CVE-2025-31226

CVE-2025-31226 describes a logic issue fixed by Apple in specific OS updates. Processing a maliciously crafted image could lead to a denial-of-service. Affected products/versions include watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, and visionOS 2.5; remedi...

CVE-2025-31263

CVE-2025-31263 affects macOS Sequoia prior to 15.4 where an application may corrupt coprocessor memory due to an improved memory handling fix being implemented in macOS Sequoia 15.4. The entry lists the vulnerability as high impact with a CVSS 3.1 base score of 9.1 (I:H, A:H) and network attack v...

CVE-2022-26730

The CVE-2022-26730 issue is a memory corruption vulnerability in the processing of ICC profiles in macOS. It states that processing a maliciously crafted image may lead to arbitrary code execution and that Apple addressed it by improving input validation, with a fix in macOS Ventura 13. The avail...

CVE-2022-47915

CVE-2022-47915 affects macOS Ventura 13, where an app may be able to execute arbitrary code with kernel privileges due to a memory handling issue. The fix is implemented in macOS Ventura 13 via improved memory handling. Public references in the dataset consistently frame this as a kernel‑level me...

CVE-2023-40437

CVE-2023-40437 concerns a privacy issue in Apple platforms where an app may read sensitive location data due to insufficient private data redaction in log entries. The vulnerability is addressed in iOS 16.6 and iPadOS 16.6, and macOS Ventura 13.5, with Apple stating improved private data redactio...

CVE-2023-43010

CVE-2023-43010 stems from a WebKit/Web content memory handling issue that could lead to memory corruption. Affected products include Apple WebKit/WebKit-based components in iOS, iPadOS, and macOS (e.g., Safari) with reported impact when processing malicious web content. The issue is mitigated by ...

CVE-2024-40833

CVE-2024-40833 is a logic-issue vulnerability fixed by Apple in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8, and iOS/iPadOS 16.7.9. The issue allows a Shortcut to access sensitive data from certain actions without user prompts. The description notes improved checks as the fix. ...

CVE-2024-40843

CVE-2024-40843 affects macOS Sequoia 15. The issue involves an app potentially modifying protected parts of the file system. Root cause: insufficient checks that allowed modification of protected filesystem areas. Impact: local privilege/unauthorized access risk in macOS 15 environments. Remediat...

CVE-2024-44135

This CVE (CVE-2024-44135) concerns a permissions issue in macOS that could allow an app to access protected files inside an App Sandbox container. The vulnerability is fixed in macOS Sonoma 14.7 and macOS Sequoia 15; the underlying cause relates to insufficient permission restrictions, and the is...

CVE-2024-44158

Apple CVE-2024-44158 concerns a flaw where a shortcut could output sensitive user data without consent. The public description cites fixes in iOS 17.7 and iPadOS 17.7, macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue appears to be addressed by improved redaction of sensitive...

CVE-2024-44163

CVE-2024-44163 affects macOS, with fixes in macOS Sequoia 15, macOS Sonoma 14.7, and macOS Ventura 13.7. The issue is described as being mitigated by improved checks, permitting a malicious application to access private information. The connected sources confirm the same remediation and version t...

CVE-2024-44236

CVE-2024-44236 affects Apple macOS; the issue is an out-of-bounds access fixed by updated bounds checking. Affected versions are macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Impact described: processing a maliciously crafted file may cause unexpected application termination. Remediation per the ...

CVE-2024-44270

CVE-2024-44270 concerns macOS: a logic issue addressed with improved validation. The vulnerability is fixed in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. A sandboxed process may be able to circumvent sandbox restrictions, per the CVE description. Affected product/impact summary: macOS sandboxi...

CVE-2024-44284

CVE-2024-44284 is a reported out-of-bounds write issue that Apple addressed by improving input validation. The connected documents indicate fixes are included in macOS updates: macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. The vulnerability could cause an unexpected application termination when p...

CVE-2024-44289

CVE-2024-44289 affects macOS (macOS Ventura 13.7.1 and macOS Sonoma 14.7.1) and concerns a privacy issue where private data redaction for log entries could fail, allowing an app to read sensitive location information. The vulnerability is described in the initial CVE record and is corroborated by...

CVE-2024-54465

CVE-2024-54465 is a logic issue addressed by macOS Sequoia 15.2; an app may be able to elevate privileges. The vulnerability is fixed in Sequoia 15.2; CVSS 3.1 indicates high impact. Remediation: update to macOS Sequoia 15.2 (and linked advisories corroborate fix). Exploitation details are not pr...

CVE-2024-54488

CVE-2024-54488 is an Apple logic-issue vulnerability in file handling that allows viewing photos in the Hidden Photos Album without authentication. Affected products include macOS Ventura 13.7.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2, iOS 18.2, and iPadOS 18.2 (also iPadOS 17.7.3). Root cause p...

CVE-2025-30440

CVE-2025-30440 affects macOS with a patch in macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. The issue allows an app to bypass Address Space Layout Randomization (ASLR) and is categorized as a local issue with no user interaction in the CVSS summary. Remediation is to update to...

CVE-2025-43347

CVE-2025-43347 affects Apple OS ecosystem and was addressed by removing the vulnerable code. The NVD entry states the fix is in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26, with an input validation issue also addressed. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

CVE-2026-20656

A logic issue in the Safari component could allow an app to access a user’s Safari history when visiting a specially crafted website. Affected platforms include Safari on macOS (Tahoe 26.3) and WebKit-based components, and iOS/iPadOS versions 18.7.5, plus Safari 26.3 for Apple devices. The root c...

CVE-2023-37448

CVE-2023-37448 – A lock screen issue in macOS Sonoma 14 could allow viewing restricted content due to insufficient state management. The vulnerability is addressed in macOS Sonoma 14 (remediation: upgrade to Sonoma 14 or later). Connected sources consistently describe the issue and confirm the fi...

CVE-2024-40845

CVE-2024-40845 affects Apple macOS through an AppleGraphicsControl memory handling issue that can cause an application to terminate when processing a maliciously crafted video file. The public description specifies a fix in macOS Sonoma 14.7 and macOS Sequoia 15. The CVE is rated with LOCAL attac...

CVE-2024-44126

CVE-2024-44126 affects Apple ARKit components on macOS and iOS family. The vulnerability allows processing a maliciously crafted file to trigger a heap corruption, with potential impact across confidentiality, integrity, and availability as described in the CVE metrics. Apple’s advisories indicat...

CVE-2024-44177

CVE-2024-44177 : Privacy issue in macOS fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. An app may be able to access user-sensitive data; the fix removes sensitive data. No exploitable details provided in the available documents.

CVE-2024-44178

CVE-2024-44178 describes a vulnerability in macOS where insufficient validation of symlinks could allow an app to modify protected parts of the file system. The issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15, per the provided sources. The Red Hat and NVD entries con...

CVE-2024-54484

CVE-2024-54484 affects macOS Sequoia prior to 15.2. The issue was resolved by sanitizing logging, with the fix shipped in macOS Sequoia 15.2. Impact observed in the description indicates an app may access user-sensitive data. The available connected documents corroborate that the remediation is a...

CVE-2024-54536

The CVE-2024-54536 issue affects macOS Sequoia (15.2). It arises from insufficient validation of environment variables, allowing an app to edit NVRAM variables. Apple fixed this by improving environment variable validation in Sequoia 15.2. The available public descriptions confirm the vulnerabili...

CVE-2025-24096

CVE-2025-24096 affects macOS Sequoia 15.3 and is tied to the NSDocument path, where an attacker may access arbitrary files due to an issue fixed by improved state management. Apple’s security content confirms the fix in macOS Sequoia 15.3 and lists NSDocument as a vulnerable surface. Remediation:...

CVE-2025-24222

CVE-2025-24222 affects macOS Sequoia 15.5 in the BOM component. The issue is described as a memory-handling problem that could cause an unexpected process crash when processing malicious web content. Apple’s advisory and the macOS Sequoia 15.5 security content confirm the fix is included in Sequo...

CVE-2025-24258

CVE-2025-24258 is a permissions issue affecting macOS DiskArbitration that could allow an app to gain root privileges. It is fixed in macOS Sequoia 15.4, macOS Ventura 13.7.6, and macOS Sonoma 14.7.6. The root cause and affected components are documented in Apple advisories and NVD entries; explo...

CVE-2025-31231

CVE-2025-31231 describes a permissions issue in macOS Sequoia prior to the 15.4 patch, where an app may be able to read sensitive location information. The vulnerability is fixed in macOS Sequoia 15.4. Affected product: macOS Sequoia (Apple). Root cause: insufficient restrictions on location data...

CVE-2025-46313

CVE-2025-46313 describes a logging issue in macOS Tahoe 26.1 where sensitive user data could be exposed due to insufficient data redaction. Affected product: macOS Tahoe (specific version prior to 26.1). Root cause: inadequate redaction in log/data handling within the system components. Impact: a...

CVE-2026-28979

Summary: CVE-2026-28979 describes an out-of-bounds access issue fixed by enhanced bounds checking. The vulnerability affects web content processing in Apple platforms and is addressed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Affected components (from provided docs): Sa...

CVE-2022-43454

CVE-2022-43454 describes a double-free condition that affects Apple systems where memory management improvements fix the issue. Affected is Apple platforms’ kernel-level handling, with the vulnerability fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. The advisory s...

CVE-2023-40426

CVE-2023-40426 affects macOS Sonoma 14. A permissions issue may allow an app to bypass certain Privacy preferences. The issue is fixed in macOS Sonoma 14. Remediation: update to macOS Sonoma 14 or later. Technical detail: described as a privacy/permissions bypass; no explicit exploit details prov...

CVE-2024-40823

CVE-2024-40823 affects macOS: an app may be able to access user-sensitive data. The fix is in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. Upgrade to one of these versions to mitigate. The provided sources cite “improved checks” as the remediation; no exploitation details a...

CVE-2024-44166

CVE-2024-44166 is a macOS privacy issue where private data was not properly redacted in log entries. The Red Hat/Apple/NVD and related advisories confirm the root cause is improved private data redaction in log entries, with fixes shipped in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoi...

CVE-2024-44189

CVE-2024-44189 affects macOS WindowServer and relates to a logic issue where a process could capture screen contents without user consent. The public records indicate this was addressed with improved checks and that macOS Sequoia 15 includes the fix. The Red Hat and Apple advisories corroborate t...

CVE-2024-44267

CVE-2024-44267 affects macOS where a malicious application could modify protected parts of the file system. The cited sources consistently state the issue is mitigated by Apple in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Connected advisories/feeds (OpenVAS, Nessus, RH, NVD, CVE lists) align ...

CVE-2025-24142

CVE-2025-24142 concerns a privacy issue in macOS log entry processing where private data redaction may have been insufficient, allowing an app to access sensitive user data. Affected versions include macOS Ventura 13.7.6, macOS Sequoia 15.5, and macOS Sonoma 14.7.6. The issue is addressed by the ...

CVE-2025-30442

CVE-2025-30442 involves macOS components where the issue was addressed with improved input sanitization. Apple’s advisories list fixed versions: macOS Sequoia 15.4, macOS Ventura 13.7.6, and macOS Sonoma 14.7.6. The description notes that an app may be able to gain elevated privileges as a result...

CVE-2025-31220

CVE-2025-31220 concerns a privacy issue that allowed a malicious app with local access to read sensitive location information. It is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, and macOS Ventura 13.7.6. Affected component/behavior: privacy-related data handling; root cause de...

CVE-2025-43331

CVE-2025-43331 describes a downgrade issue caused by insufficiently restricted code signing in macOS Tahoe 26. The vulnerability could allow an app to access protected user data when running on affected macOS Tahoe 26 systems. The CVE entry states the flaw is fixed in macOS Tahoe 26; no exploitat...

CVE-2026-20644

CVE-2026-20644 affects WebKit/Web content handling in Apple platforms. The issue, described as a memory handling problem, could cause an unexpected process crash when processing maliciously crafted web content. It is fixed in Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, iOS 26.3 / iPadOS 26.3, macOS ...

CVE-2026-43709

CVE-2026-43709 affects WebKit-based components in Safari, iOS/iPadOS, and macOS Tahoe/macOS Tahoe builds. Description confirms a use-after-free vulnerability in memory handling that can cause a crash when processing malicious web content. Affected versions include Safari 26.5.2, iOS 26.5.2, iPadO...

CVE-2020-36615

CVE-2020-36615 (FontParser, macOS Big Sur) : The issue is an out-of-bounds read in the FontParser used by macOS Big Sur 11.0.1, triggered by processing a maliciously crafted font. The root cause is unvalidated bounds while parsing font data, which the Apple advisory states was addressed with impr...

CVE-2022-32931

CVE-2022-32931 affects macOS Ventura 13; the issue allowed an app with root privileges to access private information. Apple patched this by addressing data protection shortcomings in Ventura 13. Remediation: update to macOS Ventura 13 (or later) where the fix is implemented. All other details in ...

CVE-2023-40385

CVE-2023-40385 affects Apple platforms: macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. The issue stems from vulnerable code related to DNS query handling that could allow a remote attacker to view leaked DNS queries when Private Relay is enabled. The public documents consistently state that A...

CVE-2024-40775

CVE-2024-40775 describes a downgrade issue addressed by adding code-signing restrictions. The vulnerability could allow an app to leak sensitive user information. Apple fixed the issue in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The provided connected documents confirm ...