CVE-2024-40792

CVE-2024-40792 affects macOS, with a permissions issue that could allow a malicious app to change network settings. The vulnerability is addressed in macOS Sequoia (version 15); Apple’s records indicate a fix via additional restrictions. Exploitation would be local (attack vector: LOCAL) with low...

CVE-2024-40837

CVE-2024-40837 describes a local-permission issue where an app could access protected user data. The connected documents confirm the vulnerability is addressed in macOS Sequoia 15, providing the fix as part of the OS update. No exploit details, affected product scope beyond macOS Sequoia 15, or a...

CVE-2024-40847

CVE-2024-40847 affects macOS: fixed via added code-signing restrictions in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue could allow an app to access sensitive user data, addressed by the patch. Connected sources (NVD/Red Hat/NCSC/Nessus/OpenVAS) reiterate the same remedi...

CVE-2024-44174

CVE-2024-44174 affects macOS, with the issue allowing an attacker to view restricted content from the lock screen. The initial description notes the vulnerability is addressed by improved checks and is fixed in macOS Sequoia 15. Connected sources (NVD/NBA Apple security content) corroborate this,...

CVE-2025-43208

CVE-2025-43208 describes a permissions issue in macOS Tahoe 26 where an app may be able to read sensitive location information. The fixed version is macOS Tahoe 26, addressing the vulnerability through additional restrictions. The CVSS analysis indicates local attack vector with low attack comple...

CVE-2025-43283

CVE-2025-43283 maps to Apple macOS Tahoe 26. The vulnerability is an out-of-bounds read caused by insufficient bounds checking, with the fix implemented in macOS Tahoe 26. Impact is described as potential unintended system termination when exploited locally; CVSSv3.1 metrics indicate a LOWBase sc...

CVE-2025-43387

CVE-2025-43387 describes a permissions issue in macOS Sequoia and Tahoe. The vulnerability could allow a malicious app to gain root privileges, with the reported impact requiring local access and low attack complexity. Apple fixes are stated for macOS Sequoia 15.7.2 and macOS Tahoe 26.1, indicati...

CVE-2022-26758

CVE-2022-26758: macOS Monterey before 12.4 is affected by a memory corruption issue that may allow a malicious application to cause unexpected changes in memory shared between processes. The vulnerability is addressed in macOS Monterey 12.4 with improved state management. The CVE entry notes a lo...

CVE-2023-42933

CVE-2023-42933 affects Apple macOS Sonoma 14 and is tied to the Dev Tools component. The issue is described as a privilege escalation vulnerability where an app may gain elevated privileges due to insufficient checks/input handling. Apple’s security content (HT213940) confirms the fix in macOS So...

CVE-2024-40810

CVE-2024-40810 affects macOS Sonoma 14.6 (and related Red Hat/NVD entries) with an out-of-bounds write that could allow a locally authenticated app to trigger a coprocessor crash. Root cause: improved input validation fixes the issue. Remediation: update to macOS Sonoma 14.6 or apply vendor-suppl...

CVE-2024-44137

CVE-2024-44137 affects macOS where an attacker with physical access could share items from the lock screen. The connected Red Hat advisory and Nessus/NVD entries corroborate an issue resolved by Apple with “improved checks” and fixes in macOS updates: macOS Ventura 13.7.1, macOS Sonoma 14.7.1, an...

CVE-2025-31195

CVE-2025-31195 affects macOS Sequoia prior to 15.4 and involves a sandbox breakout vulnerability. The initial description notes that the issue was addressed by adding additional logic and that it is fixed in macOS Sequoia 15.4. Connected Apple security content indicates this CVE was addressed by ...

CVE-2025-31271

CVE-2025-31271 relates to macOS Tahoe 26 where, due to state mismanagement, incoming FaceTime calls could appear or be accepted on a locked macOS device even if lock screen notifications are disabled. The issue is addressed through improved state management and is fixed in macOS Tahoe 26 (Apple s...

CVE-2025-31279

Apple CVE-2025-31279 describes a permissions issue in macOS/macOS variants and iPadOS that could allow fingerprinting of the user. The issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack...

CVE-2025-43325

CVE-2025-43325 concerns macOS Tahoe 26 where sandbox restrictions were strengthened to address an access issue. The vulnerability allowed an app to potentially access sensitive user data due to under-restricted sandboxing prior to the fix. The fix is implemented in macOS Tahoe 26; users/devices s...

CVE-2025-43329

CVE-2025-43329 is a permissions-related sandbox-bypass vulnerability in Apple platforms. The issue allows a locally authenticated app with low privileges and no user interaction to break out of its sandbox. It is fixed in tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The NVD entry states a permissi...

CVE-2025-43536

CVE-2025-43536 is a use-after-free in WebKitGTK/WebKit2GTK triggered by processing malicious web content, leading to an unexpected process crash. Affected package: webkitgtk4 (WebKitGTK). Fixes are provided in WebKitGTK/WebKit2GTK updates: Debian 11 bullseye and Debian 12 bookworm patches (2.50.4...

CVE-2023-32421

CVE-2023-32421 affects macOS Sonoma 14 where a privacy issue arose from improved handling of temporary files; an app may observe unprotected user data. The available connected data confirms the vulnerability is addressed in macOS Sonoma 14. Remediation is to run the fixed macOS Sonoma 14 release....

CVE-2023-42871

CVE-2023-42871 : A kernel-memory-management issue allows an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability affects Apple platforms and is fixed in macOS Sonoma 14, iOS 17, and iPadOS 17. The issue is described as arising from improved memory ...

CVE-2024-44130

CVE-2024-44130 affects macOS and was fixed in macOS Sequoia 15. The issue permits a root-privileged app to access private information due to inadequate data protection. The vulnerability is addressed with improved data protection measures in Sequoia 15. Evidence from multiple connected sources co...

CVE-2024-44222

CVE-2024-44222 affects macOS: the issue involved an app potentially reading sensitive location information. The documents indicate the problem was fixed with improved redaction of sensitive information and updates to macOS versions. Specifically, macOS Ventura 13.7.1 and macOS Sonoma 14.7.1 inclu...

CVE-2023-42876

CVE-2023-42876 relates to macOS Sonoma 14 where processing a file could cause a denial-of-service or memory disclosure due to inadequate bounds checks. The issue was addressed with improved bounds checks and is fixed in macOS Sonoma 14. The NVD and vendor advisories corroborate the impact as loca...

CVE-2024-23237

CVE-2024-23237 affects macOS Sequoia 15. The description in the sources attributes the issue to memory handling: an app may cause a denial-of-service, and Apple states the fix is included in Sequoia 15. Public references (NVD and Red Hat/Apple advisories) confirm a memory-management related vulne...

CVE-2025-43277

CVE-2025-43277 affects CoreAudio on macOS Sonoma. The issue is a memory handling weakness that can lead to memory corruption when processing a malicious audio file. Apple assigns it as a local attack vector (requires user interaction) with high impact to confidentiality, integrity, and availabili...

CVE-2025-43451

CVE-2025-43451: A permissions issue in macOS Tahoe 26 was fixed by removing the vulnerable code. The advisory states that an app may be able to access sensitive user data. The available connected documents corroborate the fix in macOS Tahoe 26 and do not provide additional exploit details or affe...

CVE-2026-43703

CVE-2026-43703 affects macOS Tahoe 26.5.2, iOS 26.5.2, and iPadOS 26.5.2, linked to a memory handling issue in libxslt when processing malicious web content. Root cause: memory handling flaw leading to an unexpected process crash. Consequence: potential disruption of a process due to crafted web ...

CVE-2001-0102

CVE-2001-0102: In Mac OS 9, the “Multiple Users” Control Panel allows a normal user to gain Owner privileges by removing the Users & Groups Data File, effectively removing the Owner password and letting the Normal user log in as Owner without a password. This is a local privilege-escalation via d...

CVE-2024-27849

CVE-2024-27849 is a macOS Sequoia 15 vulnerability describing a privacy issue where an app could read sensitive location information due to insufficient private data redaction in log entries. The widely referenced sources (Apple security content, Red Hat advisory, NVD entry) confirm the issue and...

CVE-2024-27858

CVE-2024-27858 is a local-privilege-permission issue in macOS that could allow an app to access protected user data. The vulnerability is fixed in macOS Sequoia 15 (per multiple sources including NVD/NVD-CVE, Red Hat advisory, and Apple security content). The root cause is described as a permissi...

CVE-2025-43344

CVE-2025-43344 describes an out-of-bounds access issue in Apple OS components that is mitigated by improved bounds checking. The vulnerability is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The issue could allow an app to terminate the system, depending on context. Connected...

CVE-2025-43385

CVE-2025-43385 is an out-of-bounds access vulnerability that could cause an app to terminate or corrupt memory when processing a malicious media file. The issue has concrete fixes in multiple Apple platforms: tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, mac...

CVE-2025-43496

The CVE-2025-43496 issue affects Apple platforms (watchOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 26.1; iOS 18.7.2/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Description: remote content could be loaded even when the device setting Load Remote Images is off. Root cause: insufficient logi...

CVE-2024-40861

CVE-2024-40861 affects macOS prior to the Sequoia 15 release. The issue could allow an app to gain root privileges via a local attack vector. Apple’s advisory states the vulnerability was addressed with “improved checks” and that it is fixed in macOS Sequoia 15. The NVD/NVD-derived metrics confir...

CVE-2025-24183

The CVE-2025-24183 entry corresponds to a local privilege issue in macOS where a local user could modify protected parts of the file system. The issue was addressed with improved checks and is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15.3. Affected component details a...

CVE-2025-43233

CVE-2025-43233 affects macOS where an attacker could leverage a malicious app acting as an HTTPS proxy to access sensitive user data. The issue is mitigated by improved access restrictions and is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The CVE’s base score and ...

CVE-2026-20650

CVE-2026-20650 corresponds to a Bluetooth denial-of-service issue that Apple fixed in iOS/iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. The vulnerability is triggered by crafted Bluetooth packets and an attacker in a privileged network position could cause a DoS. The ...

CVE-2025-43229

CVE-2025-43229 affects Apple macOS Sequoia (15.6) and Safari (18.6); the issue, tied to WebKit, enables universal cross-site scripting when processing malicious web content due to a state-management flaw. The NVD entry lists a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User inte...

CVE-2025-46280

CVE-2025-46280 is an out-of-bounds read vulnerability addressed by improved bounds checking, fixed in macOS Tahoe 26 . The issue can allow an app to cause unexpected system termination. Affected software: macOS Tahoe 26. Root cause: insufficient bounds checking leading to an out-of-bounds read. I...

CVE-2026-20609

CVE-2026-20609 is a memory-handling vulnerability affecting Apple systems where processing a maliciously crafted file may cause denial-of-service or memory disclosure. Connected sources map the issue to CoreMedia on Apple Watch (and related Apple platforms) with fixes implemented in iOS/iPadOS 18...

CVE-2026-20636

CVE-2026-20636 is a memory-handling issue in the WebKit/Web content processing path that may lead to an unexpected process crash when processing malicious web content. According to the CVE entry, the vulnerability is fixed in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3...

CVE-2026-20646

Summary (CVE-2026-20646) : A logging issue in macOS Tahoe 26.3 allowed reading of sensitive location information due to insufficient data redaction. Multiple sources (Apple advisory references and national/cross-vendor advisories) corroborate that the issue is fixed in macOS Tahoe 26.3. The vulne...

CVE-2026-20680

CVE-2026-20680 affects Apple platforms (iOS, iPadOS, macOS) and describes an information-disclosure issue where a sandboxed app may access sensitive user data due to limitations in observability of app states. Root cause: added restrictions on observability of app states. Impact: potential exposu...

CVE-2026-28844

CVE-2026-28844 describes a file access issue in macOS Tahoe that was addressed by improved input validation. The public description states that an attacker may gain access to protected parts of the file system, with the vulnerability fixed in macOS Tahoe 26.4. Connected sources corroborate the fi...

CVE-2026-43708

CVE-2026-43708 affects WebKit/Safari components. The issue allowed a malicious website to exfiltrate data across origins due to insufficient input validation. The vulnerability is addressed with patches in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Root cause: improved inpu...

CVE-2023-40433

CVE-2023-40433 is a logic-issue vulnerability in macOS Ventura that may allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Ventura 13.3. The available documents identify the affected product as macOS Ventura and describe the root cause as a logic issue that enables Gatekeeper b...

CVE-2025-31262

Summary of CVE-2025-31262 : A permissions issue could allow an app to modify protected parts of the file system. Apple lists fixes in multiple platforms and versions: visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The base CVSS is MEDIUM (5.5) with local, lo...

CVE-2025-43196

CVE-2025-43196 describes a path handling issue that could allow an app to gain root privileges. The issue is resolved by macOS updates: Sequoia 15.6, Sonoma 14.7.7, and Ventura 13.7.7. The CVSS 3.1 metrics indicate a LOCAL attack vector, LOW attack complexity and LOW privileges required, with HIG...

CVE-2025-43223

CVE-2025-43223 is a denial-of-service issue in Apple systems that stems from insufficient input validation. According to the provided documentation, the vulnerability is addressed by input validation improvements and is fixed in multiple Apple platforms and versions: macOS Ventura 13.7.7, macOS S...

CVE-2025-43270

CVE-2025-43270 describes an access control issue in macOS where an app may gain unauthorized access to the Local Network. The vulnerability is addressed by stricter sandboxing and is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The initial description does not provi...

CVE-2025-43316

CVE-2025-43316 is a local privilege-escalation vulnerability in Apple’s DiskArbitration component that could allow a malicious app to gain root privileges. The issue is fixed in visionOS 26; prior builds of visionOS 26 are affected. The CVE entry describes a permissions issue addressed with addit...