CVE-2024-40848

CVE-2024-40848 describes a downgrade issue in macOS that was mitigated by adding code-signing restrictions. The vulnerability could allow an attacker to read sensitive information. Apple states the fix is applied in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The Red Hat and NVD ...

CVE-2024-40855

CVE-2024-40855 affects macOS (the specific entry notes a sandboxed app could access sensitive user data). The connected sources confirm the issue was addressed with improved checks and implemented as a fix in macOS Ventura 13.7.1, macOS Sequoia 15, and macOS Sonoma 14.7.1. The description does no...

CVE-2024-44149

CVE-2024-44149 affects macOS, involving a permissions issue that could allow an app to access protected user data. The vulnerability is addressed in macOS Sequoia 15, per the initial description and the Apple advisory entries, which state the fix applies to Sequoia 15. Red Hat and NVD entries ech...

CVE-2024-44151

CVE-2024-44151 is a macOS-specific permissions issue: an app may be able to modify protected parts of the file system. Public details indicate the vulnerability is addressed with additional restrictions and fixed in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The Red Hat and vuln...

CVE-2024-44186

CVE-2024-44186 is an access issue that was addressed with additional sandbox restrictions in macOS Sequoia 15. The description states that an app may be able to access protected user data and that the fix is included in Sequoia 15. Connected documents corroborate this vulnerability affecting macO...

CVE-2024-44247

CVE-2024-44247 affects macOS and was addressed by Apple with improved checks. The vulnerability is fixed in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system. The public documentation available in the connected sources c...

CVE-2024-54557

CVE-2024-54557 affects macOS via a logic issue in SharedFileList that could allow access to protected parts of the file system. The fixed revisions are macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2. The issue is described as a logic restriction problem; no exploit details are ...

CVE-2025-24155

CVE-2025-24155 affects macOS where an issue with improved memory handling could allow an app to disclose kernel memory. Concrete details in connected docs show the vulnerability fixed in macOS updates: Sequoia 15.3, Ventura 13.7.6, and Sonoma 14.7.6. The Apple advisory entries enumerate affected ...

CVE-2023-32383

CVE-2023-32383 affects macOS: the issue allowed an app to inject code into sensitive binaries bundled with Xcode. Root cause: forcing hardened runtime on affected binaries at the system level. Affected firmware/OS versions and fixes: macOS Monterey 12.6.6, macOS Big Sur 11.7.7, and macOS Ventura ...

CVE-2023-40430

CVE-2023-40430 describes a logic issue in macOS Sonoma 14 where an app may access removable volumes without user consent. Affected product: macOS Sonoma 14. Root cause: logic/checks weakness that governs access to removable media. Impact per sources: confidentiality impact can be high; exploitati...

CVE-2024-23261

CVE-2024-23261 is a logic-issue vulnerability affecting macOS, resolved by state-management fixes in macOS Monterey 12.7.6, macOS Sonoma 14.4, and macOS Ventura 13.6.8. The issue could allow an attacker to read information belonging to another user. The available connected documents confirm the a...

CVE-2024-27795

CVE-2024-27795 affects macOS Sequoia 15 where a permissions issue could allow a camera extension to access the Internet. Apple fixed this with additional restrictions in Sequoia 15; multiple sources consistently describe it as a permissions restriction issue resolved by a patch. Connected documen...

CVE-2024-27875

CVE-2024-27875 affects macOS Sequoia 15.0 and is described as a logic/state-management issue that can cause Privacy Indicators for microphone or camera access to be attributed incorrectly. The primary sources (NVD/NVD+CNA, Red Hat advisory, Apple security notes) confirm a fix in macOS Sequoia 15 ...

CVE-2024-40846

CVE-2024-40846 is tied to Apple GraphicsControl. The issue is described as a memory handling problem that could cause an app to terminate unexpectedly when processing a maliciously crafted video file. Apple lists the fix in macOS Sonoma 14.7 and macOS Sequoia 15, indicating a remediation through ...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-44181

The CVE-2024-44181 entry concerns macOS: an issue in handling of temporary files could allow an app to read sensitive location information. Affected products/versions are macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The root cause is improved handling of temporary files (as descri...

CVE-2024-44253

CVE-2024-44253 affects macOS, with the issue addressed by Apple in macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. The description indicates that an app may be able to modify protected parts of the file system, and the fixes involve improved checks. The available public text does not specify the ex...

CVE-2024-44264

CVE-2024-44264 affects macOS (Ventura/Sonoma). The issue arises from insufficient validation of symlinks, allowing a malicious app to create symlinks to protected disk regions. Impact is mitigated by the official fixes: macOS Ventura 13.7.1 and macOS Sonoma 14.7.1. Connected advisories corroborat...

CVE-2024-54473

CVE-2024-54473 affects macOS Sequoia 15. The issue is described as an information-disclosure vulnerability where an app may access user-sensitive data. Apple material indicates this was addressed by improved redaction of sensitive information and is fixed in macOS Sequoia 15. The provided documen...

CVE-2024-54546

CVE-2024-54546 affects macOS Sequoia 15. The issue arises from memory handling that may cause an app to terminate the system or corrupt kernel memory. Apple mitigated this by improved memory handling, with a fix shipped in macOS Sequoia 15. Impact statements indicate possible system termination o...

CVE-2025-30453

The CVE-2025-30453 issue affects macOS DiskArbitration and was fixed by Apple in macOS Sequoia 15.4, macOS Ventura 13.7.6, and macOS Sonoma 14.7.6. Description indicates a local, privilege-escalation vulnerability where a malicious app could gain root privileges due to insufficient permissions ch...

CVE-2025-43541

CVE-2025-43541 is a type-confusion issue in WebKit/WebKitGTK affecting the web rendering stack. Connected advisories show the issue being fixed in WebKitGTK/WebKitGTK+related components, with remediation via updated packages such as webkitgtk4 (e.g., WebKitGTK 2.50.4 and related debian/alma/redha...

CVE-2026-20667

CVE-2026-20667 is a logic‑issue in Apple platforms that could allow an app to break out of its sandbox. It is fixed in iOS/iPadOS 26.3, watchOS 26.3, and macOS updates: Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3. Connected sources confirm the root cause and affected products; exploitation status i...

CVE-2023-23495

CVE-2023-23495 pertains to a permissions issue in macOS Sonoma 14 where an app may access sensitive user data due to improved redaction of sensitive information. The fix is implemented in macOS Sonoma 14. The CVSS metrics indicate a local attack with required user interaction; the description doe...

CVE-2023-32363

CVE-2023-32363 affects macOS Ventura 13.4, where a permissions issue could allow an app to bypass Privacy preferences. The vulnerability was addressed by removing vulnerable code and adding checks; Apple lists macOS Ventura 13.4 as the fix. The primary publicly documented detail is that the issue...

CVE-2023-41076

CVE-2023-41076 describes an elevation of privilege in macOS where an app could gain higher rights. The issue is fixed in macOS 14 by removing the vulnerable code path. The CVSS metrics in the document set indicate a base score of 7.3 (HIGH), with attack vector listed as NETWORK, attack complexity...

CVE-2024-40826

CVE-2024-40826 affects Apple products (iOS/iPadOS 18 and macOS Sequoia 15). The issue is a privacy flaw where an unencrypted document may be written to a temporary file during print preview. Apple documents remediation: the vulnerability is fixed in iOS 18, iPadOS 18, and macOS Sequoia 15. Refere...

CVE-2024-40860

CVE-2024-40860 describes a logic issue in macOS that could allow an app to modify protected parts of the filesystem. The vulnerability is addressed in macOS Sonoma 14.7 and macOS Sequoia 15. The connected documents confirm a fix is available in those releases; no exploit details or active weaponi...

CVE-2024-44208

CVE-2024-44208 affects macOS Sequoia 15, where an app may bypass certain Privacy preferences due to inadequate state management. The issue is addressed in macOS Sequoia 15 via improved state handling. Remediation: update to macOS Sequoia 15 (or later). Note: exploitation status and specific vecto...

CVE-2024-44287

CVE-2024-44287 affects macOS; fixed in Sequoia 15.1, Sonoma 14.7.1, and Ventura 13.7.1. The issue arises from insufficient checks allowing a malicious application to modify protected parts of the file system. Connected advisories corroborate a macOS-wide update to address the vulnerability. Remed...

CVE-2024-54549

CVE-2024-54549 relates to macOS Sequoia before version 15.2 where an app may access user-sensitive data due to a vulnerability addressed by improved redaction. The issue is fixed in macOS Sequoia 15.2. Affected software: macOS Sequoia (prior to 15.2). Root cause: insufficient redaction allowing a...

CVE-2025-43186

The CVE-2025-43186 issue is a memory-handling vulnerability fixed across multiple Apple platforms: watchOS 11.6, iOS 18.6, iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, and macOS Ventura 13.7.7. The vulnerability arises during file parsing and may cause an unexpec...

CVE-2026-20665

CVE-2026-20665 involves Web content processing that could allow bypassing Content Security Policy enforcement. The issue affects multiple Apple platforms and WebKitGTK-based packages. Affected: Apple platforms (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) fixed in Safari 26.4, iOS 1...

CVE-2026-28871

CVE-2026-28871 is a logic issue that can enable cross-site scripting when visiting a malicious website. The vulnerability is fixed in Apple platforms: Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, and macOS Tahoe 26.4. Related Nessus/OpenVAS entries confirm affected WebKit/...

CVE-2022-47965

The CVE-2022-47965 entry concerns macOS Ventura 13 where an issue in memory handling could allow an app to execute arbitrary code with kernel privileges. It is described as a memory handling fix and is fixed in macOS Ventura 13. The Apple security content notes the vulnerability under CVE-2022-47...

CVE-2024-40770

CVE-2024-40770 is a macOS vulnerability describing a permissions issue that could allow a non-privileged user to modify restricted network settings. The vulnerability is addressed in macOS Sequoia 15, per NVD/NVD-derived entries and Apple security content references. Red Hat’s CVE page reiterates...

CVE-2024-40842

CVE-2024-40842 affects macOS Sequoia 15 where an issue with the validation of environment variables could allow an app to access user-sensitive data. The fixed version is macOS Sequoia 15. The available connected documents confirm the root cause as input validation for environment variables and t...

CVE-2024-40859

CVE-2024-40859 describes a permissions issue in macOS Sequoia 15 where an app may be able to access user-sensitive data. The provided sources align on the root cause being insufficient restrictions that could allow data access, with the fix implemented in macOS Sequoia 15. Connected documents cor...

CVE-2024-44132

CVE-2024-44132 is a macOS sandbox escape issue resolved in macOS Sequoia 15. The vulnerability arises from improper handling of symlinks, enabling a sandboxed app to break out of its confinement. Public references (NVD, NCSC advisories, Red Hat RH security) corroborate the same description and fi...

CVE-2025-43294

CVE-2025-43294 involves mishandling of environment variables in Apple platforms. The issue is addressed with improved validation and is fixed in tvOS 26.1, macOS Tahoe 26, watchOS 26.1, iOS 26.1, and iPadOS 26.1. Affected component exposure could allow an app to access sensitive user data, with i...

CVE-2025-46279

CVE-2025-46279 describes a permissions issue in Apple operating systems where an app may identify other apps installed on a user’s device. Affected platforms include watchOS, iOS/iPadOS, macOS, visionOS, and tvOS. The root cause involves insufficient restrictions on app visibility of installed so...

CVE-2026-20668

CVE-2026-20668 is a logging issue in Apple OS components that could allow an app to access sensitive user data. Affected products include iOS and iPadOS (18.7.7 and 26.3), macOS (Sequoia 15.7.5, Sonoma 14.8.5, Tahoe 26.3), and visionOS 26.3. The underlying problem is improper data handling in log...

CVE-2023-42869

CVE-2023-42869 is a set of multiple memory corruption issues in libxml2 that were addressed through improved input validation. The CVE entry notes the fixes are included in Apple products: macOS Ventura 13.4, iOS 16.5, and iPadOS 16.5. Connected sources corroborate that the libxml2 problems were ...

CVE-2024-27860

The CVE-2024-27860 entry concerns a macOS Sequoia 15 vulnerability where an application may read restricted memory due to improper memory handling. The connected Red Hat, Nessus, CIRCL, and Apple security documents corroborate that issue was addressed by improved memory handling and is fixed in m...

CVE-2024-44146

CVE-2024-44146 affects macOS Sequoia 15. Root cause: a logic issue in file handling that may allow a sandbox escape when manipulating file attributes/links (notably involving copyfile handling). Apple fixed this in macOS Sequoia 15. Remediation: update to Sequoia 15 or later and apply the Apple s...

CVE-2024-44203

CVE-2024-44203 affects macOS through a permissions issue that could allow an app to access a user’s Photos Library. The vulnerability is addressed in macOS Sequoia 15; update to Sequoia 15 to apply the fix. The provided connected documents confirm the issue and its remediation without detailing e...

CVE-2025-31270

CVE-2025-31270 describes a permissions issue that could allow an app to access protected user data on macOS Tahoe 26. The issue is fixed in macOS Tahoe 26 with “additional restrictions.” Connected sources confirm the vulnerability type as a permissions/data access issue and indicate the fix is pa...

CVE-2026-20635

CVE-2026-20635 involves WebKit/WebKitGTK memory handling, causing an unexpected process crash when parsing malicious web content. The CVE is fixed in Apple platforms: Safari 26.3, iOS 18.7.5 / iPadOS 18.7.5, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3, and also reflected in related a...

CVE-2026-39872

CVE-2026-39872 affects WebKit-based browser components used in Safari and related Apple platforms. The issue involves improper memory handling that could be triggered by processing malicious web content, potentially causing an unexpected process crash. Apple notes the fix in Safari 26.5.2, iOS 26...

CVE-2024-40792

CVE-2024-40792 affects macOS, with a permissions issue that could allow a malicious app to change network settings. The vulnerability is addressed in macOS Sequoia (version 15); Apple’s records indicate a fix via additional restrictions. Exploitation would be local (attack vector: LOCAL) with low...