CVE-2023-41987

The CVE-2023-41987 entry concerns a macOS Sonoma 14 vulnerability where an app may access sensitive user data due to insufficient checks. The connected sources (NVD/Red Hat/PRION/CVL) confirm that Apple resolved the issue in macOS Sonoma 14 with a patch that improves checks, addressing a data-acc...

CVE-2023-42949

CVE-2023-42949 affects Apple's platforms (iOS/iPadOS, macOS, watchOS, tvOS) where an app could access edited photos saved to a temporary directory. The description and connected sources consistently state this was addressed by improving data protection, with fixes in iOS 17 / iPadOS 17, macOS Son...

CVE-2024-27806

CVE-2024-27806 affects Apple platforms and was fixed by updated OS versions following improved environment sanitization. Affected: macOS Ventura 13.6.7; macOS Monterey 12.7.5; iOS 16.7.8 and iPadOS 16.7.8; iOS 17.5 and iPadOS 17.5; tvOS 17.5; watchOS 10.5; macOS Sonoma 14.5. Impact: an app may ac...

CVE-2024-40791

The CVE-2024-40791 entry describes a privacy issue where an app could access information about a user’s contacts due to improved private data redaction in log entries. Affected platforms include macOS (Ventura 13.7, Sonoma 14.7, Sequoia 15) and iOS/iPadOS (iOS 17.7, 18; iPadOS 17.7, 18). The root...

CVE-2024-40825

CVE-2024-40825 affects Apple Vision Pro’s visionOS (APFS) and macOS Sequoia; root cause described as inadequate checks that could let a malicious, root-privileged app modify system files. Official sources confirm fixes in visionOS 2 and macOS Sequoia 15. Practical impact is local privilege abuse ...

CVE-2024-44176

CVE-2024-44176 describes an out-of-bounds access leading to a denial-of-service when processing an image. Affected products include macOS Ventura 13.7; macOS Sequoia 15; macOS Sonoma 14.7; iOS 17.7 and iPadOS 17.7; iOS 18 and iPadOS 18; visionOS 2; watchOS 11; tvOS 18. Remediation is via software...

CVE-2024-44282

CVE-2024-44282 is an out-of-bounds read vulnerability that Apple addressed by improving input validation. The issue may allow disclosure of user information when parsing a file. Affected products/versions disclosed in supplied sources include tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iP...

CVE-2024-54471

CVE-2024-54471 affects macOS (Sonoma 14.7.1 and Ventura 13.7.1) where insufficient entitlement checks allowed a malicious application to leak a user’s credentials. The vulnerability stems from entitlement enforcement, and Apple has addressed it by applying additional entitlement checks and releas...

CVE-2024-54494

Root cause: a race condition was addressed with additional validation in CVE-2024-54494. Affected products include Apple operating systems: iPadOS 17.7.3; iOS 18.2; iPadOS 18.2; macOS Sequoia 15.2; macOS Ventura 13.7.2; macOS Sonoma 14.7.2; watchOS 11.2; visionOS 2.2; tvOS 18.2. Issue: an attacke...

CVE-2024-54533

Technical details about CVE-2024-54533 are not publicly provided in the supplied documents. Monitor for official updates from Apple and CVE record maintainers for affected products, impact, and remediation.

CVE-2025-24239

CVE-2025-24239 : In macOS Sequoia, a downgrade issue was addressed by adding more code-signing restrictions. The vulnerability is reported to allow an app to access protected user data. It is fixed in macOS Sequoia 15.4 (Apple security content lists this CVE under AppleMobileFileIntegrity). The i...

CVE-2025-24248

CVE-2025-24248 affects macOS Sequoia 15.4 under the Siri component. It is described as a permissions issue that could allow an app to enumerate devices signed into the user’s Apple Account. Apple fixed this by restricting permissions in macOS Sequoia 15.4. The public description does not provide ...

CVE-2025-24281

CVE-2025-24281 affects macOS Sequoia 15.4. The issue enabled an app to access sensitive user data and was addressed by improved data protection/redaction. Apple’s advisory for macOS Sequoia 15.4 lists CVE-2025-24281 under the Security Content, describing an impact on user data exposure and noting...

CVE-2025-31256

The CVE-2025-31256 issue affects macOS Sequoia 15.5 (Notes hot corner). The vulnerability is described as the hot corner potentially revealing a user’s deleted notes due to improper cache handling, which was fixed in macOS Sequoia 15.5 with improved cache handling. Practical impact is local acces...

CVE-2026-43707

CVE-2026-43707 is a memory corruption vulnerability in WebKit that could cause an unexpected process crash when processing maliciously crafted web content. Apple fixed it in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerability is tied to memory handling in WebKit co...

CVE-2020-27898

CVE-2020-27898 is an Apple macOS vulnerability where a denial of service was addressed through improved state handling, and there is a potential to bypass Managed Frame Protection. The issue is fixed in macOS Big Sur 11.0.1. Public references indicate this CVE is associated with the Wi‑Fi compone...

CVE-2020-9846

CVE-2020-9846 affects Apple macOS Monterey prior to 12.0.1. Description shows a logic/state-management issue that could allow a malicious application to access local users’ Apple IDs. Apple released a fix in macOS Monterey 12.0.1 (per the initial doc). Remediation: update to macOS Monterey 12.0.1...

CVE-2021-30931

CVE-2021-30931 is a logic-issue vulnerability in macOS Bluetooth handling that could allow a malicious application to disclose kernel memory. The issue was mitigated by Apple in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, and Security Update 2021-008 Catalina. Affected components are tied to ker...

CVE-2022-32905

CVE-2022-32905 affects macOS Ventura 13. It allows arbitrary code execution with system privileges when processing a maliciously crafted DMG file, due to insufficient validation of symlinks. The issue is fixed in macOS Ventura 13 via improved symlink validation; mitigation is to update to Ventura...

CVE-2023-40383

The issue CVE-2023-40383 affects macOS Ventura versions prior to 13.3 and is described as a path handling issue that was fixed with improved validation. The vulnerability could allow an app to access user-sensitive data. Apple’s advisory (HT213670) notes the fix is in macOS Ventura 13.3. In pract...

CVE-2024-27872

CVE-2024-27872 relates to macOS Sonoma 14.6 where improved validation of symlinks fixes a vulnerability that could allow an app to access protected user data. The underlying issue is a symlink handling weakness, and Apple’s advisory confirms the fix in Sonoma 14.6. Public references indicate the ...

CVE-2024-44215

CVE-2024-44215 affects Apple OS families. The issue arises when processing an image, which may disclose process memory. Affected products/versions include tvOS 18.1; iOS 18.1 and iOS 17.7.1 (iPadOS same); macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The descriptio...

CVE-2024-54469

CVE-2024-54469 is an Apple macOS/iOS/iPadOS/visionOS vulnerability where improved checks fixed a local information-leak issue. Affected platforms include macOS Ventura 13.7, macOS Sequoia 15, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. The vulnerability allows a local user to leak sensit...

CVE-2024-54493

CVE-2024-54493 corresponds to a privacy-indicator issue for microphone access in macOS prior to 15.2, resolved by improved state management. The affected product is macOS Sequoia, with the fix released in Sequoia 15.2. The root cause is described as incorrect attribution of microphone-access indi...

CVE-2024-54504

CVE-2024-54504 describes a privacy issue in macOS Sequoia where log entries could reveal user-sensitive data. The vulnerability is fixed in macOS Sequoia 15.2; update to Sequoia 15.2 or later to remediate. CVSS 3.1/3.1 metrics indicate a Local, Low-Complexity issue with Low Privileges, but High C...

CVE-2024-54518

CVE-2024-54518: Root cause is an insufficient bounds-check in a component that can affect coprocessor memory. The issue is fixed by Apple in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. Affected products scope is Apple OS family; no exploit details are provided in the so...

CVE-2024-54531

CVE-2024-54531 affects macOS Sequoia 15.2 (and earlier) with a local, low-privilege vector. Root cause: improper memory handling that could enable bypass of kASLR. Impact: potential elevation of local privileges due to bypassing address space layout randomization. Remediation: Apple lists Sequoia...

CVE-2025-31244

CVE-2025-31244 affects macOS Sequoia 15.5 where a file quarantine bypass could allow a sandbox to be broken. The Apple advisory records the issue as a quarantine bypass addressed with additional checks and fixed in macOS Sequoia 15.5 (the description explicitly notes the sandbox bypass risk and t...

CVE-2026-20654

CVE-2026-20654 is a kernel memory-handling issue fixed in Apple OS updates 26.3 across iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. The vulnerability could cause an unexpected system termination; Apple documents the fix as improved memory handling. Exploitation details are not provided ...

CVE-2020-27901

The CVE-2020-27901 issue is an Apple macOS sandbox-related logic flaw where a sandboxed process could circumvent sandbox restrictions. Technical details across connected sources show the vulnerability as a sandbox bypass affecting macOS Big Sur and earlier releases, with the root cause described ...

CVE-2021-1755

CVE-2021-1755 describes a lock-screen access issue that could allow access to contacts on a locked device (iOS and macOS contexts in the sources). The vulnerability is addressed with improved state management and is fixed in macOS Big Sur 11.0.1. Connected records confirm the incident involves lo...

CVE-2023-28207

The CVE affects Apple macOS: Ventura 13.3, Monterey 12.6.4, and Big Sur 11.7.5. The issue involves a plug-in that may inherit application permissions and access user data. The fix is described as implemented via “improved checks.” Root cause and specific vulnerable component aren’t explicitly det...

CVE-2023-38615

CVE-2023-38615 affects macOS Sonoma 14 and is described as a memory handling issue that may allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed in macOS Sonoma 14, per Apple’s security content (HT213940/HT213940 KB references) and the NVD entry. Root caus...

CVE-2023-40407

CVE-2023-40407 affects macOS Sonoma 14 and is addressed by Apple with improved bounds checks. The vulnerability allows a remote attacker to cause a denial-of-service. The CVE appears across multiple Apple subsystems as listed in the sources, with remediation being macOS Sonoma 14 or later updates...

CVE-2023-42918

CVE-2023-42918 affects macOS, with a permissions issue that could let a sandboxed process bypass sandbox restrictions. It is fixed in macOS Sonoma 14. The vulnerability’s description and connected records confirm the issue centers on sandbox permission checks and its remediation is upgrading to S...

CVE-2023-42959

CVE-2023-42959 affects macOS prior to Sonoma through a race condition that was addressed by improved state handling. The vulnerability could allow an app to execute arbitrary code with kernel privileges when running on affected macOS versions. Apple’s security content for macOS Sonoma 14 confirms...

CVE-2023-42977

CVE-2023-42977 concerns a path-handling issue in Apple platforms that could allow an app to break out of its sandbox. The connected documents specify that the vulnerability affects Apple iOS prior to 17 and iPadOS prior to 17, and macOS Sonoma prior to 14, with the root cause described as a path ...

CVE-2024-27869

The CVE-2024-27869 issue affects Apple platforms and is described as a vulnerability where an app may be able to record the screen without an indicator. The connected sources indicate the root cause is addressed by improved checks, with fixes implemented in iOS 18, iPadOS 18, and macOS Sequoia 15...

CVE-2024-27873

CVE-2024-27873 is an out-of-bounds write vulnerability in Apple software where processing a maliciously crafted video file may cause an app to terminate. The vulnerability is addressed by input validation improvements and is fixed in multiple Apple OS updates: iOS 16.7.9 and iPadOS 16.7.9, macOS ...

CVE-2024-44144

The CVE-2024-44144 issue is a buffer overflow vulnerability in Apple platforms where insufficient size validation could be triggered by processing a malicious file. Root cause: improved size validation fixes the overflow. Affected products/versions are explicit in the sources: iOS 17.7.1 and iPad...

CVE-2024-44148

CVE-2024-44148 : Apple macOS Sequoia 15 fixes a sandbox escape caused by insufficient validation of file attributes. The issue allowed an app to break out of its sandbox, and Apple attributes the fix to improved validation of file attributes in macOS Sequoia 15. Public references note the vulnera...

CVE-2024-44154

CVE-2024-44154 affects macOS components (Apple Graphics Control entry in macOS Sonoma 14.7 and macOS Sequoia 15). The issue is described as a memory initialization problem addressed by improved memory handling, with the impact that processing a maliciously crafted file may cause an application to...

CVE-2024-44161

CVE-2024-44161 is an out-of-bounds read vulnerability in macOS texture processing that could cause an application to terminate if a maliciously crafted texture is processed. The issue is mitigated by improved bounds checking and is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia...

CVE-2024-44218

CVE-2024-44218 affects Apple platforms. The issue, resolved by improved checks, can lead to heap corruption when processing a maliciously crafted file. It is fixed in iOS 17.7.1, iPadOS 17.7.1, iOS 18.1, iPadOS 18.1, and macOS Sonoma 14.7.1. Remediation is upgrading to these versions.

CVE-2024-44265

CVE-2024-44265 : The issue affects macOS where an attacker with physical access could input Game Controller events to apps running on a locked device. Apple mitigated this by restricting options offered on a locked device, with the fix delivered in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Th...

CVE-2025-24101

CVE-2025-24101 affects macOS Sequoia 15.3 (Messages). The issue could allow an app to access user‑sensitive data due to insufficient redaction in certain data handling; Apple fixed it in macOS Sequoia 15.3 by improving redaction. No exploitation details are provided in the supplied documents.

CVE-2025-24262

Summary of CVE-2025-24262: A privacy issue in macOS Sequoia 15.4 involved improved private data redaction for log entries, because a sandboxed app may have accessed sensitive user data in system logs. The issue is fixed in macOS Sequoia 15.4. The available sources (NVD/NVDC and Apple security not...

CVE-2025-31241

The CVE-2025-31241 entry describes a memory-management vulnerability (double free) in Apple platforms that could cause an app to terminate. Affected products include iOS 18.5, iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and w...

CVE-2025-31242

CVE-2025-31242 relates to a privacy issue addressed by improved private data redaction for log entries. Affected platforms and fixes: iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. The issue could let an app access sensitive user data. CVSS 3.1 base score: 5.5 (Loca...

CVE-2025-31245

The CVE-2025-31245 issue affects Apple platforms including iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, and visionOS 2.5. It is described as caused by insufficient checks, with the public description stating that an app may be ...