CVE-2025-24174

CVE-2025-24174 affects macOS components and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue is described as an access control/privacy bypass that could allow an app to bypass Privacy preferences, with the underlying root cause described as improved checks ...

CVE-2025-24149

CVE-2025-24149 is an out-of-bounds read resolved by Apple through improved bounds checking. Affected products/versions include iPadOS 17.7.4, iOS 18.3; macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3; visionOS 2.3; watchOS 11.3; and tvOS 18.3. The issue could lead to disclosure of u...

CVE-2023-23517

CVE-2023-23517 is a memory corruption vulnerability in WebKitGTK/WebKit that can be triggered by processing malicious web content, potentially allowing arbitrary code execution. The issue is addressed by WebKitGTK/WebKit updates (e.g., WebKitGTK/WebKit fixes referenced in multiple advisories) and...

CVE-2025-6558

CVE-2025-6558 involves insufficient validation of untrusted input in ANGLE and GPU within Google Chrome, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. Connected sources specify Chrome components ANGLE and GPU as affected, with the patch previously shipped i...

CVE-2025-24151

CVE-2025-24151 affects macOS with a memory handling issue that may allow an app to trigger unexpected termination or kernel memory corruption. The vulnerability is addressed by updates: macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. Connected sources corroborate the fixed vers...

CVE-2025-24123

CVE-2025-24123 affects multiple Apple OSes where parsing a file could cause an unexpected app termination. According to the document, the issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS ...

CVE-2021-1844

CVE-2021-1844 is a memory corruption vulnerability in WebKit/WebKitGTK/WebKitGTK-related workflows triggered by processing malicious web content, with potential arbitrary code execution. Affected components include WebKit/WebKitGTK in Apple products (Safari 14.0.3 and iOS/iPadOS/macOS updates) an...

CVE-2024-2004

CVE-2024-2004 affects curl/libcurl: a logic error in protocol selection fails to remove all explicitly disabled protocols, leaving the default protocol set active. This could allow using a disabled protocol in certain requests (e.g., curl --proto -all,-http). Concrete details appear across multip...

CVE-2025-24109

CVE-2025-24109 relates to a downgrade issue that was addressed by adding code-signing restrictions. The NVD entry states the issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, with the impact described as an app potentially accessing sensitive user data. Affected...

CVE-2022-32208

CVE-2022-32208 affects curl when performing FTP transfers secured by krb5 prior to version 7.84.0. The vulnerability arises from how message verification failures are handled during krb5-secured FTP transfers, enabling a man-in-the-middle to go unnoticed and potentially inject data to the client....

CVE-2023-30774

CVE-2023-30774 affects LibTIFF in libtiff: a heap-based buffer overflow caused by TIFFTAG_INKNAMES/ TIFFTAG_NUMBEROFINKS. Reported in MiracleLinux AXSA plugin; Nessus descriptions confirm a heap overflow that could crash the affected TIFF processing. No explicit remediation or patched version is ...

CVE-2023-41074

CVE-2023-41074 is a WebKit-related vulnerability where processing web content may lead to arbitrary code execution. Connected advisories confirm the issue across multiple platforms and ports, notably WebKit-on-Apple ecosystems (Safari/WebKit) and WebKitGTK+-based products. The root cause is descr...

CVE-2023-27932

CVE-2023-27932 affects WebKitGTK/WebKitGTK-based WebKit implementations (notably WebKit2GTK) and is a Same Origin Policy bypass via processing malicious web content. Public advisories in Debian, Fedora, and AlmaLinux confirm this CVE is fixed by updates to webkit2gtk/webkitgtk components (e.g., D...

CVE-2025-24252

CVE-2025-24252 is a use-after-free vulnerability in Apple’s AirPlay ecosystem that has multiple PoCs and public PoCs outlining crash/RCe and sandbox-escape chains. Public materials describe a local-network attacker potentially exploiting mDNS/AirPlay services to trigger remote code execution or s...

CVE-2022-3970

LibTIFF vulnerability CVE-2022-3970 affects TIFFReadRGBATileExt in libtiff, causing an integer overflow and enabling remote impact. The issue is publicly disclosed; remediation is to apply the patch referenced as 227500897dfb07fb7d27f7aa570050e62617e3be (no explicit version). Multiple connected a...

CVE-2023-27935

CVE-2023-27935 affects macOS components, with the issue described as being fixed by improved bounds checks. A remote attacker may cause an unexpected app termination or arbitrary code execution. Affected versions include macOS Big Sur 11.7.5, Monterey 12.6.4, and Ventura 13.3. The public details ...

CVE-2024-2379

CVE-2024-2379: Affected product is libcurl’s QUIC implementation when built with wolfSSL. The root cause is an error path that, under certain conditions involving unknown/bad cipher or curve, returns OK and skips certificate verification, effectively bypassing TLS certificate validation. This lea...

CVE-2024-54478

CVE-2024-54478 is an out-of-bounds access vulnerability in Apple’s ICU component that affects multiple Apple platforms. The issue arises when processing malicious web content, potentially causing an unexpected process crash. Affected products include iPadOS, iPadOS 18.2, iOS 18.2, visionOS, tvOS,...

CVE-2025-24115

The CVE-2025-24115 issue is a path-handling vulnerability in macOS that arises from insufficient validation, enabling an app to read files outside its sandbox. Affected platforms are macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. The root cause is a path handling issue address...

CVE-2022-29458

CVE-2022-29458 affects ncurses 6.3 prior to patch 20220416, with an out-of-bounds read in tinfo/read_entry.c (convert_strings) leading to a segmentation fault. Connected sources confirm the issue is tied to the terminfo processor and mention Linux distributions (e.g., Astra Linux, Cloud Foundry) ...

CVE-2022-32207

CVE-2022-32207 affects curl: when saving cookies, alt-svc and HSTS data, the final rename can widen target file permissions, exposing updates to more users. Affected versions are curl before 7.84.0; remediation is to upgrade to 7.84.0 or newer (as indicated by multiple advisories).

CVE-2022-35260

CVE-2022-35260 affects curl. When curl parses a .netrc file for credentials, if the file ends with a line of 4095 consecutive non-whitespace characters and no newline, curl could read past the end of a stack-based buffer and, if the read succeeds, write a zero byte beyond its boundary, causing a ...

CVE-2023-41990

The CVE-2023-41990 issue affects Apple platforms (iOS, iPadOS, macOS, tvOS, watchOS) and was triggered by processing a font file, with the root cause tied to cache handling. It can lead to arbitrary code execution and is rated high severity (local access, user interaction required) per the report...

CVE-2020-14155

CVE-2020-14155 concerns the PCRE library: libpcre in PCRE versions prior to 8.44 allows an integer overflow when parsing a large number after a (?C substring. The issue is the result of an input validation/overflow bug in PCRE’s handling of certain regular expressions, potentially enabling memory...

CVE-2022-32205

CVE-2022-32205 affects curl and can cause denial of service when a malicious server serves a large number of Set-Cookie headers. curl

CVE-2023-38603

CVE-2023-38603 affects Apple platforms (iOS/iPadOS/macOS) with a remote DoS possibility. The description indicates issue was addressed by improved checks and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The exact component/function and root cause are not provided in the documents. U...

CVE-2021-30849

CVE-2021-30849 is a WebKit/WebKitGTK family issue reporting multiple memory corruption defects that could allow arbitrary code execution when processing malicious web content. Publicly documented fixes cover WebKitGTK/WebKit in Apple platforms (iOS 14.8/iPadOS 14.8, watchOS 8, Safari 15, tvOS 15,...

CVE-2023-23513

CVE-2023-23513 involves a buffer overflow that was mitigated by improved memory handling. Public details in connected documents show this affects macOS releases where the fix is included in Big Sur 11.7.3, Ventura 13.2, and Monterey 12.6.3. The vulnerability arises when mounting a maliciously cra...

CVE-2025-24124

CVE-2025-24124 affects several Apple platforms. The vulnerability involves a parsing issue that may cause an unexpected app termination. Mitigation is available via updates: iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS ...

CVE-2025-24122

CVE-2025-24122 concerns a downgrade issue on Intel-based Macs that was addressed by additional code-signing restrictions. It is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3 and macOS Sequoia 15.3. The issue could allow an app to modify protected parts of the file system due to the downgrade...

CVE-2022-1381

CVE-2022-1381 pertains to Vim/ vim in which a global heap buffer overflow occurs in the skip_range function. Public advisories and vendor bulletins indicate this affects Vim prior to a specific 8.2.x release (e.g., Mariner/ALAS advisories cite Vim versions below 8.2.4925-1 and note an upgrade to ...

CVE-2022-1621

CVE-2022-1621 : A heap-based overflow in Vim's vim_strncpy find_word path (GitHub vim/vim) prior to 8.2.4919 can crash the editor, potentially modify memory, and may allow remote code execution. Connected sources confirm the same description across vendor advisories (AstraLinux and ALAS2023-2023-...

CVE-2023-38565

CVE-2023-38565 involves a path handling issue in Apple OS components where insufficient validation could allow a local attacker to gain root privileges. The NVD entry specifies that the underlying problem is a path handling issue that was addressed with improved validation. Affected versions incl...

CVE-2021-4192

CVE-2021-4192 affects Vim and is described in connected sources as a use-after-free vulnerability in Vim’s win_linetabsize() function. The consequence is that opening crafted input could crash Vim and, in some reports, may enable memory corruption or arbitrary code execution. Public references (A...

CVE-2023-38421

CVE-2023-38421 affects macOS Model I/O 3D model processing, with memory disclosure risk. The issue stems from insufficient checks during 3D model handling, enabling potential disclosure of process memory. Affected products include macOS Monterey 12.6.8 and macOS Ventura 13.5 (patches listed as fi...

CVE-2025-24130

CVE-2025-24130 is a macOS local vulnerability where an app may modify protected parts of the file system due to insufficient checks. The issue is addressed with fixes in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. These fixes stem from improved checks in the cited advisory....

CVE-2025-24139

CVE-2025-24139 affects macOS Ventura (and related macOS releases) where parsing a maliciously crafted file may cause an unexpected app termination. The initial description notes the issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3, indicating the root cause is l...

CVE-2023-38593

CVE-2023-38593 is a logic-issue vulnerability addressed by Apple in updates: macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 16.6, iPadOS 16.6, and watchOS 9.6. The root cause is described as a logic issue with improved checks, and the impact noted is the potential for an app...

CVE-2019-20838

CVE-2019-20838 is a PCRE/PCRE2 vulnerability where libpcre had a subject buffer over-read during JIT compilation in non-UTF mode when the pattern uses \X or \R with more than one fixed quantifier. Affected versions include PCRE up to 8.43; remediation is to upgrade to a patched PCRE (e.g., 8.43+;...

CVE-2022-22639

Technical details for CVE-2022-22639 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-0318

CVE-2022-0318 affects Vim and is described in connected bulletins as a Heap-based Buffer Overflow in Vim prior to 8.2. Debian’s DLA-3204-1 notes the Vim fix as part of a security update for Vim 2:8.1.0875-5+deb10u4, addressing CVE-2022-0318 among others. AstraLinux bulletin reiterates the Vim hea...

CVE-2025-24106

CVE-2025-24106 affects macOS. The issue is described as a parsing problem that may lead to an unexpected app termination. It has been addressed with fixes in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. According to NVD metrics, the CVSSv3.1 base score is 5.5 (MEDIUM) with a...

CVE-2023-38403

CVE-2023-38403 affects iperf3 builds prior to 3.14 (versions < 3.14). The vulnerability arises from a memory/length handling issue that can cause an integer overflow and heap corruption, with the potential for crash or arbitrary code execution as described in the reports. Exploitation status i...

CVE-2021-30758

CVE-2021-30758 describes a type confusion issue in WebKit that could allow arbitrary code execution when processing malicious web content. The initial description ties the vulnerability to Apple products and fixes in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. Connect...

CVE-2023-38261

CVE-2023-38261 affects Apple devices (iOS, iPadOS, macOS) with a kernel-privilege arbitrary code execution possibility. The description states the issue was mitigated by improved memory handling and is fixed in iOS 16.6, iPadOS 16.6, and macOS Ventura 13.5. The available connected documents corro...

CVE-2021-4193

CVE-2021-4193 is a Vim vulnerability described as an Out-of-bounds Read. Connected sources confirm Vim as affected and indicate fixes via Linux/Ubuntu advisories and vendor bulletins. Astra Linux explicitly names a Vim issue (vim) in its security bulletin, while Cloud Foundry’s USN-6026-1 lists V...

CVE-2023-38602

CVE-2023-38602 is a local permissions issue in macOS where an app may modify protected parts of the file system. Affected versions include macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9. Root cause: insufficient restrictions allowing access to protected filesystem areas. Miti...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2024-54551

CVE-2024-54551 is a denial-of-service vulnerability in web content processing within WebKit-based components. The connected documents indicate the issue is addressed by memory-handling improvements and fixes in specific Apple platforms: watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, vis...

CVE-2022-0261

CVE-2022-0261 is a Vim heap-based buffer overflow affecting vim/vim prior to 8.2. Connected advisories (Astra Linux, Cloud Foundry USN, and Apple security page) confirm Vim heap-buffer issues across multiple CVEs and list Vim updates as the remediation path. For CVE-2022-0261, the vendor-provided...