CVE-2021-30848

CVE-2021-30848 is a memory corruption vulnerability in WebKit/WebKitGTK. The issue may be triggered by processing malicious web content and could lead to code execution. Public advisories confirm fixes in Apple Safari/WebKit products (iOS 14.8, iPadOS 14.8, Safari 15, iOS 15, iPadOS 15) and relat...

CVE-2022-1629

CVE-2022-1629 is a Vim/vim vulnerability (buffer over-read in find_next_quote) affecting Vim before version 8.2.4925, enabling crashes, memory modification, and potential remote code execution. Connected advisories corroborate the issue in Vim across Linux distros (Astra Linux and Cloud Foundry/C...

CVE-2022-32823

CVE-2022-32823 describes a memory initialization issue that could allow an app to leak sensitive user information. It is fixed in Apple OS updates: iOS/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update 2022-005 Catalina. The vulnerability is local...

CVE-2022-1616

CVE-2022-1616 affects Vim/Vim in versions prior to 8.2.4895. The issue is a use-after-free in the function append_command in the vim/vim GitHub repository, which can crash the application, bypass protection mechanisms, modify memory, and potentially enable remote code execution. The advisory note...

CVE-2022-1927

CVE-2022-1927: Buffer Over-read in vim/vim prior to 8.2. The Astra Linux bulletin confirms a Vim vulnerability described as a buffer over-read in vim/vim before 8.2. The CloudFoundry/Apple references also discuss Vim issues but do not provide a precise fixed version in the supplied documents. Imp...

CVE-2023-37285

CVE-2023-37285 is an out-of-bounds read vulnerability in Apple platforms. The issue could allow an app to execute arbitrary code with kernel privileges. It is fixed in iOS/iPadOS 15.7.8, macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. Exploitation status and in-the-wild detai...

CVE-2021-30884

CVE-2021-30884 relates to WebKit-based rendering components (notably WebKitGTK/WebKit on embedded platforms) where an issue in CSS compositing could allow a malicious website to reveal browsing history. The root cause is described as limitations or restrictions on CSS compositing. The vulnerabili...

CVE-2023-38601

CVE-2023-38601 affects macOS (Big Sur 11.7.9, Monterey 12.6.8, Ventura 13.5). The issue was mitigated by removing the vulnerable code; impact: an app may be able to modify protected parts of the file system. Remediation: apply the specified macOS updates (11.7.9/12.6.8/13.5). Root cause details a...

CVE-2022-0554

CVE-2022-0554 is referenced in connected Astra Linux security bulletin as a Vim vulnerability: “Out-of-range Pointer Offset” in the GitHub Vim/vim repository, affecting Vim prior to 8.2. The Astra bulletin repeats the description but provides no additional technical details (affected versions, ex...

CVE-2023-38590

CVE-2023-38590 is a buffer‑overflow issue in Apple systems where improved memory handling fixes a vulnerability that could let a remote attacker terminate the system or corrupt kernel memory. The fix is incorporated in multiple Apple OS updates: watchOS 9.6; macOS Big Sur 11.7.9; iOS 15.7.8 and i...

CVE-2024-44192

CVE-2024-44192 affects WebKitGTK/WebKitGTK4 (webkitgtk and webkitgtk4). The issue is described as processing maliciously crafted web content may lead to an unexpected process crash. Public reports in connected docs confirm Debian LTS (DLA-4218-1) fix WebKitGTK 2.48.3-1~deb11u1, and Amazon Linux/A...

CVE-2023-38571

CVE-2023-38571 affects macOS (Big Sur, Monterey, Ventura) where an app may bypass Privacy preferences due to insufficient validation of symlinks. Root cause: improved validation of symlinks. Impact: Privacy settings bypass possible. The vulnerability is fixed in macOS Big Sur 11.7.9, macOS Monter...

CVE-2023-40397

CVE-2023-40397 is a documented WebKit/WebKitGTK+ related vulnerability. The connected documents indicate a remote attacker could cause arbitrary JavaScript code execution, with fixes implemented in macOS Ventura 13.5. The primary entry notes the issue was addressed with improved checks and is fix...

CVE-2022-0128

CVE-2022-0128—Out-of-bounds Read in Vim . The connected CNVD entry confirms a memory boundary issue in Vim that can lead to a crash or memory disclosure when processing crafted input. Public references in this set indicate Vim vulnerability details are limited, and the primary remediation is upgr...

CVE-2022-1968

CVE-2022-1968 affects the Vim editor (vim/vim) prior to 8.2. The public bulletins in connected docs describe a memory-safety issue: a Use-After-Free in Vim (notably involving utf_ptr2char) that can crash Vim and, in some variants, may enable memory corruption or worse. The Debian/CloudFoundry/Ama...

CVE-2022-22631

CVE-2022-22631 is an out-of-bounds write issue in macOS that was addressed by improved bounds checking. It is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, and Security Update 2022-003 Catalina. The issue could allow an application to gain elevated privileges. No exploit details are provide...

CVE-2023-23496

CVE-2023-23496 affects Apple Safari/WebKit components; exploitation arises from processing maliciously crafted web content, leading to arbitrary code execution. Publicly documented impact includes macOS Ventura 13.2, macOS Monterey Big Sur/Big Sur? /, iOS 15.7.2 / 16.3, iPadOS 15.7.2 / 16.3, watc...

CVE-2022-2042

CVE-2022-2042 is a real use-after-free vulnerability in Vim. The connected Astra Linux bulletins describe the flaw as a use-after-free in Vim’s skipwhite() in src/charset.c, leading to a crash or memory corruption if a crafted file is opened. No exploitation details are provided in the documents....

CVE-2022-1733

CVE-2022-1733 — Heap-based Buffer Overflow in vim/vim prior to 8.2.4968. The vulnerability affects Vim (GitHub vim/vim repository) with a heap buffer overflow in its handling of certain inputs, leading to crashes and memory corruption. The advisory explicitly lists Vim before 8.2.4968 as affected...

CVE-2025-24162

CVE-2025-24162 is linked to WebKitGTK/WebKit-derived components in multiple platforms. Connected sources indicate the root cause is improved state management, addressing processing maliciously crafted web content that previously could cause an unexpected process crash. Affected products include v...

CVE-2025-31258

CVE-2025-31258 affects macOS, with a potential sandbox escape via the RemoteViewServices mechanism. The issue was mitigated by removing the vulnerable code and is fixed in macOS Sequoia 15.5 (Apple’s advisory confirms the patch). Affected products prior to the Sequoia 15.5 release could be expose...

CVE-2021-4173

CVE-2021-4173: Vim suffers a double-free in the VimScript9 compiler when a nested :def function is used. Debian LTS advisory DLA-4097-1 (vim 2:8.2.2434-3+deb11u3) fixes multiple Vim vulnerabilities including CVE-2021-4173; upgrade to the fixed package to mitigate. The Debian advisory explicitly l...

CVE-2022-0156

CVE-2022-0156 is a Vim memory‑corruption vulnerability described as a Use‑After‑Free. Connected documents confirm Vim vulnerabilities across multiple vendors/advisories, e.g. USN-6195-1 (Cloud Foundry) and Amazon Linux ALAS2023-2023-098, and Apple security updates listing Vim issues including CVE...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...

CVE-2024-27856

CVE-2024-27856 affects the WebKitGTK/ WebKit component used by Apple platforms in the provided set (macOS, iOS, iPadOS, watchOS, tvOS, visionOS). The description across connected advisories states the issue can cause an unexpected app termination or arbitrary code execution when processing a file...

CVE-2022-42826

CVE-2022-42826 is a use-after-free vulnerability in WebKitGTK/WebKitGTK2/WebKitGTK-based WebKit, caused by improper memory management that could allow arbitrary code execution when processing malicious web content. The CVE entry is supported by multiple connected reports: Apple advisories state t...

CVE-2023-23524

The CVE-2023-23524 issue is a denial-of-service vulnerability caused by improper input validation when processing a certificate. Affected Apple platforms include tvOS 16.3.2, iOS 16.3.1 / iPadOS 16.3.1, watchOS 9.3.1, and macOS Ventura 13.2.1. The root cause is improved input validation in the so...

CVE-2022-46699

CVE-2022-46699 is a WebKitGTK/WebKitGTK2/WebKitGTK4 memory-corruption vulnerability that can allow arbitrary code execution when processing malicious web content. Connected advisories confirm the issue and its fixes across multiple distros: Debian/Ubuntu Debian-LTS (webKit2GTK/WebKit2GTK), Fedora...

CVE-2023-32444

CVE-2023-32444 is a macOS sandbox-evasion issue described as a logic problem that could allow a sandboxed process to bypass sandbox restrictions. Apple fixed it in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5. The public entries identify the affected platform (macOS) and th...

CVE-2022-1420

CVE-2022-1420 affects vim/vim prior to version 8.2.4774 due to an out-of-range pointer offset. The provided connected Advisory (ALAS2023-2023-098) confirms Vim-related entries and lists this CVE among others under Vim, but does not provide additional technical details beyond the description. The ...

CVE-2023-4781

CVE-2023-4781 affects Vim (vim/vim) prior to 9.0.1873. The issue is described as a heap-based buffer/overflow in code related to Vim’s substitution handling (vim_regsub_both) with multiple related CVEs cited in downstream advisories. Impact, as reported by the connected documents, includes potent...

CVE-2022-1619

CVE-2022-1619 is a heap-based buffer overflow in Vim's cmdline_erase_chars (vim/vim) before version 8.2.4899. The vulnerability can crash Vim, corrupt memory, and potentially enable remote code execution. The connected Astra Linux bulletin confirms the same technical detail. The provided document...

CVE-2022-2125

CVE-2022-2125: Vim (vim/vim) prior to 8.2 suffers a heap-based buffer overflow in the code paths linked to vim/vim; reported by Astra Linux and Cloud Foundry bulletins among others. The issue is addressed by Vim updates (Apple security content notes multiple Vim fixes, including this one). Remedi...

CVE-2022-46705

CVE-2022-46705 is a spoofing vulnerability in the handling of URLs that can enable address-bar spoofing when visiting a malicious site. The initial description notes improved input validation and lists affected platforms (Apple products) with fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, an...

CVE-2021-30955

CVE-2021-30955 describes a race condition in Apple's iOS/macOS kernel handling that could allow a malicious user-space app to gain kernel privileges. The initial entry notes a fix in macOS Monterey 12.1 and corresponding iOS/iPadOS/watchOS/tvOS updates (12.1/15.2), addressing a race-condition wit...

CVE-2021-4187

CVE-2021-4187 (vim) is listed in Debian LTS advisory DLA-4097-1 for Vim on Debian 11 (bullseye). The connected document specifies a memory corruption issue: a Double free in the VimScript9 compiler when a nested function has a line break in its argument list. Debian fixes this in vim package vers...

CVE-2022-42863

CVE-2022-42863 is a WebKit/WebKitGTK memory corruption issue addressed by improved state management. The CVE entry specifies that processing malicious web content may lead to arbitrary code execution and lists affected platforms/versions: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPad...

CVE-2022-0158

CVE-2022-0158 affects Vim and is described in connected advisories as a heap-based issue in Vim’s memory handling, with a specific reference to a 1‑byte heap-out-of-bounds read in compile_get_env(). Public advisories also point to updated Vim packages (e.g., Vim 9.0.1160+ in ALAS advisories) as t...

CVE-2022-0319

CVE-2022-0319 is an out-of-bounds read in Vim (vim/vim) prior to 8.2. The Debian LTS advisory for Vim lists CVE-2022-0319 among multiple Vim-related fixes and notes that upgrades to newer Vim packages address the issue. Affected product: Vim on Debian/Ubuntu family (and related Vim packages in ot...

CVE-2022-46691

CVE-2022-46691 is a memory consumption issue in WebKitGTK / WebKit that may enable arbitrary code execution when processing malicious web content. Connected advisories confirm the issue affects WebKitGTK/WebKit, with fixes delivered in Safari 16.2 and corresponding WebKitGTK updates. The underlyi...

CVE-2022-2124

CVE-2022-2124 describes a Buffer Over-read in the GitHub repository vim/vim prior to 8.2. The Astra Linux security bulletin confirms a Buffer Over-read in vim prior to 8.2. No additional technical details (affected platforms, exact root cause, exploit status) or remediation steps are provided in ...

CVE-2025-24189

CVE-2025-24189 is a memory corruption vulnerability in processing malicious web content that is fixed in Safari 18.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 and tvOS 18.3. Affected WebKit components are the WebKitGTK/WebKitGTK4 family in Linux distributions (per SUS...

CVE-2022-1720

CVE-2022-1720: Buffer over-read in vim/vim, specifically in grab_file_name, affects Vim prior to 8.2.4956. The Astra Linux bulletin and other connected sources confirm the same vulnerability description, noting it can crash Vim, modify memory, and potentially enable remote code execution. The pub...

CVE-2022-1898

CVE-2022-1898 refers to a Use After Free in Vim when handling vim/vim code paths, with the description stating the issue occurs in Vim prior to version 8.2. Connected documents corroborate the vulnerability in Vim and list advisories where Vim was fixed (e.g., Astra Linux bulletin and Cloud Found...

CVE-2025-24163

CVE-2025-24163 affects Apple platforms and has been fixed in multiple OS updates (iOS/iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3, iPadOS 17.7.4, visionOS 2.3). The issue is described as: Parsing a file may lead to an unexpected app termination in CoreAudio. Conn...

CVE-2022-1735

CVE-2022-1735 is a buffer overflow in Vim (vim/vim) prior to version 8.2.4969. The connected Astra Linux bulletin corroborates the issue as a classic buffer overflow in Vim before the 8.2.4969 release. The provided documents do not specify affected platforms beyond Vim itself, nor do they include...

CVE-2024-54543

CVE-2024-54543 is a memory corruption flaw in WebKit when processing maliciously crafted web content. Apple’s advisories enumerate fixed products/versions: visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2. Connected sources (e.g., WebKit GTK deployment...

CVE-2022-1851

CVE-2022-1851 corresponds to a Vim out-of-bounds read vulnerability affecting vim/vim before 8.2. The Astra Linux security bulletin explicitly lists this as Out-of-bounds Read in vim/vim prior to 8.2, and other advisories (Amazon ALAS2023-2023-098, Cloud Foundry USN) reference the CVE within Vim ...

CVE-2020-9849

CVE-2020-9849 affects Apple platforms including macOS Big Sur 11.0.1, iOS/iPadOS 14.0, watchOS 7.0, tvOS 14.0, and related Windows components. The issue is described as an information disclosure due to improved state management that may allow memory leakage. Remediation is to update to the listed...

CVE-2022-1674

CVE-2022-1674 affects Vim up to version before 8.2.4938, where a NULL pointer dereference in vim_regexec_string (regexp.c:2733) can crash the app via crafted input (DoS). The CVE is documented with a MEDIUM risk (CVSS v3.1 base 5.5; LOCAL access, UI required, high impact on availability). Remedia...