CVE-2024-54505

CVE-2024-54505 is a memory corruption vulnerability in WebKitGTK (WebKit2GTK) caused by a type confusion when processing malicious web content. Public advisories confirm fixes in WebKitGTK/WebKit packages: Debian 11 bullseye 2.46.5-1~deb11u1 and Debian 12 bookworm 2.46.5-1~deb12u1; AlmaLinux 8/9 ...

CVE-2022-2126

CVE-2022-2126 describes an Out-of-bounds Read in the Vim project (vim/vim) prior to version 8.2. The available sources explicitly state the vulnerability type and affected product/version, but do not provide details on root cause, impact specifics beyond the out-of-bounds read, or a published fix...

CVE-2020-27904

Summary of CVE-2020-27904 : Apple macOS Big Sur 11.0.1 fixes a kernel-level memory corruption issue described as a logic issue that could allow an application to execute arbitrary code with kernel privileges. The root cause is disclosed as memory corruption in kernel components and was addressed ...

CVE-2023-34241

CVE-2023-34241 (CUPS) affects OpenPrinting CUPS prior to 2.4.6. A use-after-free occurs in cupsdAcceptClient when logging data after a connection closes due to the function httpClose(con->http) freeing the pointer; cupsdLogClient then passes that freed pointer to httpGetHostname. This can happ...

CVE-2022-42823

CVE-2022-42823 describes a type confusion vulnerability in WebKit (affecting WebKitGTK/WebKit2GTK and related WebKit variants) that could allow arbitrary code execution when processing maliciously crafted web content. The issue is addressed by memory-management improvements and fixes are listed f...

CVE-2022-32832

CVE-2022-32832: Apple security issue tied to memory handling that could allow an app with root privileges to execute arbitrary code with kernel privileges. The vulnerability is addressed via updates across Apple operating systems, including iOS 15.6/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monter...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2024-44187

Summary of CVE-2024-44187 (Cross-origin iframe data exfiltration) A cross-origin issue existed involving iframe elements in WebKitGTK/WebKit2GTK, allowing a malicious site to exfiltrate data across origins. The root cause is stated as inadequate tracking of security origins for iframes. Affected ...

CVE-2024-54479

CVE-2024-54479 is documented in Debian security advisories as affecting WebKitGTK/webkit2gtk, where processing maliciously crafted web content may lead to an unexpected process crash. Debian reports this under webkit2gtk in both Debian 11 (bookworm) and LTS context, fixed in webkit2gtk version 2....

CVE-2025-24118

CVE-2025-24118 affects Apple’s kernel on iPadOS/macOS. The issue is described as an out-of-bounds/write-related memory handling race in credential updates (proc_ro.p_ucred) that could allow a kernel crash or credential corruption. Reports in connected sources provide PoCs and demonstrations of a ...

CVE-2022-32923

CVE-2022-32923 is a correctness issue in the JIT that may disclose internal app states when processing malicious web content. Affected products include tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. The vulnerability is fixed in these ...

CVE-2024-23206

CVE-2024-23206 is a WebKitGTK fingerprinting vulnerability observed across multiple ecosystems. The connected documents show an access issue where a maliciously crafted webpage can fingerprint the user, with fixes implemented in WebKit-derived GTK ports. Affected components include webkitgtk/webk...

CVE-2022-32947

CVE-2022-32947 affects Apple platforms (iOS/iPadOS/macOS) and is tied to memory handling issues in GPU/Kernel components that could allow an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability could enable kernel-level code execution and that patc...

CVE-2024-54508

CVE-2024-54508 affects WebKitGTK (webkit2gtk). The issue arises from processing maliciously crafted web content and can lead to an unexpected process crash; memory-related impact is also indicated in related entries. Public advisories confirm fixes in WebKitGTK/WebKit2GTK packages across distribu...

CVE-2025-24143

CVE-2025-24143 is a fingerprinting vulnerability involving WebKit-derived components. The core issue appears to be insufficient access restrictions to the local file system, allowing a malicious webpage to fingerprint the user. Apple patched this in macOS Sequoia 15.3, Safari 18.3, iOS 18.3, iPad...

CVE-2022-42825

CVE-2022-42825 affects Apple platforms including tvOS, macOS, iOS, iPadOS, watchOS and macOS Big Sur/Monterey/Ventura families. The issue stems from entitlement handling that allowed an app to modify protected parts of the file system. Fixed releases: tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS...

CVE-2022-22633

CVE-2022-22633 is a memory corruption vulnerability in Apple’s Accelerate Framework that can be triggered by opening a maliciously crafted PDF, potentially leading to arbitrary code execution. It is fixed in watchOS 8.5, iOS 15.4 / iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3. Publi...

CVE-2023-23503

CVE-2023-23503 describes a logic issue in Apple’s privacy state management that may allow an app to bypass Privacy preferences. The vulnerability is fixed in macOS Ventura 13.2, iOS 16.3/iPadOS 16.3, iOS 15.7.3/iPadOS 15.7.3, tvOS 16.3, and watchOS 9.3. No exploit details are provided in the sour...

CVE-2023-23522

Summary: CVE-2023-23522 is a macOS Ventura 13.2.1 vulnerability described as a privacy issue where an app could observe unprotected user data due to improved handling of temporary files. The issue is publicly documented across multiple sources, including Apple’s security content for Ventura 13.2....

CVE-2022-22617

CVE-2022-22617 : A logic/state-management issue in macOS was fixed. The vulnerability could allow an unprivileged or limited-privilege process to gain elevated privileges. Apple lists affected releases as macOS Big Sur 11.6.5, macOS Monterey 12.3, and Security Update 2022-003 Catalina, with the r...

CVE-2022-1769

Vim/vim is affected by CVE-2022-1769 (Buffer Over-read) in versions prior to 8.2.4974. The connected documents confirm a buffer over-read in Vim, with the fix issued in 8.2.4974+. The provided sources do not specify the exact impact beyond the vulnerability type, so remediation is to upgrade Vim ...

CVE-2024-23254

CVE-2024-23254 concerns WebKit/WebKitGTK components where a malicious website could exfiltrate audio data cross-origin. The initial entry notes the issue is fixed in Apple platforms: tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and Safari 17.4. Public disclosur...

CVE-2022-42803

CVE-2022-42803 describes a race condition that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is addressed by multiple Apple operating system updates: tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, and macOS ...

CVE-2022-1725

CVE-2022-1725 affects Vim/vim before 8.2.4959. The issue is a NULL pointer dereference in the code path leading to a crash (denial of service). Remediation: upgrade Vim to 8.2.4959 or newer per advisories.

CVE-2025-31204

The CVE-2025-31204 issue affects WebKitGTK/WebKit components as applied in affected platforms, where processing maliciously crafted web content may lead to memory corruption. The available connected documents indicate the root cause is memory handling deficiencies, with the vulnerability fixed by...

CVE-2025-31278

CVE-2025-31278 is a WebKitGTK/WebKit2GTK memory corruption issue triggered by processing malicious web content. The connected documents confirm the vulnerability affecting WebKitGTK/WebKit in multiple ecosystems and provide concrete fixes: Debian/Ubuntu-style advisories fix webkit2gtk to version ...

CVE-2023-42833

CVE-2023-42833 is a WebKitGTK/WebKitGTK+ correctness issue where processing web content could lead to arbitrary code execution. The vendor advisory notes fixes in macOS Sonoma 14, Safari 17, iOS 17, and iPadOS 17. Root cause: improved checks in WebKit to address the vulnerability. Practical impac...

CVE-2023-27934

CVE-2023-27934 involves a memory initialization issue in macOS components. Exploitation could allow a remote attacker to cause an unexpected app termination or arbitrary code execution. Affected versions include macOS Ventura 13.3 and macOS Monterey 12.6.4 (as fixed). The connected documents conf...

CVE-2025-24137

CVE-2025-24137 is a type confusion issue addressed by Apple in multiple updates: iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The vulnerability could allow a remote attacker to cause an unexpected application termination...

CVE-2022-22664

CVE-2022-22664 affects macOS/macOS apps (Logic Pro 10.7.3, GarageBand 10.4.6) and macOS Monterey 12.3 via an out-of-bounds read fixed by improved bounds checking. Apple security pages list CVE-2022-22664 under GarageBand MIDI and Logic Pro-related updates, with fixes in these versions to prevent ...

CVE-2022-46693

The CVE-2022-46693 entry describes an out-of-bounds write vulnerability addressed by input-validation improvements. Affected products/versions include tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. The issue can be triggered by processing a malicio...

CVE-2023-35074

CVE-2023-35074 relates to a memory handling issue in WebKit/WebKitGTK used by Apple platforms (tvOS, Safari, watchOS, iOS, iPadOS, macOS Sonoma) and WebKitGTK-based environments. The vendor advisories state that processing web content may lead to arbitrary code execution, and the fix is a memory-...

CVE-2023-42875

CVE-2023-42875 is an arbitrary-code-execution vulnerability in WebKit/WebKitGTK components triggered by processing certain web content. The issue stems from improper memory handling. It is addressed in various advisories: Apple platforms (iOS 17, iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, S...

CVE-2024-44185

CVE-2024-44185 affects Apple’s WebKit-based components and is fixed by updated builds in multiple Apple OS releases. The issue causes an unexpected process crash when processing maliciously crafted web content and is addressed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 / iPad...

CVE-2025-24223

The CVE-2025-24223 issue is a memory corruption vulnerability in WebKit-based components affecting multiple Apple platforms. The advisory states that the flaw is triggered by processing maliciously crafted web content and is mitigated by memory handling improvements, with fixes shipped in: watchO...

CVE-2023-23531

CVE-2023-23531 affects Apple platforms (macOS Ventura 13.2, iOS 16.3, iPadOS 16.3) and was caused by memory-handling issues that could let an app execute arbitrary code in its sandbox or with elevated privileges. Apple indicates the issue is fixed in the listed updates. Any exploitation requires ...

CVE-2022-42864

CVE-2022-42864 describes a race condition in Apple's IOHID kernel path (IOHIDDevice::postElementTransaction) where element data may be read from shared memory while being validated, allowing out-of-bounds reads and writes on kernel heap. Exploitation details circulated in public proof-of-concept ...

CVE-2023-23540

CVE-2023-23540 concerns Apple devices where improved memory handling patches an issue that could allow an app to execute arbitrary code with kernel privileges. The vulnerability affects iOS, iPadOS, and macOS releases, with fixes in iOS 15.7.8/iPadOS 15.7.8, iOS 16.4/iPadOS 16.4, macOS Monterey 1...

CVE-2023-4750

CVE-2023-4750 is a Use After Free in Vim (vim/vim) prior to version 9.0.1857. The connected sources confirm this CVE is associated with Vim and cite a use-after-free issue before the 9.0.1857 patch level. The metrics in the CVE entry indicate a high impact (CVSS base score 7.8; LOCAL exploitabili...

CVE-2021-30855

CVE-2021-30855 is an Apple vulnerability in the Preferences component where a validation issue in the handling of symlinks could allow an application to access restricted files. The issue is addressed in Security Update 2021-005 Catalina, iOS 14.8/iPadOS 14.8 and iOS 15/iPadOS 15, watchOS 8, and ...

CVE-2022-32839

The CVE-2022-32839 issue is resolved by improved bounds checks and affects multiple Apple platforms. Affects macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6, iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The vulnerability could allow a remote attacker to cause an...

CVE-2022-32857

CVE-2022-32857 is a network-privacy flaw fixed by Apple in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6/iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The advisory states that information sent over the network should use HTTPS to prevent eavesdropping; the issu...

CVE-2025-31215

CVE-2025-31215 is a WebKitGTK/WebKit-related issue where processing malicious web content may cause an unexpected process crash. The connected advisories show concrete details across multiple distributions: Affected software: webkit2gtk/WebKitGTK (and its WebKit components) used in Linux distros ...

CVE-2022-22657

CVE-2022-22657 is a memory initialization issue that Apple fixed in Logic Pro 10.7.3, GarageBand 10.4.6, and macOS Monterey 12.3. The Apple advisories indicate this issue affects MIDI handling (Memory initialization) and could cause opening a maliciously crafted file to terminate the application ...

CVE-2025-31206

The CVE-2025-31206 entry describes a type confusion issue in WebKit content processing that can cause an unexpected process crash. Connected advisories confirm this vulnerability affects WebKitGTK/WebKit-based components across multiple Linux distros (e.g., webkit2gtk) and related packages, with ...

CVE-2021-30905

CVE-2021-30905 is an out-of-bounds read vulnerability fixed in Apple OS updates: iOS 15.1 / iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, and macOS Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information. Affected component is title-lis...

CVE-2023-42866

CVE-2023-42866 affects Apple platforms (macOS, iOS/iPadOS, tvOS, Safari, watchOS) where processing web content could lead to arbitrary code execution. The issue is attributed to memory handling vulnerabilities and is fixed in macOS Ventura 13.5, iOS 16.6 / iPadOS 16.6, tvOS 16.6, Safari 16.6, and...

CVE-2024-40776

CVE-2024-40776 is a use-after-free in the WebKitGTK/WebKit2GTK web engine where processing maliciously crafted web content may lead to an unexpected process crash. The initial CVE description confirms the issue and its fix across Apple platforms (iOS, iPadOS, macOS Sonoma, etc.). Connected adviso...

CVE-2022-32933

CVE-2022-32933 describes an information disclosure where a website may track the pages visited by a user in Safari private browsing. The initial entry states the issue was addressed by removing vulnerable code and that a fix exists in macOS Monterey 12.5. Connected documents reference WebKit(WebK...

CVE-2024-40866

CVE-2024-40866 affects WebKitGTK/WebKit2GTK. Visiting a malicious website may lead to address bar spoofing. Public advisories confirm fixes via package updates across distros: Debian (2.46.0-2~deb12u1 for bookworm; newer LTS entries exist), AlmaLinux 8/9 webkit2gtk3 advisories, Fedora package-ann...