CVE-2022-32945

CVE-2022-32945 affects macOS, with Apple noting an access issue that could allow an app to record audio via paired AirPods. The root cause is tied to sandbox restrictions on third‑party apps; Apple states the vulnerability is fixed in macOS Ventura 13. The CVE appears in multiple Apple advisories...

CVE-2022-46690

CVE-2022-46690 is an Apple family issue described as an out-of-bounds write that was addressed with improved input validation. The Apple security content lists multiple components affected across platforms (iOS, iPadOS, macOS, tvOS, watchOS), with the kernel and several subsystems (e.g., IOMobile...

CVE-2025-31182

CVE-2025-31182 : Apple addresses an issue where an app could delete files it should not access due to improper handling of symlinks. The vulnerability affects multiple Apple OS versions and is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, and m...

CVE-2022-42865

This CVE (CVE-2022-42865) concerns Apple platforms and is addressed by enabling hardened runtime. It is fixed in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2. The issue allows an app to bypass Privacy preferences. The connected documents corroborate: the vulnerability is ...

CVE-2023-42970

CVE-2023-42970 is a WebKitGTK/WebKitGTK3 use-after-free/memory-management issue that affects multiple Linux distributions. In the connected advisories, SUSE-SU-2025:01746-1 and SUSE-SU-2025:02033-1 list webkit2gtk3 updates to version 2.48.2 fixing CVE-2023-42970 (along with other CVEs). The advis...

CVE-2022-32853

CVE-2022-32853 is an out-of-bounds read in processing a malicious AppleScript binary. Affects macOS via AppleScript handling; root cause is improper input validation. Impact described as possible termination or disclosure of process memory. Mitigation: apply Security Update 2022-005 Catalina, mac...

CVE-2025-43216

CVE-2025-43216 is a use-after-free in WebKitGTK/WebKit processing of malicious web content that can cause an unexpected Safari crash. The CVE is referenced in multiple advisories tied to WebKitGTK/WebKit, with fixes implemented in Safari 18.6 and corresponding WebKitGTK updates (e.g., WebKitGTK/W...

CVE-1999-0590

Technical details are not publicly available in the provided documents for CVE-1999-0590; no affected products, versions, impact, or remediation are specified. Monitor for updates from the connected sources.

CVE-2022-32924

CVE-2022-32924 affects Apple platforms (tvOS 16.1; macOS Big Sur 11.7; macOS Ventura 13; watchOS 9.1; iOS 16.1; iPadOS 16). Root cause: improved memory handling exposed a vulnerability that could allow an app to execute arbitrary code with kernel privileges. Impact is kernel-level code execution....

CVE-2022-42808

CVE-2022-42808 is an out-of-bounds write in Apple's kernel that could allow a remote attacker to achieve kernel code execution. Affected products include tvOS, iOS, iPadOS, macOS Ventura, and watchOS, with fixed versions: tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vuln...

CVE-2022-46696

The CVE-2022-46696 entry describes a memory corruption vulnerability caused by insufficient input validation in web content processing. It affects Apple platforms where the issue is fixed: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. Successful exploitation ...

CVE-2023-23525

CVE-2023-23525 is an Apple vulnerability describing a local privilege-escalation where an app may gain root privileges. Public records indicate fixes in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, and macOS Big Sur 11.7.5. The provided documents list these OS versions as the affected and patched t...

CVE-2025-24160

CVE-2025-24160 is a vulnerability in Apple platforms (CoreAudio) where parsing a file may lead to an unexpected app termination. It is addressed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Base metrics show CVSS 3.1 ...

CVE-2025-24161

CVE-2025-24161 affects Apple platforms and multiple components involved in parsing files. Apple’s security content shows this CVE being addressed in iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3, and tvOS 18.3. The underlying issue is a ...

CVE-2021-30833

CVE-2021-30833 affects macOS where unpacking a maliciously crafted archive may allow writing arbitrary files. Public details in connected sources indicate the issue was addressed with improved checks and fixed in macOS Monterey 12.0.1. The vulnerability path is tied to the archive extraction proc...

CVE-2022-42862

CVE-2022-42862 affects Apple platforms (iOS/iPadOS/macOS). The advisory notes the issue was resolved by removing the vulnerable code and is fixed in iOS 16.2 / iPadOS 16.2 and macOS Ventura 13.1, addressing an app-level privacy preferences bypass. The CVSS vector indicates a local, low-attack com...

CVE-2023-23510

CVE-2023-23510 describes a permissions issue in macOS Ventura 13.2 where an app may access a user’s Safari history due to improved validation in the security update. Affected product: macOS Ventura with Safari components exposed by the update. Root cause (as stated): an issue with validation that...

CVE-2023-23526

CVE-2023-23526 involves Gatekeeper bypass via a file downloaded from an iCloud Shared by Me folder. The issue arises from insufficient checks in Gatekeeper, allowing a file from that folder to bypass the gatekeeping checks. Apple fixed this by addressing the vulnerability with additional checks, ...

CVE-2021-30748

CVE-2021-30748 is a memory corruption vulnerability in Apple platforms that could allow arbitrary code execution with kernel privileges. The issue is addressed in iOS 14.7 and macOS Big Sur 11.5. Documentation consistently attributes the root cause to memory corruption with improved state managem...

CVE-2021-30861

CVE-2021-30861 is an Apple WebKit/Safari issue where a malicious application could bypass Gatekeeper checks. The public documentation ties this to a logic issue addressed by improved state management, with remediation provided by macOS Monterey 12.0.1. The Apple Safari security content entry conf...

CVE-2022-32781

CVE-2022-32781 affects Apple platforms (macOS Catalina, Big Sur, Monterey; iOS/iPadOS) with impact of potentially allowing an app with root privileges to access private information. The vulnerability was addressed by enabling hardened runtime and is fixed in macOS Monterey 12.4, iOS 15.5, iPadOS ...

CVE-2022-32785

CVE-2022-32785 describes a null pointer dereference in Apple’s image processing flow. Public sources (NVD/NASL/PRION references) state this issue is fixed by macOS Monterey 12.5, macOS Big Sur 11.6.8, macOS Security Update 2022-005 Catalina, and iOS 15.6/iPadOS 15.6. The root cause is a null poin...

CVE-2022-42866

CVE-2022-42866 affects Apple platforms and is tied to improved handling of caches that could allow an app to read sensitive location information. The NVD entry notes fixes in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2. The accompanying Apple security content lists affec...

CVE-2023-28181

CVE-2023-28181 affects Apple platforms (notably CoreCapture and Kernel-related components) with a memory handling flaw that could allow an app to execute arbitrary code with kernel privileges. The issue is fixed in macOS Ventura 13.3, iOS 16.4 / iPadOS 16.4, iOS 15.7.6 / iPadOS 15.7.6, macOS Mont...

CVE-2025-31219

CVE-2025-31219 is a memory-handling issue in Apple platforms that can cause unexpected system termination or kernel memory corruption. It is fixed in: watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5/iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, and macOS Ventura 13.7.6. The...

CVE-2025-43212

CVE-2025-43212 relates to WebKit/WebKitGTK: processing maliciously crafted web content may cause an unexpected Safari crash. Connected docs confirm it as one of several WebKitGTK issues addressed in security updates and linked to memory handling improvements. Apple’s advisory for Safari 18.6 note...

CVE-2021-30791

CVE-2021-30791 is an Apple vulnerability described as an out-of-bounds read that was addressed by improved bounds checking. The NVD entry notes the issue is fixed in iOS 14.7 and macOS Big Sur 11.5, with processing a maliciously crafted file potentially disclosing user information. Connected sour...

CVE-2021-30864

CVE-2021-30864 describes a macOS App Sandbox escape via Launch Services/Open, enabling sandbox-bypass techniques against sandboxed apps (notably Microsoft Office). The linked MSSECURE analysis confirms the vulnerability exploited by manipulating the container directory, and abusing open and envir...

CVE-2022-46695

Technical details about CVE-2022-46695 are not publicly provided in the connected documents. Available sources only reiterate that a UI spoofing issue was fixed in specific Apple OS versions. Monitor for updates.

CVE-2023-23527

CVE-2023-23527 is an Apple OS vulnerability addressed by updates across multiple platforms. The issue allows a user to gain access to protected parts of the file system and is mitigated by patches in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, iOS 16.4, iPadOS 16.4, tvOS 16.4...

CVE-2023-40417

CVE-2023-40417 affects Safari/WebKit window management when visiting framed content, enabling potential UI spoofing. Root cause: improved state management fixes a window-management issue. Impact per sources: UI spoofing risk if a website frames malicious content. Affected products/versions: Safar...

CVE-2025-24169

The CVE-2025-24169 issue is a logging-related vulnerability in macOS Sequoia (15.3) and Safari (18.3) where data redaction improvements address a potential exposure. The NVD entry notes that a malicious app may be able to bypass browser extension authentication, with a CVSS v3.1 base score of 7.5...

CVE-2025-24204

CVE-2025-24204 is a kernel‑level issue in macOS Sequoia prior to 15.4. The fixed description indicates that an app may be able to access protected user data due to insufficient checks in the involved kernel path. The vulnerability is resolved in macOS Sequoia 15.4 with the update noted by Apple’s...

CVE-2020-27912

CVE-2020-27912: A memory-unsafe out-of-bounds write in ImageIO when processing a maliciously crafted image could lead to arbitrary code execution. Public details in the Apple advisory HT211931/HT211929 indicate the issue affected macOS Big Sur (fixed in 11.0.1) and related iOS/watchOS/iPadOS upda...

CVE-2021-30831

CVE-2021-30831 concerns Apple’s FontParser, where processing a maliciously crafted font could cause an out-of-bounds read leading to disclosure of process memory. The connected Apple Watch content explicitly ties this CVE to FontParser and notes the underlying issue as an out-of-bounds read addre...

CVE-2022-42855

CVE-2022-42855 concerns a logic/entitlements parsing issue in Apple’s DER-entitlements handling. The root cause, as discussed by Project Zero, is in libCoreEntitlements’ DER traversal: three paths handled entitlement sequences differently, causing hidden/unused entitlements to surface under CECon...

CVE-2023-43000

CVE-2023-43000 is a use-after-free vulnerability in WebKit/Web content processing that can lead to memory corruption. Affected products include Apple's macOS/iOS/iPadOS and Safari/WebKit variants, with fixes shipped in macOS Ventura 13.5, iOS 16.6/iPadOS 16.6, Safari 16.6, and iOS 15.8.7/iPadOS 1...

CVE-2024-27817

CVE-2024-27817 is an Apple vulnerability where an app may execute arbitrary code with kernel privileges due to the issue being addressed with improved checks. Affected platforms include macOS (Ventura 13.6.7; Monterey 12.7.5; Sonoma 14.5), iOS and iPadOS (16.7.8 and 17.5), watchOS not specified, ...

CVE-2025-43265

An out-of-bounds read in WebKit/WebKitGTK when processing malicious web content may disclose internal app states. CVE-2025-43265 is fixed in Safari 18.6 and corresponding platform updates (watchOS 11.6, visionOS 2.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6). Related advisories (Debia...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2022-32790

CVE-2022-32790 affects Apple OSes including tvOS, watchOS, iOS 15.5 / iPadOS 15.5, macOS Monterey 12.4 and macOS Big Sur 11.6.6, plus Security Update 2022-004 Catalina. A remote attacker could cause a denial-of-service. The issue was fixed in the listed versions (and related security updates).

CVE-2022-42859

CVE-2022-42859 concerns Apple platforms. According to Apple and related security notes, multiple issues were addressed by removing the vulnerable code, and the fix is shipped in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, and watchOS 9.2. The underlying effect is that an app may be able to bypass ...

CVE-2023-23543

CVE-2023-23543 affects Apple platforms (macOS Ventura 13.3; iOS 15.7.4/iPadOS 15.7.4; iOS 16.4/iPadOS 16.4; watchOS 9.4). A sandboxed app may be able to determine which other app is currently using the camera due to restricted observability of app states. Root cause: privacy-related observability...

CVE-2024-54523

CVE-2024-54523 affects Apple OS families (macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2, iPadOS 18.2). The issue, described as a memory handling/bounds problem, could allow an app to corrupt coprocessor memory. The publicly documented fix is “improved bounds checks” implemented in the lis...

CVE-2025-43227

CVE-2025-43227 affects WebKit/WebKitGTK in Apple Safari/WebKitGTK-based products where processing maliciously crafted web content could disclose sensitive user information. The vulnerability is mitigated by software updates: Safari 18.6; iOS 18.6 and iPadOS 18.6; macOS Sequoia 15.6; tvOS 18.6; wa...

CVE-2021-30768

CVE-2021-30768 is a logic issue: Apple fixed a sandbox-bypass in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-004 Catalina. The vulnerability allows a sandboxed process to circumvent sandbox restrictions, related to input validation in the affected components. Th...

CVE-2021-30775

CVE-2021-30775 describes a memory corruption in Apple devices triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public sources indicate the vulnerability is addressed via state-management improvements and is fixed in affected platforms as f...

CVE-2021-30788

CVE-2021-30788 affects Apple platforms and is triggered by processing a maliciously crafted TIFF file.根 The issue leads to denial-of-service or memory disclosure and is mitigated by fixes in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-005 Mojave/2...

CVE-2021-30789

CVE-2021-30789 concerns an out-of-bounds read in font-file processing that could lead to arbitrary code execution. Public sources (NVD/Red Hat advisories) state the issue is addressed by input-validation improvements and is fixed in Apple platforms: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS...

CVE-2021-30853

CVE-2021-30853 affects macOS Big Sur (up to 11.6). A security bug in how files with a Shebang header are interpreted by syspolicyd could cause the OS to treat a malicious app as safe, bypassing Gatekeeper checks. The issue is fixed in macOS Big Sur 11.6; users should apply the 11.6 update to reme...