CVE-2026-39868

CVE-2026-39868 affects Apple platforms (macOS Tahoe, iOS, iPadOS) and centers on a risk from improper input validation in the kernel pathway that could allow an app to cause an unexpected system termination or kernel memory corruption. The vulnerability is addressed in macOS Tahoe 26.5.2 and iOS/...

CVE-2020-27912

CVE-2020-27912: A memory-unsafe out-of-bounds write in ImageIO when processing a maliciously crafted image could lead to arbitrary code execution. Public details in the Apple advisory HT211931/HT211929 indicate the issue affected macOS Big Sur (fixed in 11.0.1) and related iOS/watchOS/iPadOS upda...

CVE-2021-30748

CVE-2021-30748 is a memory corruption vulnerability in Apple platforms that could allow arbitrary code execution with kernel privileges. The issue is addressed in iOS 14.7 and macOS Big Sur 11.5. Documentation consistently attributes the root cause to memory corruption with improved state managem...

CVE-2023-23536

The CVE-2023-23536 issue is an Apple kernel privilege escalation fixed by improved bounds checks. Affected products include macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5, iOS 16.4 and 15.7.4/iPadOS 16.4 and 15.7.4, tvOS 16.4, and watchOS 9.4. It can allow an app to execute arbit...

CVE-2023-42913

CVE-2023-42913 affects macOS Sonoma 14.2 where remote Login sessions may obtain full disk access due to an issue in state management. Apple and Red Hat/NVD references indicate the vulnerability is addressed in macOS Sonoma 14.2 (with fixes applied to Remote Login/session handling). The root cause...

CVE-2024-40778

The CVE-2024-40778 issue is an authentication-related flaw fixed by Apple in macOS Sonoma 14.6, iOS 17.6, iPadOS 17.6, and iOS 16.7.9 / iPadOS 16.7.9. The root cause is described as an authentication issue mitigated by improved state management, with the consequence that Photos in the Hidden Phot...

CVE-2025-24099

CVE-2025-24099 affects macOS systems with a local-privilege-escalation vector that is mitigated by updates: macOS Sequoia 15.3, macOS Ventura 13.7.3, and macOS Sonoma 14.7.3. The issue is described as improved checks addressing a local elevation of privileges; exploitation details are not provide...

CVE-2025-30463

The CVE-2025-30463 entry concerns Apple platforms (iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4). It describes an issue where an app may access sensitive user data, mitigated by an improved restriction of data container access. The vulnerability is addressed in the published security content for the...

CVE-2021-30768

CVE-2021-30768 is a logic issue: Apple fixed a sandbox-bypass in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-004 Catalina. The vulnerability allows a sandboxed process to circumvent sandbox restrictions, related to input validation in the affected components. Th...

CVE-2021-30788

CVE-2021-30788 affects Apple platforms and is triggered by processing a maliciously crafted TIFF file.根 The issue leads to denial-of-service or memory disclosure and is mitigated by fixes in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-005 Mojave/2...

CVE-2021-30789

CVE-2021-30789 concerns an out-of-bounds read in font-file processing that could lead to arbitrary code execution. Public sources (NVD/Red Hat advisories) state the issue is addressed by input-validation improvements and is fixed in Apple platforms: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS...

CVE-2021-30864

CVE-2021-30864 describes a macOS App Sandbox escape via Launch Services/Open, enabling sandbox-bypass techniques against sandboxed apps (notably Microsoft Office). The linked MSSECURE analysis confirms the vulnerability exploited by manipulating the container directory, and abusing open and envir...

CVE-2022-32790

CVE-2022-32790 affects Apple OSes including tvOS, watchOS, iOS 15.5 / iPadOS 15.5, macOS Monterey 12.4 and macOS Big Sur 11.6.6, plus Security Update 2022-004 Catalina. A remote attacker could cause a denial-of-service. The issue was fixed in the listed versions (and related security updates).

CVE-2022-42861

CVE-2022-42861 is an Apple sandbox-escape vulnerability. The issue arises from insufficient checks that allowed an app to break out of its sandbox, as described in the CVE entry. According to the NVD entry, Apple fixed the vulnerability with improved checks, and addressed it in specific OS releas...

CVE-2023-27951

CVE-2023-27951 affects macOS — specifically Archive Utility bypassing Gatekeeper. Documents show the issue is resolved by Apple in macOS Ventura 13.3, macOS Monterey 12.6.4, and macOS Big Sur 11.7.5 with improved checks. Connected sources corroborate Gatekeeper bypass risk and list the fixed rele...

CVE-2024-27836

CVE-2024-27836 affects Apple’s ImageIO component in Apple Vision Pro stack, with the issue described as: processing a maliciously crafted image may lead to arbitrary code execution. Affected products/versions include visionOS 1.2, macOS Sonoma 14.5, iOS 17.5, and iPadOS 17.5. The Apple security c...

CVE-2025-31194

The CVE-2025-31194 entry describes an authentication issue in macOS where a Shortcut could run with admin privileges without authentication. The connected sources confirm the root cause relates to state management, and the vulnerability is mitigated by updates in macOS versions: Ventura 13.7.5, S...

CVE-2021-30960

CVE-2021-30960 concerns a buffer overflow in the Audio handling path of macOS. Public documentation indicates the issue is fixed in macOS Big Sur 11.6.3 and is also addressed in macOS Monterey 12.1 across the Audio stack. The vulnerability could be triggered by parsing a maliciously crafted audio...

CVE-2022-46716

CVE-2022-46716 describes a logic issue in Apple’s Private Relay state management where Private Relay functionality did not match system settings. Affected products include macOS Ventura (fixed in 13.1) and iOS/iPadOS (fixed in 16.2). The Connected documents confirm this mismatch and provide the r...

CVE-2023-23543

CVE-2023-23543 affects Apple platforms (macOS Ventura 13.3; iOS 15.7.4/iPadOS 15.7.4; iOS 16.4/iPadOS 16.4; watchOS 9.4). A sandboxed app may be able to determine which other app is currently using the camera due to restricted observability of app states. Root cause: privacy-related observability...

CVE-2023-27931

CVE-2023-27931 affects Apple OS family components where an app may access user-sensitive data. The issue was mitigated by removing the vulnerable code and is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, macOS Big Sur 11.7.3, iOS 16.4, iPadOS 16.4, tvOS 16.4, and watchOS 9.4. Connected sour...

CVE-2025-31233

CVE-2025-31233 : The issue arises from improper input handling in video processing, leading to possible app termination or memory corruption when processing a maliciously crafted video file. Apple’s fixed versions include watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and i...

CVE-2025-31250

CVE-2025-31250 affects macOS Sequoia 15.5. The issue is an information disclosure where an app may gain access to sensitive user data. The vulnerability is addressed in macOS Sequoia 15.5 with updated privacy controls. According to the Apple advisory, the fix ships as part of the Sequoia 15.5 sec...

CVE-2025-43211

CVE-2025-43211 is corroborated across multiple advisories (Debian DSA-5978-1, DEBIAN:DSA-5978-1, Fedora package advisories, AlmaLinux ALSA notes) as a WebKitGTK/webkit2gtk vulnerability where processing web content may lead to a denial-of-service. Connected documents identify the affected compone...

CVE-2025-43240

CVE-2025-43240 is linked to WebKitGTK/webkit2gtk in multiple distributions. The issue is a logic flaw where a download’s origin may be incorrectly associated. Public details in connected advisories show fixes implemented as WebKitGTK/WebKit2GTK updates (e.g., 2.48.5 series) across Debian (DSA-597...

CVE-2021-30775

CVE-2021-30775 describes a memory corruption in Apple devices triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public sources indicate the vulnerability is addressed via state-management improvements and is fixed in affected platforms as f...

CVE-2022-32940

CVE-2022-32940 affects Apple platforms (tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, watchOS 9.1). The issue enables an app to potentially execute arbitrary code with kernel privileges due to a bounds-checking flaw; Apple notes this is fixed in the listed OS versions. The CVE entry provides ...

CVE-2022-42795

CVE-2022-42795 describes a memory consumption vulnerability tied to processing a malicious image that could lead to arbitrary code execution. The issue affects Apple platforms (tvOS 16, iOS 16, macOS Ventura 13, watchOS 9) and is mitigated by memory handling improvements in the respective updates...

CVE-2022-42832

CVE-2022-42832 is a race condition in Apple OS components. The descriptor states a race condition was addressed with improved locking, and that the issue could let an app with root privileges execute arbitrary code with kernel privileges. Affected: iOS/iPadOS (fixed in iOS 16.1 and iPadOS 16), ma...

CVE-2022-46703

Summary : CVE-2022-46703 is an Apple security vulnerability described as a logic issue that could allow an app to read sensitive location information. Affected products/versions include iOS and iPadOS prior to the fixed releases, and macOS Ventura prior to 13.1; per sources, fixes are in iOS 15.7...

CVE-2024-54519

CVE-2024-54519 affects macOS Find My in macOS Sonoma 14.7.2 and macOS Sequoia 15.2. The issue arises from logging, and an app may read sensitive location information. Apple’s entries confirm the fix is in Sonoma 14.7.2 and Sequoia 15.2 via sanitizing logging. Remediation is to update to the patch...

CVE-2025-24178

CVE-2025-24178 affects Apple platforms via a sandbox-escape issue addressed by updates across several OS versions: macOS Ventura 13.7.5; macOS Sequoia 15.4; macOS Sonoma 14.7.5; iOS 18.4; iPadOS 18.4; tvOS 18.4. The root cause is described as improved state management, enabling an app to break ou...

CVE-2021-30808

CVE-2021-30808 is an Apple sandbox vulnerability. A malicious application could modify protected parts of the file system. Patched in tvOS 15, watchOS 8, iOS 15, and iPadOS 15; root cause described as an issue in Sandbox with improved checks. Exploitation status is not provided in the supplied do...

CVE-2021-30814

CVE-2021-30814 affects Apple ImageIO (and related image-processing paths) across tvOS, iOS, iPadOS, and watchOS. The root cause is a memory corruption issue triggered by processing a maliciously crafted image, addressed by input-validation/memory-handling fixes in the updates. Affected platforms:...

CVE-2021-30853

CVE-2021-30853 affects macOS Big Sur (up to 11.6). A security bug in how files with a Shebang header are interpreted by syspolicyd could cause the OS to treat a malicious app as safe, bypassing Gatekeeper checks. The issue is fixed in macOS Big Sur 11.6; users should apply the 11.6 update to reme...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2022-32819

The CVE-2022-32819 entry describes a logic issue that could allow an app to gain root privileges. It is addressed in Apple software updates across multiple platforms: iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina...

CVE-2023-40384

CVE-2023-40384 describes a permissions issue where an app may read sensitive location information. Apple fixed it by improving redaction of sensitive data. The fix courses include tvOS 17, iOS 17, iPadOS 17, and macOS Sonoma 14. The Connected documents confirm the vulnerability and the affected O...

CVE-2024-40794

CVE-2024-40794 affects Apple Safari on macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6. The issue, described as a failure in state management, allowed Private Browsing tabs to be accessed without authentication. Apple patched this by shipping fixes in macOS Sonoma 14.6, iOS 17.6, and iPadOS 17.6 (an...

CVE-2024-54520

The CVE-2024-54520 issue is a path-handling vulnerability in macOS components that could allow an app to overwrite arbitrary files. Apple’s security content attributes the problem to improved validation in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2, with the fix applying to...

CVE-2025-31183

The CVE-2025-31183 issue affects Apple platforms as described in connected documents, with fixes in macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is improved restriction of data container access, and the vulnerability could allow an app to access se...

CVE-2020-10005

CVE-2020-10005 is an Apple/macOS SMB server vulnerability disclosed by Talos describing a TREE_CONNECT stack buffer overflow caused by unsafe handling of very long share paths, enabling memory corruption and possible code execution. The public description notes a resource exhaustion/denial of ser...

CVE-2022-32813

The CVE-2022-32813 issue involves improved memory handling and is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, and watchOS 8.7. A root-privileged app may be able to execute arbitrary code with kernel privileges. Affect...

CVE-2022-32815

CVE-2022-32815 is an Apple kernel memory handling issue that enables a locally executed arbitrary code with kernel privileges when exploited by a root-privileged app. The vulnerability affects multiple Apple platforms and is fixed by updates: iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Mon...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...

CVE-2023-23501

CVE-2023-23501 affects macOS Ventura, where a memory handling issue could allow an app to disclose kernel memory. The vulnerability is addressed in macOS Ventura 13.2 with improved memory handling, per the NVD/NVD-related sources. Affected component is listed as Kernel-related memory handling; ro...

CVE-2023-23506

CVE-2023-23506 is documented in Apple security content as affecting macOS Ventura 13.2, with the vulnerable component reported as libxpc. The issue is a permissions validation flaw that could allow an app to access user-sensitive data. Apple indicates this was addressed in macOS Ventura 13.2 via ...

CVE-2023-27941

CVE-2023-27941 describes a validation issue addressed by improved input sanitization, with a fix released across multiple Apple platforms: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, iOS 15.7.4, and iPadOS 15.7.4. The issue could allow an app to disclose kernel memory. The pr...

CVE-2023-41995

CVE-2023-41995 describes a use-after-free vulnerability in Apple kernel components surfaced as memory-management issue. Affected products include iOS 17, iPadOS 17, and macOS Sonoma 14. The flaw may allow an app to execute arbitrary code with kernel privileges, with a local attack vector and user...

CVE-2025-24097

The CVE-2025-24097 entry concerns a permissions issue that could allow an app to read arbitrary file metadata. Affected products include macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is a permissions restriction flaw described as “additional rest...