CVE-2025-31242

CVE-2025-31242 relates to a privacy issue addressed by improved private data redaction for log entries. Affected platforms and fixes: iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. The issue could let an app access sensitive user data. CVSS 3.1 base score: 5.5 (Loca...

CVE-2025-31245

The CVE-2025-31245 issue affects Apple platforms including iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, and visionOS 2.5. It is described as caused by insufficient checks, with the public description stating that an app may be ...

CVE-2020-27939

CVE-2020-27939 affects macOS ImageIO in supported Apple OS releases. A memory corruption issue in processing a maliciously crafted image was addressed by Apple with improved input validation, and is fixed in macOS Big Sur 11.1 as well as Security Update 2020-001 Catalina and Security Update 2020-...

CVE-2023-35984

CVE-2023-35984 describes a limited out-of-bounds write that can be triggered by an attacker in physical proximity. The issue is fixed in Apple OS updates: tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The public description lists the vulnerability impact as a proximity-based write ...

CVE-2023-38614

CVE-2023-38614 concerns a permissions issue in Apple platforms. The vulnerability could allow an app to access sensitive user data but is mitigated by the fixes in Apple iOS 17 / iPadOS 17 and macOS Sonoma 14. Connected documents confirm the affected products and that the issue has been addressed...

CVE-2023-39233

CVE-2023-39233 affects macOS Sonoma 14 where processing web content could disclose sensitive information. The vulnerability was addressed in Sonoma 14 by improving checks in the relevant code paths, effectively mitigating the information disclosure. The CVE entry notes a fixed in macOS Sonoma 14 ...

CVE-2024-40803

CVE-2024-40803 is a type confusion flaw reported for macOS components. It is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The issue could allow an attacker to cause an unexpected app termination. Affected products/versions are explicitly listed in the sources; the ...

CVE-2024-44131

CVE-2024-44131 concerns Apple’s FileProvider symlink handling. The issue arises from improper validation of symlinks, enabling a malicious app running with elevated file operation privileges to access or exfiltrate data via symlink manipulation. Apple states fixes are in iOS 18, iPadOS 18, and ma...

CVE-2024-44152

CVE-2024-44152 affects macOS, with Apple stating a privacy issue where private data in log entries could be exposed. The root cause is improper redaction of user-sensitive information in logs, and the issue is addressed in macOS Sequoia 15. The vulnerability entry notes that an app may be able to...

CVE-2024-44159

CVE-2024-44159 affects macOS by a path-deletion vulnerability that could allow a local attacker to bypass Privacy preferences. The issue is mitigated by preventing vulnerable code from running with privileges and is fixed in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Affected component/behavio...

CVE-2024-44175

CVE-2024-44175 affects macOS, where the issue arises from insufficient validation of symbolic links. The vulnerability could allow an app to access sensitive user data. The fixed versions are macOS Sequoia 15 and macOS Sonoma 14.7.1, which address the flawed symlink handling with improved validat...

CVE-2024-44198

CVE-2024-44198 : An integer overflow was mitigated via improved input validation. Affected products include visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18; iPadOS 18; tvOS 18. Processing maliciously crafted web content may crash the process. Remediation is to upgrade to the fixed versions liste...

CVE-2024-44297

The CVE-2024-44297 issue is resolved by Apple in multiple platforms. Affected products include tvOS 18.1; iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; macOS Ventura 13.7.1 and macOS Sonoma 14.7.1; watchOS 11.1; and visionOS 2.1. The vulnerability arises from insufficient bounds checks ...

CVE-2024-54509

CVE-2024-54509 is an out-of-bounds write issue in macOS kernel/user boundaries resolved by input-validation hardening. Affected product: macOS Sonoma (14.7.2 and 14.7.3 fix) and macOS Sequoia (15.2 fix). Impact as described: an app may terminate the system or write to kernel memory. The Apple sec...

CVE-2025-24157

CVE-2025-24157 is a buffer overflow issue addressed by Apple. The vulnerability affects macOS platforms and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The issue could allow an app to terminate the system unexpectedly or corrupt kernel memory.

CVE-2025-31217

CVE-2025-31217 involves memory-safe crashes in Safari-related processing of web content caused by insufficient input handling. The issue is addressed in Safari 18.5 and is fixed across Apple platforms: iOS 18.5, iPadOS 18.5, watchOS 11.5, tvOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The vulne...

CVE-2026-20676

CVE-2026-20676 is a WebKit/WebKitGTK tracking vulnerability where a website may track users via Safari web extensions. The connected documents indicate fixes in Safari 26.3 and corresponding OS versions (iOS/iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3) and related package updates (e.g., webkitgt...

CVE-2023-32436

CVE-2023-32436 affects macOS Ventura 13.3 and earlier, where an issue that could trigger out-of-bounds conditions allowed an app to cause unexpected system termination or write kernel memory. The root cause is improved bounds checks. The fix is macOS Ventura 13.3 (and related Apple updates). The ...

CVE-2023-42830

CVE-2023-42830 describes a privacy issue where an application may read sensitive location information due to insufficient redaction in log entries. The vulnerability was addressed by improved private data redaction and is fixed in: macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4. The public documen...

CVE-2024-40827

CVE-2024-40827 : The vulnerability is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The issue allowed an app to overwrite arbitrary files due to improved checks. No exploitation details are provided in the supplied documents; the impact is described as local and req...

CVE-2024-40856

CVE-2024-40856 affects Apple platforms (iOS 18, iPadOS 18, tvOS 18, macOS Sequoia 15). Root cause: an integrity issue addressed by Beacon Protection that could allow an attacker to force a device to disconnect from a secure network. Impact: network disconnection vulnerability as described; no exp...

CVE-2024-44179

CVE-2024-44179 affects Apple devices running iOS 17.7/iPadOS 17.7, iOS 18, and iPadOS 18, plus macOS Sequoia 15. The issue arises from restrictions on options offered on a locked device, potentially allowing an attacker with physical access to read contact numbers from the lock screen. Apple fixe...

CVE-2024-44206

An issue in the handling of URL protocols (CVE-2024-44206) may allow bypassing some web content restrictions. It is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6, iPadOS 17.6, and macOS Sonoma 14.6. Affected products include Apple ecosystem components; remediation is to up...

CVE-2024-44213

The CVE-2024-44213 issue stems from URL parsing with insufficient input validation in macOS. An attacker in a privileged network position may leak sensitive user information due to this flaw. Apple fixes are in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1, addressing the vulnerability by improvin...

CVE-2025-31266

The CVE-2025-31266 entry concerns a spoofing vulnerability in Safari/macOS where the domain name could be displayed inaccurately in a pop-up window’s title due to improper truncation. Connected sources confirm the affected products are Safari 18.5 and macOS Sequoia 15.5 and state that the issue w...

CVE-2026-20660

CVE-2026-20660 is a path handling vulnerability in Apple software that enables a remote user to write arbitrary files through a path handling issue exposed in CFNetwork’s NSGZipDecoder flow. The issue is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS Sequoia 15.7....

CVE-2022-48575

The CVE-2022-48575 issue affects macOS Monterey due to a consistency/state-handling defect that may allow a person with physical access to bypass the Login Window. The Apple security content notes this as fixed in macOS Monterey 12.4. Affected component: Login Window handling; root cause: improve...

CVE-2023-28189

CVE-2023-28189 affects macOS: Big Sur 11.7.5, Monterey 12.6.4, and Ventura 13.3 (and presumably earlier builds) with an information disclosure issue where an app may view sensitive data. The entry states the vulnerability was addressed by improved checks and is fixed in the listed macOS releases....

CVE-2024-40771

CVE-2024-40771: Apple iOS/iPadOS/macOS/watchOS/tvOS/visionOS kernel-privilege code execution vulnerability addressed by memory-handling improvements. Fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, visionOS 1.2, iOS 16.7.8 / iPadOS 16.7.8, iOS 17.5 / iPadOS 17.5, watchOS ...

CVE-2024-40801

CVE-2024-40801 describes a permissions issue in macOS that could allow an app to access protected user data. Technical detail across sources shows this is addressed by Apple in macOS Sonoma 14.7 and macOS Sequoia 15. The mitigation is upgrading to those respective versions or applying the provide...

CVE-2024-40838

CVE-2024-40838 describes a privacy issue in macOS Sequoia 15 where sensitive data was moved to a protected location, potentially allowing a malicious app to access notifications from the user’s device. The NVD/NVD-derived entries confirm the issue is fixed in macOS Sequoia 15, with an impact prof...

CVE-2024-44123

CVE-2024-44123 is a permissions-related issue affecting macOS Sequoia 15, iOS 18 and iPadOS 18. A malicious app with root privileges may access keyboard input and location information without user consent. The vulnerability is addressed in the specified OS updates (macOS Sequoia 15, iOS 18, iPadO...

CVE-2024-44168

CVE-2024-44168 involves a library injection issue that could allow an app to modify protected parts of the file system. Public documents confirm the vulnerability affects macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The root cause is described as a library injection issue addressed b...

CVE-2024-44294

CVE-2024-44294 describes a path deletion vulnerability in macOS that could allow an attacker with root privileges to delete protected system files. The issue is mitigated by code changes that prevent vulnerable operations from running with elevated privileges. Apple fixed this in macOS Ventura 13...

CVE-2024-54490

CVE-2024-54490 affects macOS Sequoia prior to 15.2, where a local attacker could gain access to a user’s Keychain items. The issue is fixed in macOS Sequoia 15.2 by enabling hardened runtime, per Apple/NVD entries. The NVD score indicates a local, low-complexity, low-privilege-access vector with ...

CVE-2024-54516

CVE-2024-54516 describes a permissions issue in macOS where an app may be able to approve a launch daemon without user consent. Concrete details in connected sources show the vulnerability affects macOS Sonoma 14.7.2 and macOS Sequoia 15.2, with an issue fixed in those updates. The underlying ris...

CVE-2025-31261

CVE-2025-31261 is a permissions issue in macOS where an app may access protected user data. It is addressed by applying stronger sandbox restrictions and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. Objective details on affected components/versions beyond the pat...

CVE-2025-43226

CVE-2025-43226: An out-of-bounds read fixed by improved input validation. Affected: watchOS 11.6; iOS 18.6 and iPadOS 18.6; iPadOS 17.7.9; tvOS 18.6; macOS Sequoia 15.6; macOS Sonoma 14.7.7; visionOS 2.6. Issue arises while processing a malicious image and may disclose process memory. Remediation...

CVE-2025-46299

CVE-2025-46299 affects Apple platforms including tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2, iPadOS 26.2, and macOS Tahoe 26.2. Description: a memory initialization issue was addressed by improved memory handling; processing malicious web content could disclose internal applica...

CVE-2026-43676

CVE-2026-43676 affects WebKit-related components used in Safari/WebKit on macOS Tahoe and iOS/iPadOS, with an out-of-bounds access issue addressed by improved bounds checking. The vulnerability leads to potential crashes when processing malicious web content, and is fixed in Safari 26.5.2 (and re...

CVE-2026-43699

CVE-2026-43699 is a use-after-free vulnerability in WebKit-related components that could be triggered by processing malicious web content, potentially causing an unexpected process crash. The issue is addressed with memory-management fixes and is fixed in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2...

CVE-2026-43706

CVE-2026-43706 is a memory-management defect (double free) in libxslt affecting macOS Tahoe 26.5.2, iOS 26.5.2, and iPadOS 26.5.2. The root cause is a double-free in processing malicious web content, which may cause an unexpected process crash. Apple lists libxslt as the vulnerable component with...

CVE-2022-42814

CVE-2022-42814 describes a logic issue in macOS that could allow an app to access user‑sensitive data. The Initial and connected records confirm this as a macOS vulnerability fixed in macOS Ventura 13. The primary affected component is macOS (Apple’s OS), with the fix implemented in Ventura 13. T...

CVE-2022-42833

CVE-2022-42833 affects macOS Ventura 13. The issue is an out-of-bounds read that was addressed with improved input validation, potentially allowing an app to execute arbitrary code with kernel privileges. Remediation: update to macOS Ventura 13 (or later) where the fix is applied. Note: Public do...

CVE-2022-46721

CVE-2022-46721 affects macOS Ventura 13, where a memory handling issue could allow an unprivileged app to trigger arbitrary code execution with kernel privileges. Apple’s security content labels the fix as an improved memory handling update that resolves the vulnerability in macOS Ventura 13. Pub...

CVE-2023-40411

CVE-2023-40411 affects macOS Sonoma 14. An app may be able to access user-sensitive data due to a FileProvider/data protection weakness. Apple fixed this in macOS Sonoma 14 by improving data protection. The vulnerability is documented across multiple sources (NVD/Red Hat/Security content), all no...

CVE-2023-41079

CVE-2023-41079 affects macOS Sonoma 14 where an app may bypass Privacy preferences due to flawed permissions logic. The issue is fixed in macOS Sonoma 14 (Apple HT213940). Public references describe a local bypass of Privacy/TCC controls with no listed exploit details. The NVD entry mirrors the d...

CVE-2023-42865

CVE-2023-42865 affects Apple platforms (macOS Ventura 13.3, tvOS 16.4, iOS 16.4, iPadOS 16.4, watchOS 9.4). Description: an out-of-bounds read was addressed by improved input validation, with the impact described as potential disclosure of process memory when processing an image. Affected compone...

CVE-2023-42881

CVE-2023-42881 (Apple macOS Sonoma 14.2) affects the AppleVA component on macOS Monterey/Sonoma line? The provided data show macOS Sonoma 14.2 fixes this issue. The vulnerability arises when processing a file, with memory handling-related bug leading to unexpected app termination or arbitrary cod...

CVE-2024-27887

CVE-2024-27887 affects macOS Sonoma prior to version 14.4. The issue is described as a path handling problem that was addressed by improved validation, with the fix shipped in macOS Sonoma 14.4. Impact per sources: an app may be able to access user-sensitive data. The vulnerability is mitigated b...