CVE-2024-40866

CVE-2024-40866 affects WebKitGTK/WebKit2GTK. Visiting a malicious website may lead to address bar spoofing. Public advisories confirm fixes via package updates across distros: Debian (2.46.0-2~deb12u1 for bookworm; newer LTS entries exist), AlmaLinux 8/9 webkit2gtk3 advisories, Fedora package-ann...

CVE-2025-24135

CVE-2025-24135 affects macOS prior to Sequoia 15.3 and is associated with the System Extensions component. The issue arises from insufficient message validation, enabling an app to potentially gain elevated privileges on a local basis. Apple’s Sequoia 15.3 security content lists CVE-2025-24135 un...

CVE-2025-24271

CVE-2025-24271 describes an access issue in AirPlay handling where an unauthenticated user on the same network as a signed‑in Mac could send AirPlay commands without pairing. Apple fixed this in multiple OS updates: macOS Sequoia 15.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, iOS 18.4 and iPadO...

CVE-2022-32847

CVE-2022-32847 affects Apple platforms and was fixed by updates: iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina. The issue, resolved by improved checks, could allow a remote attacker to cause an unexpected system ...

CVE-2022-42829

CVE-2022-42829 is a use-after-free vulnerability in Apple platforms that was fixed with improved memory management. Public sources state the issue could allow an app with root privileges to execute arbitrary code with kernel privileges, affecting iOS and iPadOS (fixed in iOS 16.1 and iPadOS 16) a...

CVE-2023-27933

The CVE-2023-27933 issue is a kernel‑level memory handling flaw that could allow a root‑privileged app to execute arbitrary code. Apple fixes are shipped in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Impact is listed as High for confidentiality, ...

CVE-2024-40789

CVE-2024-40789 is a WebKitGTK/WebKit-related out-of-bounds access issue. The initial CVE description notes an out-of-bounds access that could cause an unexpected process crash when processing malicious web content, with fixes across Apple platforms (iOS, iPadOS, macOS, Safari, watchOS, tvOS, visi...

CVE-2024-44244

CVE-2024-44244 is a memory corruption vulnerability in WebKitGTK/WebKit2GTK where processing maliciously crafted web content could cause an unexpected process crash. Public advisories across several distros confirm the issue and its fixed versions, including Debian webkit2gtk 2.46.3-1~deb11u2 and...

CVE-2020-13520

CVE-2020-13520 affects Pixar OpenUSD 20.05. The issue is an out-of-bounds memory corruption when reconstructing paths from binary USD files, triggered by a specially crafted malformed file. This can lead to remote code execution if a victim processes the attacker-provided file. Connected sources ...

CVE-2022-42806

CVE-2022-42806 is a race-condition vulnerability that Apple fixed in iOS 16.1, iPadOS 16, and macOS Ventura 13. The issue could allow an app to execute arbitrary code with kernel privileges, and the NVD assessment indicates a local attack with high impact, requiring user interaction. Mitigation i...

CVE-2023-23519

The CVE-2023-23519 entry describes a memory corruption issue that affects Apple operating systems when processing images, as stated in multiple sources. Affected components are not enumerated beyond general OS updates, but the vulnerability is addressed by fixes in watchOS 9.3, tvOS 16.3, macOS V...

CVE-2024-54468

CVE-2024-54468 affects Apple platforms and concerns a sandbox escape. The initial description notes: “An app may be able to break out of its sandbox,” and that the issue was addressed with improved checks. The fixed versions span multiple Apple OS families: macOS Ventura 13.7.2, macOS Sonoma 14.7...

CVE-2022-26737

The CVE-2022-26737 entry concerns an out-of-bounds write issue that Apple fixed via improved bounds checking. Affected products include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and iPadOS 15.5. The issue could allow an application to execute arbitrary code with kernel privileges. Remediation is ...

CVE-2023-40414

CVE-2023-40414 affects the WebKitGTK4 web rendering stack (GTK port). The connected advisories confirm a use-after-free in processing web content that could lead to arbitrary code execution. Affected package: webkitgtk4 (and related JS/debug variants) with fixes released as webkitgtk4 2.42.5-1.am...

CVE-2025-24134

CVE-2025-24134 impacts macOS Sequoia 15.3 and concerns an information-disclosure in FaceTime. The entry notes an app may access user-sensitive data and that Apple fixed the issue in Sequoia 15.3 by strengthening privacy controls. The vulnerability is characterized with LOCAL attack vector, low at...

CVE-2022-22625

CVE-2022-22625 is an out-of-bounds read issue in macOS related to processing a maliciously crafted AppleScript binary. The root cause is insufficient input validation, leading to potential termination of the affected application or disclosure of process memory. It has been fixed in macOS Big Sur ...

CVE-2022-32842

CVE-2022-32842 : An out-of-bounds read issue was addressed by validating input more robustly. The vulnerability could allow an app to gain elevated privileges. It is fixed in Security Update 2022-005 Catalina and in macOS Monterey 12.5. Affected components are described in the Apple security cont...

CVE-2023-39434

CVE-2023-39434 is described in connected documents as a use-after-free vulnerability in processing web content that can lead to arbitrary code execution. The issue is associated with WebKit/WebKitGTK ecosystem and is addressed in Apple platforms (iOS 17/iPadOS 17/watchOS 10/macOS Sonoma 14) per t...

CVE-2024-40779

CVE-2024-40779 corresponds to an out-of-bounds read in WebKitGTK/WebKit2GTK. The issue is described as being mitigated by improved bounds checking and is fixed in various Apple OS components (e.g., iOS, iPadOS, macOS Sonoma), and is also acknowledged in Linux distributions via webkit2gtk advisori...

CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2021-30779

CVE-2021-30779 affects Apple ImageIO handling where processing a maliciously crafted image could lead to arbitrary code execution. The issue is addressed with improved checks and is fixed in Apple OS updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. The initial description notes ...

CVE-2023-27937

CVE-2023-27937 describes an integer overflow that was mitigated using improved input validation. The issue affects multiple Apple platforms and versions, where parsing a maliciously crafted plist can cause an app to terminate or execute arbitrary code. Affected software includes macOS Ventura 13....

CVE-2024-44296

CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...

CVE-2025-31251

CVE-2025-31251 affects Apple platforms (watchOS, macOS Sonoma, tvOS, iPadOS, iOS, macOS Sequoia, visionOS, macOS Ventura) where maliciously crafted media processing could lead to unexpected app termination or memory corruption. The vulnerability is addressed with fixes in specific updates: watchO...

CVE-2022-32787

CVE-2022-32787 is an out-of-bounds write vulnerability in how maliciously crafted web content is processed. Root cause: improved bounds checking fixes an out-of-bounds write that could lead to arbitrary code execution. Affected products/versions per the initial description are Apple platforms inc...

CVE-2023-23532

CVE-2023-23532 is an Apple vulnerability where a sandbox escape was addressed by Apple with improved checks. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS updates: iOS 16.4 and iPadOS 16.4, as well as iOS 15.7.6 and iPadOS 15.7.6. The description notes the fix involves enhanced valid...

CVE-2022-26738

CVE-2022-26738 describes an out-of-bounds write vulnerability that was addressed by Apple through bounds checking improvements. The issue could allow an affected application to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.5, macOS Monterey 12.4, iOS 15.5, and ...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2023-40400

CVE-2023-40400 : Apple fixed this issue in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, and macOS Sonoma 14 by adding improved checks. The vulnerability could allow a remote user to cause an app to terminate unexpectedly or execute arbitrary code. The description notes this as a remote-attack possi...

CVE-2024-54542

CVE-2024-54542 affects Apple Safari Private Browsing in iOS 18.2/iPadOS 18.2 (and related Safari 18.2) where Private Browsing tabs could be accessed without authentication. The NVD/Red Hat-Reddit Apple entries confirm an authentication issue fixed by the 18.2 rollups across iOS/macOS/watchOS/tvOS...

CVE-2025-24206

CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...

CVE-2021-30835

CVE-2021-30835 is referenced in multiple sources and is disclosed in the Apple iCloud for Windows 13 advisory as part of a set of vulnerabilities affecting ImageIO (memory corruption), WebKit, Foundation, and CoreGraphics with variant CVEs. Apple notes that processing maliciously crafted images o...

CVE-2022-32919

CVE-2022-32919 affects WebKitGTK and WPE WebKit, where improper UI handling enables UI spoofing when framing malicious content. The initial description notes a fix in iOS 16.2 / iPadOS 16.2 / macOS Ventura 13.1, and connected documents (Alibaba Cloud Linux advisory) list CVE-2022-32919 among WebK...

CVE-2024-40780

CVE-2024-40780 is an out-of-bounds read in WebKitGTK/webkit2gtk. The issue may cause a crash when processing malicious web content. Concrete details in connected sources show affected packages across distributions (Debian webkit2gtk, Fedora webkit2gtk, Debian DSA/DLA advisories, and Amazon Linux ...

CVE-2025-24113

CVE-2025-24113: A UI spoofing vulnerability in Safari/WebKit is fixed in Safari 18.4 and related OS updates (macOS Ventura/ Sonoma, iOS/iPadOS 18.3–18.4, visionOS, watchOS). Exploitation status is not detailed in the provided documents.

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2021-30785

CVE-2021-30785 involves a buffer overflow in Apple’s image processing path (ImageIO) that could be triggered by a maliciously crafted image and may lead to arbitrary code execution. The root cause is described as an overflow that was addressed with improved bounds checking. Affected fixes are ava...

CVE-2022-22599

CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...

CVE-2023-27929

Summary of CVE-2023-27929 : The vulnerability is an out-of-bounds read fixed by earlier input validation updates. Affected Apple platforms include macOS Ventura 13.3; tvOS 16.4; iOS 16.4; iPadOS 16.4; and watchOS 9.4. Impact is memory disclosure potential when processing a maliciously crafted ima...

CVE-2021-30886

CVE-2021-30886 is a kernel-use-after-free in Apple OS kernels (macOS, iOS/iPadOS, watchOS, tvOS) that could allow a local attacker to execute arbitrary code with kernel privileges. Apple fixes claim improved memory management in the kernel; affected products include macOS Monterey 12.0.1, iOS 15....

CVE-2022-32892

CVE-2022-32892 describes an access issue in Apple’s sandbox that could let a sandboxed process circumvent sandbox restrictions. The vulnerability is addressed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Ventura 13. The available documents confirm a sandbox bypass vector but do not p...

CVE-2023-23535

CVE-2023-23535 affects Apple operating systems, with the vulnerability in ImageIO-related memory handling that may cause disclosure of process memory when processing a malicious image. Affected products/versions include macOS Monterey 12.6.6, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 15.7.4/i...

CVE-2023-23538

CVE-2023-23538 is discussed across multiple sources as a logic issue in macOS PackageKit that could allow an app to modify protected parts of the file system. Public details specify the flaw is fixed in macOS Ventura 13.3 and macOS Monterey 12.6.4. No exploitation status is provided in the docume...

CVE-2024-44191

CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...

CVE-2023-23537

CVE-2023-23537 affects Apple platforms via a privacy issue where log entries could reveal sensitive location data. The vulnerability is fixed by Apple in: macOS Ventura 13.3, iOS 16.4/iPadOS 16.4, iOS 15.7.4/iPadOS 15.7.4, watchOS 9.4, and macOS Big Sur 11.7.5. Root cause (as described) is improv...

CVE-2022-22626

CVE-2022-22626 is an out-of-bounds read vulnerability in macOS related to processing a malicious AppleScript binary. Root cause: improved bounds checking fixed an out-of-bounds read. Affected: macOS Big Sur 11.6.5; macOS Monterey 12.3; Security Update 2022-003 Catalina. Impact and exploitation: c...

CVE-2023-40391

CVE-2023-40391 affects Apple platforms with a memory handling issue that may allow an app to disclose kernel memory. Publicly documented fixes apply to tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14 (and Xcode 15). No exploitation status is stated in the provided sources. The vulnerability is ad...

CVE-2025-31203

Apple fixed an integer overflow by improving input validation in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6/18.4, macOS Sonoma 14.7.5, watchOS 11.4, and visionOS 2.4. The issue could allow a local-network attacker to cause a denial-of-service. Affected products and versions are listed in the CV...

CVE-2021-30852

CVE-2021-30852 is a type-confusion issue in Apple’s Foundation component that can be triggered by processing malicious web content, potentially enabling arbitrary code execution. The vulnerability is addressed via memory-handling fixes and is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8,...

CVE-2022-32820

CVE-2022-32820 is an out-of-bounds write issue that Apple fixed by improved input validation. The vulnerability could allow an app to execute arbitrary code with kernel privileges. Affected platforms include iOS/iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and S...