1262 matches found
CVE-2022-42810
CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...
CVE-2023-40450
The CVE-2023-40450 issue is described as a Gatekeeper bypass in macOS, fixed in macOS Sonoma 14. The Core detail: an app may bypass Gatekeeper checks, with Apple documenting a patch via “improved checks.” Connected sources corroborate this fix and note macOS Sonoma 14 as the affected/patched rele...
CVE-2023-41067
A logic issue in Gatekeeper checks allowed an app to bypass Gatekeeper on macOS, fixed in macOS Sonoma 14. Affected: macOS Sonoma 14 and earlier with Gatekeeper checks bypass risk. CVE-2023-41067 impact involves local attacker with low complexity and low privileges; no user interaction required. ...
CVE-2023-42934
CVE-2023-42934 is an information-disclosure issue in Apple platforms that was fixed by removing vulnerable code. Affected products/versions include macOS Sonoma 14, iOS 17, and iPadOS 17. Impact is that an app with root privileges may access private information. The Public advisories also state t...
CVE-2024-23209
CVE-2024-23209 affects macOS Sonoma 14.3, with the issue arising from memory handling when processing web content, potentially enabling arbitrary code execution. Apple reports the fix as part of macOS Sonoma 14.3, addressing a WebKit/related memory handling vulnerability. The CVSS base score is 8...
CVE-2024-40793
CVE-2024-40793 is an Apple vulnerability where vulnerable code was removed. It affects multiple Apple platforms and is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, watchOS 10.6. The issue could allow an app to acc...
CVE-2024-40835
CVE-2024-40835 concerns a logic issue in Apple’s Shortcuts feature where a shortcut could access sensitive data with certain actions without prompting. Affected platforms include iOS 16.7.9 and iPadOS 16.7.9; iOS 17.6 and iPadOS 17.6; macOS Ventura 13.6.8; macOS Monterey 12.7.6; macOS Sonoma 14.6...
CVE-2024-44305
This CVE (CVE-2024-44305) is observed in macOS Sonoma, tied to the PackageKit component. A local attacker may gain root privileges due to vulnerable code that was removed; macOS Sonoma 14.6 includes the fix. The Apple security content page lists CVE-2024-44305 among PackageKit issues and confirms...
CVE-2024-54497
The CVE-2024-54497 issue is linked to processing web content and leads to a denial-of-service. Affected platforms include iPadOS/iOS (18.2 and 18.2 respectively), macOS (Ventura 13.7.3, Sonoma 14.7.3, Sequoia 15.2), visionOS 2.2, tvOS 18.2, and watchOS 11.2. The vulnerability has been addressed w...
CVE-2025-24148
CVE-2025-24148 affects macOS where the issue stems from improved handling of executable types, allowing a malicious JAR to bypass Gatekeeper checks. Active impact details in the provided data come from macOS updates: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5 address the vulnerability. The C...
CVE-2020-10008
CVE-2020-10008 is a logic/restrictions issue fixed in macOS Big Sur 11.0.1. The description across Apple and Red Hat sources states that a malicious application with root privileges may access private information, due to a logic issue addressed with improved restrictions and input validation. The...
CVE-2020-10014
CVE-2020-10014 affects macOS components related to sandboxing controls, notably in libxpc/XPC, where a parsing/validation issue in directory paths could allow a sandbox escape. The fixed version is macOS Big Sur 11.0.1 (as per Apple HT211931), with related entries detailing memory/validation impr...
CVE-2021-30920
CVE-2021-30920 affects macOS Monterey 12.0.x, with a permissions issue that allowed a local attacker to read sensitive information. Apple’s advisory for Monterey 12.0.1 documents a fix via improved validation and validation checks to address the vulnerability. The linked Apple security content no...
CVE-2022-32918
CVE-2022-32918 affects Apple platforms (iOS 16 and macOS Ventura 13). The issue allows an app to bypass Privacy preferences due to improper data protection handling. Apple notes the vulnerability was fixed in iOS 16 and macOS Ventura 13, restoring proper privacy controls. The CVE entry reflects a...
CVE-2023-38607
CVE-2023-38607 affects macOS printers/printing subsystem. A bug in cache handling could allow an app to modify printer settings. Impact described as local risk with high integrity impact; remote/vector exploitation details are not provided in the supplied documents. remediation: Apple fixed the i...
CVE-2024-27800
CVE-2024-27800 is an Apple vulnerability where processing a maliciously crafted message could cause a denial of service. It was addressed by removing the vulnerable code, with fixes in macOS Ventura 13.6.7, Monterey 12.7.5, iOS 16.7.8 / iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 / iPadOS 17...
CVE-2024-27805
CVE-2024-27805 describes an issue where improved validation of environment variables prevents an app from accessing sensitive user data. Affected Apple platforms include macOS Ventura 13.6.7, macOS Monterey 12.7.5, macOS Sonoma 14.5, iOS 16.7.8 / 16.7.8, iPadOS 16.7.8 / 17.5, iOS 17.5, watchOS 10...
CVE-2024-44128
CVE-2024-44128 concerns macOS security where an Automator Quick Action workflow may bypass Gatekeeper. The issue was addressed by adding an additional prompt for user consent and is fixed in macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The available connected documents indicate the v...
CVE-2024-44199
CVE-2024-44199 is documented in Apple’s macOS Sonoma 14.6 security content as an out-of-bounds read in the IOMobileFrameBuffer component. The issue arises from insufficient input validation and leads to an app potentially causing an unexpected terminations or reading kernel memory. The Apple advi...
CVE-2024-44273
CVE-2024-44273 concerns an issue in Apple OS handling of symlinks. Connected documents confirm that the vulnerability is fixed in iOS 18.1, iPadOS 18.1, visionOS 2.1, macOS Sonoma 14.7.1, watchOS 11.1, and tvOS 18.1. The primary root cause is improved handling of symlinks, and the impact is that ...
CVE-2024-54498
CVE-2024-54498 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The underlying issue is a path handling problem involving insufficient validation, which could allow an app to break out of its sandbox. The publicly documented impact is sandbox escape; no exploit details a...
CVE-2024-54510
CVE-2024-54510 describes a race condition vulnerability in Apple platforms. The NVD entry states a race condition was addressed with improved locking and that the issue could allow an app to leak sensitive kernel state, fixed in iPadOS 17.7.3, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2...
CVE-2024-54515
CVE-2024-54515 is a macOS Sequoia 15.2 issue where a logic issue in SharedFileList could allow a malicious app to gain root privileges. The description notes an improvement in restrictions as the fix, and Apple lists macOS Sequoia 15.2 as the patched version. This CVE is corroborated by Apple’s s...
CVE-2024-54527
CVE-2024-54527 concerns an issue in Apple OS software that was mitigated by improved checks and is fixed in multiple platform updates. The vulnerability could allow an app to access sensitive user data and is addressed in: watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2, iPadOS 18.2, macOS ...
CVE-2024-54559
CVE-2024-54559 affects macOS Sequoia and was addressed in Sequoia 15.2. The issue is described as an information-disclosure vulnerability where an app may access sensitive user data due to improved checks. The CVSS v3.1 vector indicates a Local attack with Low attack complexity and no privileges ...
CVE-2025-24251
CVE-2025-24251 affects multiple Apple OS releases (macOS Sequoia 15.4; macOS Ventura 13.7.5; macOS Sonoma 14.7.5; iOS 18.4/iPadOS 18.4; tvOS 18.4; watchOS 11.4; visionOS 2.4). The flaw enables a local‑network attacker to cause an unexpected termination of an app due to improved checks implemented...
CVE-2025-31197
CVE-2025-31197 affects Apple AirPlay implementations across multiple Apple OSes (macOS, iOS, iPadOS, tvOS, visionOS). The vulnerability allows a local-network attacker to cause an unexpected app termination due to an issue corrected by improved input/state checks. Affected versions include macOS ...
CVE-2025-31249
CVE-2025-31249 is a logic issue affecting macOS Sequoia; Apple’s security content notes a logic issue addressed with improved checks and that the vulnerability could allow an app to access sensitive user data. The NVD entry fixes this in macOS Sequoia 15.5, with a CVSS v3.1 base score of 7.1 (HIG...
CVE-2022-42788
CVE-2022-42788 refers to a permissions issue in macOS Find My that could allow a malicious application to read sensitive location information. The root cause is insufficient permission validation, and Apple addressed it by improving permission checks. The vulnerability is fixed in macOS Ventura 1...
CVE-2022-42818
Technical details for CVE-2022-42818 are not present in the connected documents. Public details in the Initial document are limited to the patch (macOS Ventura 13) and status; monitor for updates.
CVE-2023-40386
CVE-2023-40386 concerns a privacy issue in macOS Sonoma 14 where an app may access Notes attachments due to improper handling of temporary files. Apple fixed the issue in macOS Sonoma 14 by addressing temporary-file handling. The Red Hat entry and multiple sources corroborate the same description...
CVE-2024-27809
Technical details about CVE-2024-27809 (affected products, root cause, or fixes) are not provided in the connected documents. The initial description notes a privacy issue fixed in macOS Sonoma 14.4; monitor for updates.
CVE-2024-27880
CVE-2024-27880 is an out-of-bounds read vulnerability affecting Apple platforms. Processing a maliciously crafted file may cause an application to terminate unexpectedly. It is fixed in: iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, a...
CVE-2024-40809
CVE-2024-40809 is a logic issue in Apple’s permission checks that could allow a shortcut to bypass Internet permission requirements. The description states the issue is fixed in multiple macOS and iOS variants: iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ventura 13.6.8, macOS Mo...
CVE-2024-44153
CVE-2024-44153 affects macOS; Apple reports that an app may be able to access user-sensitive data due to a permissions logic issue. The vulnerability is addressed in macOS Sonoma 14.7 and macOS Sequoia 15. Affected products/versions are macOS Sonoma 14.7 and later, and macOS Sequoia 15. Remediati...
CVE-2024-44190
CVE-2024-44190 describes a path handling issue in macOS that could allow an app to read arbitrary files. The root cause is insufficient validation in path handling, and Apple fixed this in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. Remediation is to deploy the listed macOS updat...
CVE-2024-44232
CVE-2024-44232: Apple platforms (macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1; iOS 18.1 and iPadOS 18.1) fixed by improved bounds checks. Parsing a malicious video file may cause an unexpected system termination. Remediation is to ...
CVE-2021-30923
CVE-2021-30923 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s advisory for macOS Monterey 12.0.1 fixes this issue by applying improved locking to the affected kernel/file-system pathways. The available connect...
CVE-2022-32827
CVE-2022-32827 is a memory corruption vulnerability in AppleAVD affecting macOS Ventura 13 and iOS prior to 16. The issue could allow an app to cause a denial-of-service. Apple fixed it in iOS 16 and macOS Ventura 13 by improved state management. No exploit details are provided in the connected d...
CVE-2022-42791
CVE-2022-42791 is a macOS-specific race condition vulnerability that was addressed by improving state handling. The issue could allow an app to execute arbitrary code with kernel privileges and is fixed in macOS Ventura 13. Affected component is the kernel-related path implicated by the race cond...
CVE-2022-42816
CVE-2022-42816 is a macOS vulnerability described as a logic issue related to state management. According to the provided sources, it is addressed in macOS Ventura 13, and the issue could allow an app to modify protected parts of the file system. The primary publicly available details identify th...
CVE-2022-42858
CVE-2022-42858 is a memory corruption issue described as fixed in macOS Ventura 13.1, with the kernel privileges impact. The core advisory notes that the vulnerability arises from a memory corruption condition that was mitigated by improved input validation. Affected product in the sources is mac...
CVE-2023-38596
CVE-2023-38596: Apple fixed a protocol handling issue that allowed an app to fail to enforce App Transport Security. Affected products include tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14. Root cause: insufficient protocol handling in CFNetwork/App Transport Security logic. Reme...
CVE-2023-40388
CVE-2023-40388 concerns a privacy issue in macOS Sonoma 14 where Safari may save photos to an unprotected location due to insecure handling of temporary files. Red Hat and multiple security feeds confirm the vulnerability exists in macOS Safari components and was addressed by Apple in Sonoma 14 (...
CVE-2024-27882
CVE-2024-27882 describes a permissions issue in macOS where an app may be able to modify protected parts of the file system. The vulnerability is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The available connected documents confirm the same affected product and pa...
CVE-2024-44183
CVE-2024-44183 affects Apple operating systems and is described as a logic error that can lead to denial-of-service when triggered. The NVD entry lists that the issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS So...
CVE-2024-54499
CVE-2024-54499 — Apple ImageIO use-after-free Description: A use-after-free issue in ImageIO was addressed by improved memory management. Processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions (as stated): visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS...
CVE-2025-24116
CVE-2025-24116 relates to an access issue in macOS where an app may bypass Privacy preferences. The issue was mitigated by adding sandbox restrictions and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The available documents do not specify the exact vulnerable com...
CVE-2025-24179
CVE-2025-24179 is tied to a null pointer dereference that Apple fixed by improving input validation. Affected products include iOS 18.3 and iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3, and tvOS 18.3. The vulnerability could allow an atta...