CVE-2024-40832

The CVE-2024-40832 vulnerability affects macOS Sonoma, specifically within the Messages component. It could allow an app to view a contact’s phone number in system logs. The issue is fixed in macOS Sonoma 14.6 through improved checks. The CVSS data from NVD/CISA indicates a LOW-severity, local, u...

CVE-2024-44170

CVE-2024-44170 describes a privacy issue in Apple platforms where sensitive data was moved to a more secure location. Technical details across connected documents indicate the vulnerability affects iOS 18, iPadOS 18, watchOS 11, and macOS Sequoia 15, with the underlying impact being risk to user-...

CVE-2024-44188

CVE-2024-44188 is a permissions issue in macOS that could allow an app to access protected user data. The vulnerability is fixed in macOS Sequoia 15; older macOS versions are affected. Multiple connected sources (NVD, Red Hat, Apple advisories, Nessus plugin notes, and PT Security) corroborate th...

CVE-2024-54474

CVE-2024-54474 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. An app may access user-sensitive data due to insufficient checks; fixed by Apple in the listed updates. CVSSv3.1 base score 5.5 (LOCAL, LOW complexity, LOW privileges, no user interaction) with high confiden...

CVE-2024-54541

The CVE-2024-54541 entry affects Apple platforms and is addressed by patches in multiple OS updates. Affected products include macOS Ventura 13.7.2; macOS Sonoma 14.7.2; macOS Sequoia 15.2; visionOS 2.2; tvOS 18.2; watchOS 11.2; iOS 18.2; and iPadOS 18.2. Description indicates an app may access u...

CVE-2024-54560

CVE-2024-54560 is a logic issue addressed by Apple across multiple platforms. According to connected sources, the vulnerability could allow a malicious application to modify other apps without the App Management permission. The fix is included in macOS Sequoia 15, iOS 18, iPadOS 18, watchOS 11, a...

CVE-2025-24111

CVE-2025-24111 is a memory corruption issue addressed by Apple. Apple’s advisories indicate the fix is included in macOS Sequoia 15.3, visionOS 2.3, iPadOS 17.7.7, watchOS 11.3, macOS Sonoma 14.7.5, iOS 18.3, iPadOS 18.3, tvOS 18.3 and macOS Ventura 13.7.5. The description notes an improved state...

CVE-2025-31189

CVE-2025-31189 describes a file quarantine bypass in macOS that could allow a sandboxed app to break out of its sandbox. The issue is fixed in macOS releases: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The CVE is rated with a high impact and a local attack vector, requiring user interaction...

CVE-2025-31208

CVE-2025-31208 affects multiple Apple operating systems. The issue, triggered during file parsing, may cause an unexpected app termination. It is fixed in iOS 18.5, iPadOS 18.5/17.7.7, macOS Sequoia 15.5, Sonoma 14.7.6, Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and watchOS 11.5. CVSS indicates a h...

CVE-2025-31237

The CVE-2025-31237 issue affects macOS network file handling (AFP) and is addressed in macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. According to the provided sources, mounting a maliciously crafted AFP network share may lead to system termination, caused by an underlying iss...

CVE-2025-43501

CVE-2025-43501 affects WebKitGTK/WebKitGTK4. The connected advisories document a buffer overflow in processing malicious web content that can lead to an unexpected process crash in affected GTK-based WebKit runtimes. The issue is fixed in WebKitGTK/WebKitGTK4 by version 2.50.4 (and related packag...

CVE-2022-32936

CVE-2022-32936 is an out-of-bounds read vulnerability in macOS whose impact could allow an app to disclose kernel memory. The issue was mitigated by improved input validation and is fixed in macOS Ventura 13 (Apple security content entry HT213488). The CVSS metrics indicate a locally exploitable ...

CVE-2022-42807

CVE-2022-42807 is tied to macOS Ventura 13 where a logic issue in managing Shared Albums could allow a user to accidentally add a participant by pressing Delete. The vulnerability is described across multiple sources (including Apple HT213488 and Red Hat’s RH:CVE entry) as a state-management flaw...

CVE-2022-48504

CVE-2022-48504 concerns macOS Find My data access where an app may access user-sensitive data due to a vulnerability in cache handling. The issue is fixed in macOS Ventura 13, per Apple’s security content (HT213488) and multiple security trackers citing “improved handling of caches.” The vulnerab...

CVE-2023-38610

CVE-2023-38610 is a memory corruption vulnerability associated with Apple's Wi‑Fi component that could allow a local attacker to cause a crash or write kernel memory. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. Connected sources ...

CVE-2023-40411

CVE-2023-40411 affects macOS Sonoma 14. An app may be able to access user-sensitive data due to a FileProvider/data protection weakness. Apple fixed this in macOS Sonoma 14 by improving data protection. The vulnerability is documented across multiple sources (NVD/Red Hat/Security content), all no...

CVE-2023-40422

CVE-2023-40422 affects macOS and macOS Sonoma 14, where a memory-handling issue could allow an app to cause a denial-of-service. Affected product: Apple macOS family; root cause: improved memory handling in Sonoma 14 fixes the issue. Impact: local attacker could trigger DoS via the affected compo...

CVE-2023-42929

The CVE-2023-42929 issue affects macOS Sonoma 14, where an app may access protected user data due to a sandbox-related logic/permission check weakness. Red Hat and NVD entries, as well as Apple’s own security content for Sonoma 14 (AppSandbox entry), confirm the vulnerability location and fix. Ro...

CVE-2024-40806

CVE-2024-40806 is an out-of-bounds read in Apple components fixed via input validation. Affected products include macOS (Ventura 13.6.8, Monterey 12.7.6, Sonoma 14.6), iOS/iPadOS (16.7.9, 17.6), watchOS 10.6, tvOS 17.6, and visionOS 1.3. The issue can crash apps when processing a malicious file; ...

CVE-2024-44129

CVE-2024-44129 affects macOS Ventura 13.7 and macOS Sequoia 15. The issue could allow an app to leak sensitive user information due to insufficient checks. Apple fixed it in the listed releases by implementing improved checks. No exploitation status is provided in the connected documents. Remedia...

CVE-2024-44134

CVE-2024-44134 affects macOS Sequoia 15. An app may be able to read sensitive location information due to an issue related to redaction; Apple states the fix is in macOS Sequoia 15. The CVSSv3.1 vector indicates a local attacker with low complexity and low privileges, with high confidentiality im...

CVE-2024-44156

A CVE-2024-44156 in macOS relates to a path deletion vulnerability that could allow an app to bypass Privacy preferences by executing vulnerable code with privileges. The issue is fixed in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Affected component details are not explicitly provided beyond ...

CVE-2024-44227

CVE-2024-44227 affects Apple platforms and is tied to memory handling implementations. The description indicates that an app may cause unexpected system termination or kernel memory corruption, with the root cause described as improved memory handling in the fix. The vulnerability is addressed in...

CVE-2024-54491

CVE-2024-54491 : macOS Sequoia 15.2 fixes a location-privacy issue in logging. The vulnerability allowed a malicious application to determine a user’s current location via logging data. The issue is resolved by sanitizing log output. Affected product/versions and remediation are limited to what i...

CVE-2024-54565

CVE-2024-54565 affects macOS Sequoia (and related macOS components) where an app may be able to access sensitive user data due to insufficient checks. The issue is addressed by Apple in macOS Sequoia 15.2, which includes the fix. The CVSS3.1 base metrics indicate a Low attack complexity local vec...

CVE-2025-24088

CVE-2025-24088 affects Apple macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles. The entries consistently state the issue was fixed in macOS Tahoe 26 by adding additional logic. Impact described as bypassing MDM enforcement; no exploitation details are provided in ...

CVE-2025-24263

The CVE-2025-24263 entry concerns a privacy issue in macOS where sensitive user data could be observed by an unprivileged app. Apple fixed this by moving the data to a protected location, with the issue addressed in macOS Sequoia 15.4. The Apple advisory (Security Content) confirms the impact is ...

CVE-2025-24274

CVE-2025-24274 involves an input validation issue in macOS components remediated by removing vulnerable code. The vulnerability is fixed in macOS updates: Ventura 13.7.6, Sequoia 15.5, and Sonoma 14.7.6. According to the sources, a malicious application could potentially gain root privileges as a...

CVE-2025-31212

CVE-2025-31212 is fixed in Apple platforms: watchOS 11.5, tvOS 18.5, iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The underlying issue is described as improved state management, with an app potentially accessing sensitive user data. The CVSS v3.1 vector indicates a Local attack wi...

CVE-2025-31232

The CVE-2025-31232 entry describes a logic issue that allowed a sandboxed app to potentially access sensitive user data. The issue is mitigated by updates in macOS releases: Ventura 13.7.6, Sequoia 15.5, and Sonoma 14.7.6. The primary cause is a logic flaw; no exploit details are provided in the ...

CVE-2025-31247

CVE-2025-31247 involves a logic issue addressed by improved state management. Affected Apple platforms are macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. The vulnerability could allow an attacker to access protected parts of the file system. Remediation is provided by the list...

CVE-2025-31264

The CVE-2025-31264 entry concerns an authentication issue in macOS devices where improved state management fixes allow viewing sensitive user information on a locked device. Affected products and fixes identified in connected sources include macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Son...

CVE-2025-43346

CVE-2025-43346 is an out-of-bounds access vulnerability addressed by improved bounds checking. It affects Apple platforms as specified in the sources: tvOS 26, watchOS 26, iOS 26, iPadOS 26, visionOS 26, and iOS 18.7 / iPadOS 18.7. The underlying cause is insufficient boundary checking when proce...

CVE-2021-30904

CVE-2021-30904 affects macOS Monterey 12.0.x in the Apple Messages sync flow. The issue is a sync/state validation bug that could allow a user’s messages to continue syncing after signing out of iMessage. Apple fixed this in macOS Monterey 12.0.1 (per HT212869). Connected feeds corroborate the de...

CVE-2022-46710

CVE-2022-46710 covers a logic issue in iCloud Photo Library where Location data may be shared via iCloud links even if Location metadata is disabled in the Share Sheet. Affected: iOS 16.2, iPadOS 16.2, and macOS Ventura 13.1 (and related Apple security content). Root cause: improper checks around...

CVE-2022-48577

CVE-2022-48577 is an Apple macOS Ventura 13 local access issue in the APFS component where an app may access user‑sensitive data due to improved access restrictions. The vulnerability allows a local attacker with low complexity and no privileges to access sensitive data after user interaction. It...

CVE-2023-32401

CVE-2023-32401 affects macOS where parsing an Office document could cause an app to terminate or execute arbitrary code due to a buffer overflow. Affected OS versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.7, and macOS Ventura 13.4, where Apple patched the issue by improving bounds che...

CVE-2023-42943

CVE-2023-42943 affects macOS Sonoma 14 and relates to a privacy issue where private location data could be read from log entries. The underlying cause is improved redaction of sensitive location information in logs. The vulnerability is classified with a Local attack vector and Low attack complex...

CVE-2023-42948

CVE-2023-42948 affects macOS, with the underlying issue described as a Wi‑Fi password not being deleted when activating a Mac in macOS Recovery. Connected sources confirm the root cause as suboptimal state management and state handling improvements. The vulnerability is addressed in macOS Sonoma ...

CVE-2024-27861

The CVE-2024-27861 entry concerns a memory handling issue in macOS Sequoia 15 where an app could read restricted memory. The vulnerability is fixed in macOS Sequoia 15; affected systems prior to the update are at risk of local memory access. Mitigation per sources: update to macOS Sequoia 15 (or ...

CVE-2024-40807

CVE-2024-40807 addresses a logic issue that allowed a shortcut to access sensitive data via certain actions without user prompting. The connected sources identify the root cause as a logic issue, and specify the fix as implemented in macOS updates: Sonoma 14.6, Monterey 12.7.6, and Ventura 13.6.8...

CVE-2024-44239

The CVE-2024-44239 entry describes an information-disclosure issue where private data in log entries could leak sensitive kernel state. It affects multiple Apple platforms and is fixed in specific versions: tvOS 18.1, iOS 18.1 and iPadOS 18.1; iOS 17.7.1 and iPadOS 17.7.1; macOS Ventura 13.7.1 an...

CVE-2024-44281

CVE-2024-44281 : An out-of-bounds read was addressed by improved input validation. The issue could lead to disclosure of user information when parsing a file. Affected fixed versions include macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. The vulnerability description does not specify a vendor prod...

CVE-2024-54476

CVE-2024-54476 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. Root cause: improved checks that mitigate an issue where an app could access user‑sensitive data. Impact: unauthorized data access. Remediation: apply the published macOS updates (Sequoia 15.2, Ventura 13.7....

CVE-2024-54522

CVE-2024-54522 affects Apple platforms (macOS Sequoia 15.2; watchOS 11.2; tvOS 18.2; iOS 18.2; iPadOS 18.2). The issue is described as an out-of-bounds/bounds-check problem that could allow an app to corrupt coprocessor memory. Apple lists the fix as part of the 18.2/Sequoia 15.2 security updates...

CVE-2024-54558

CVE-2024-54558 describes a clickjacking issue related to out-of-process view handling. The flaw could allow an app to trick a user into granting access to the Photos Library. It affects Apple platforms and is fixed in macOS Sequoia 15, iOS 18, and iPadOS 18. The CVE’s base metrics show a low seve...

CVE-2025-24087

CVE-2025-24087 affects macOS Sequoia 15.3, specifically the AppKit component. The issue arises from insufficient permission checks that could allow an app to access protected user data. Apple fixed the vulnerability in macOS Sequoia 15.3 by adding/strengthening permissions checks. Practical impac...

CVE-2025-31196

CVE-2025-31196 describes an out-of-bounds read mitigated by improved input validation. The issue can be triggered by processing a maliciously crafted file, potentially causing a denial-of-service or memory contents disclosure. Affected products: Apple iPadOS, macOS (Ventura 13.7.6, Sonoma 14.7.6)...

CVE-2025-31226

CVE-2025-31226 describes a logic issue fixed by Apple in specific OS updates. Processing a maliciously crafted image could lead to a denial-of-service. Affected products/versions include watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5; remedi...

CVE-2025-31234

CVE-2025-31234: The issue is fixed by OS updates (visionOS 2.5, iOS 18.5 / iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5) after improved input sanitization. The effect could be unexpected system termination or kernel memory corruption. Connected sources confirm updated platforms and published adviso...