description in the CVE entry notes that processing m...

CVE-2020-27900

CVE-2020-27900 affects macOS (Big Sur) with an issue in handling of snapshots that could let a malicious, sandboxed application preview files it should not access. The root cause is in the permissions logic related to snapshots, and Apple fixed it in macOS Big Sur 11.0.1. The Apple security entry...

CVE-2020-9972

CVE-2020-9972 describes a buffer overflow in processing a malicious USD file that affects Apple devices. Root cause: memory handling issue; impact: may terminate the affected app or allow arbitrary code execution. Fix: Apple addressed in iOS 14.0 and iPadOS 14.0. Additional context from connected...

CVE-2022-32865

CVE-2022-32865 affects Apple platforms and is described in official Apple security content as a kernel‑level issue mitigated by memory handling improvements. According to the vulnerability entry, the flaw is fixed in iOS 16 and macOS Ventura 13, with the potential to allow an app to execute arbit...

CVE-2022-32890

CVE-2022-32890 affects macOS (notably macOS Ventura 13). The issue is described as a logic flaw that could allow a sandboxed process to circumvent sandbox restrictions. Apple documents update fixed in Ventura 13. Remediation: update to macOS Ventura 13 or later. Exploitation details are not provi...

CVE-2022-42810

CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...

CVE-2022-42831

CVE-2022-42831 describes a race condition in Apple devices that could allow an app with root privileges to execute arbitrary code with kernel privileges. Apple fixes are noted in iOS 16.1 and iPadOS 16, and macOS Ventura 13. The initial description states kernel-level impact but does not provide ...

CVE-2023-32361

CVE-2023-32361 affects Apple operating systems (tvOS 17, iOS 17/iPadOS 17, watchOS 10, macOS Sonoma 14). The vulnerability stems from improved handling of caches, enabling an app to access user-sensitive data. Apple lists fixed versions: tvOS 17, iOS 17, iPadOS 17, watchOS 10, macOS Sonoma 14. Th...

CVE-2023-40450

The CVE-2023-40450 issue is described as a Gatekeeper bypass in macOS, fixed in macOS Sonoma 14. The Core detail: an app may bypass Gatekeeper checks, with Apple documenting a patch via “improved checks.” Connected sources corroborate this fix and note macOS Sonoma 14 as the affected/patched rele...

CVE-2023-41067

A logic issue in Gatekeeper checks allowed an app to bypass Gatekeeper on macOS, fixed in macOS Sonoma 14. Affected: macOS Sonoma 14 and earlier with Gatekeeper checks bypass risk. CVE-2023-41067 impact involves local attacker with low complexity and low privileges; no user interaction required. ...

CVE-2024-40793

CVE-2024-40793 is an Apple vulnerability where vulnerable code was removed. It affects multiple Apple platforms and is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. The issue could allow an app to acc...

CVE-2024-40798

CVE-2024-40798 affects Apple platforms where an app may read Safari browsing history due to an issue addressed by improved redaction of sensitive information. Fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The provided documents do not s...

CVE-2024-40854

CVE-2024-40854 describes a memory initialization issue addressed by Apple in macOS/OS updates. Affected components are iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, and macOS Ventura 13.7.1. The vulnerability may allow an app to cause an unexpected system terminatio...

CVE-2024-44269

CVE-2024-44269 involves a logic issue in Apple platforms where a malicious app could use Shortcuts to access restricted files. The issue is addressed by improved checks and is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1,...

CVE-2024-44305

This CVE (CVE-2024-44305) is observed in macOS Sonoma, tied to the PackageKit component. A local attacker may gain root privileges due to vulnerable code that was removed; macOS Sonoma 14.6 includes the fix. The Apple security content page lists CVE-2024-44305 among PackageKit issues and confirms...

CVE-2024-54506

CVE-2024-54506 affects macOS Sequoia prior to 15.2 due to an out-of-bounds access in DCP firmware. The issue can cause unexpected termination or arbitrary code execution if triggered. The NVD entry and Apple security content identify the fix as part of macOS Sequoia 15.2. Affected component is DC...

CVE-2025-24112

CVE-2025-24112 affects macOS Sonoma 14.7.3 and macOS Sequoia 15.3. The issue arises from parsing a file, which could lead to an unexpected app termination. Apple addresses the vulnerability with improved checks, and the fixed versions are macOS Sonoma 14.7.3 and macOS Sequoia 15.3. No exploit det...

CVE-2025-24121

CVE-2025-24121 is a logic issue fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue allowed an app to modify protected parts of the file system. The Initial description states a patch with improved checks, and connected sources confirm affected OS versions and th...

CVE-2025-31235

CVE-2025-31235 is a local, memory‑corruption issue in Apple’s coreaudiod where a double‑free leads to an out‑of‑bounds or invalid dereference chain. The connected Google Project Zero write‑up explicates exploitation context for CVE-2025-31235 in coreaudiod alongside CVE-2024-54529, detailing how ...

CVE-2025-31240

CVE-2025-31240 affects macOS when mounting a maliciously crafted AFP share, which can terminate the system. Fixed in macOS Sequoia 15.5, Sonoma 14.7.6, and Ventura 13.7.6 via improved checks. CVSS 3.1: Network attack, high impact on availability; no confidentiality/integrity impact per the entry....

CVE-2025-31259

CVE-2025-31259 is a macOS Sequoia issue where an input sanitization flaw could let an app gain elevated privileges; it is fixed in macOS Sequoia 15.5 (the Nessus/macOS advisory context confirms the fix and affected product).

CVE-2020-10014

CVE-2020-10014 affects macOS components related to sandboxing controls, notably in libxpc/XPC, where a parsing/validation issue in directory paths could allow a sandbox escape. The fixed version is macOS Big Sur 11.0.1 (as per Apple HT211931), with related entries detailing memory/validation impr...

CVE-2022-32918

CVE-2022-32918 affects Apple platforms (iOS 16 and macOS Ventura 13). The issue allows an app to bypass Privacy preferences due to improper data protection handling. Apple notes the vulnerability was fixed in iOS 16 and macOS Ventura 13, restoring proper privacy controls. The CVE entry reflects a...

CVE-2022-42796

CVE-2022-42796 concerns Apple platforms where the issue could allow an app to gain elevated privileges. It was mitigated by removing the vulnerable code and is fixed in iOS 15.7, iPadOS 15.7, and macOS Ventura 13.0. The description confirms no further exploitation details are provided in the give...

CVE-2022-42815

CVE-2022-42815 concerns macOS; multiple sources indicate a data-access issue resolved by Apple in macOS Ventura 13. The Apple/NTD entries show CVE-2022-42815 affecting Mail with an impact on accessing user data, and NVD confirms a fix in Ventura 13. There is no public exploit detail in the provid...