CVE-2025-31238

The CVE-2025-31238 issue affects Apple Safari and related OS versions: Safari 18.5; iOS 18.5/iPadOS 18.5; macOS Sequoia 15.5; tvOS 18.5; visionOS 2.5; watchOS 11.5. The vulnerability arises from processing maliciously crafted web content, leading to memory corruption. The fix is described as an i...

CVE-2026-20643

CVE-2026-20643 is a WebKit/Web navigation cross-origin issue in Safari and Apple OS web rendering components. The fixed entry notes that processing maliciously crafted web content could bypass the Same Origin Policy due to an improved input validation in the Navigation API. Affected context inclu...

CVE-2021-30844

CVE-2021-30844 affects macOS Big Sur 11.6 and macOS Catalina via the Security Update 2021-005. A logic issue in state management allowed a remote attacker to leak memory. The issue is fixed by the Apple security updates cited (HT212805/HT212871/HT212804/HT212872) and is reflected in NVD with CVSS...

CVE-2021-30873

CVE-2021-30873 affects macOS Monterey 12.0.1 (AppKit section). The issue is described as a logic issue addressed with improved state management that may allow a malicious application to elevate privileges. The fix is in macOS Monterey 12.0.1. Other documents corroborate the vulnerability’s associ...

CVE-2022-32831

CVE-2022-32831 is an out-of-bounds read issue fixed by improved bounds checking in Apple code. Affected were macOS versions prior to Security Update 2022-005 and macOS Big Sur 11.6.8, Monterey 12.5, and Catalina. Processing a maliciously crafted AppleScript binary may lead to unexpected terminati...

CVE-2023-27952

CVE-2023-27952 describes a race condition that was addressed by improved locking. The issue allowed an app to bypass Gatekeeper checks and is fixed in macOS Ventura 13.3. Affected product/version is macOS Ventura prior to 13.3; the mitigation is to update to Ventura 13.3 or later. The available c...

CVE-2025-24108

CVE-2025-24108 affects macOS Sequoia 15.3 where an access issue could allow an app to access protected user data. The NVD description notes the issue was addressed with additional sandbox restrictions and that the fix is included in macOS Sequoia 15.3. Apple’s security content for Sequoia 15.3 co...

CVE-2025-30466

CVE-2025-30466 concerns a bypass of the Same Origin Policy in Apple web/OS components. The issue is addressed through improved state management and is fixed in Safari 18.4, iOS 18.4, iPadOS 18.4, visionOS 2.4, and macOS Sequoia 15.4. The CVE entry lists network as the attack vector, with no user ...

CVE-2025-31199

CVE-2025-31199 is a logging-data-redaction flaw addressed by Apple in macOS/macOS-derived OS updates (Sequoia 15.4, Sonoma 14.x line, iOS/iPadOS 18.4, visionOS 2.4). The issue allowed an app to access sensitive user data due to insufficient data redaction in log outputs. Apple’s advisories list t...

CVE-2021-30776

CVE-2021-30776 is an Apple logic-issue vulnerability fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7 (Security Update 2021-004 Catalina). Description: Playing a malicious audio file may cause an unexpected application termination. Connected sources (ENISA EUVD-2021-17693, RH Red...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2022-32797

CVE-2022-32797 affects macOS where processing a maliciously crafted AppleScript binary could terminate the process or disclose process memory. Root cause: improved checks now address this issue. Remediation: apply Security Update 2022-005 for Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12....

CVE-2022-32938

CVE-2022-32938 affects Apple Shortcuts handling of directory paths. A parsing issue allowed a shortcut to check for the existence of an arbitrary path on the file system. Affected products/versions: iOS 16.1 and iPadOS 16; macOS Ventura 13. The issue is mitigated by the vendor’s fix through impro...

CVE-2022-46720

CVE-2022-46720 affects Apple platforms (iOS 16.2, iPadOS 16.2, macOS Ventura 13.1). Root cause: integer overflow mitigated by improved input validation in dyld, with the issue described as allowing an app to break out of its sandbox. Impact: sandbox escape if exploited. Exploitation details are n...

CVE-2023-23534

CVE-2023-23534 affects macOS Big Sur 11.7.5 and macOS Ventura 13.3. Root cause stated in Apple advisories is within the Carbon Core area, where processing a maliciously crafted image may cause disclosure of process memory. The issue is fixed in the listed OS updates (Big Sur 11.7.5 and Ventura 13...

CVE-2024-44172

CVE-2024-44172 is a macOS privacy issue where an app may access contacts due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15. Affected components and exact root cause are described in the Apple se...

CVE-2024-54519

CVE-2024-54519 affects macOS Find My in macOS Sonoma 14.7.2 and macOS Sequoia 15.2. The issue arises from logging, and an app may read sensitive location information. Apple’s entries confirm the fix is in Sonoma 14.7.2 and Sequoia 15.2 via sanitizing logging. Remediation is to update to the patch...

CVE-2025-30460

CVE-2025-30460 is a permissions issue fixed in macOS updates: Sequoia 15.4, Sonoma 14.7.5, and Ventura 13.7.5. The issue is mitigated by removing vulnerable code and adding additional checks; an app may have been able to access protected user data. Impact and remediation are tied to the cited mac...

CVE-2020-10005

CVE-2020-10005 is an Apple/macOS SMB server vulnerability disclosed by Talos describing a TREE_CONNECT stack buffer overflow caused by unsafe handling of very long share paths, enabling memory corruption and possible code execution. The public description notes a resource exhaustion/denial of ser...

CVE-2020-27943

CVE-2020-27943 describes a memory corruption bug in FontParser when processing font files, leading to arbitrary code execution. Apple fixes apply to tvOS 14.3, iOS/iPadOS 14.3, macOS Big Sur 11.1, and corresponding Security Updates for Catalina/Mojave, plus watchOS 7.2. The root cause is a font p...

CVE-2021-30924

CVE-2021-30924 is a denial-of-service in the Kernel that can cause a device to unexpectedly restart. The initial description notes a remote attacker can trigger this DoS via kernel state handling issues; the connected Apple advisories confirm the impact, list Kernel as affected, and state the fix...

CVE-2022-22578

CVE-2022-22578 is an Apple platform logic issue related to insufficient validation that could allow a malicious app to gain root privileges. The vulnerability is addressed by patches in tvOS 15.3, iOS 15.3, iPadOS 15.3, watchOS 8.4, and macOS Monterey 12.2. Technical sources (Apple security updat...

CVE-2022-32812

CVE-2022-32812 is a macOS kernel memory handling issue fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, and Security Update 2022-005 Catalina. The advisory indicates an app may execute arbitrary code with kernel privileges due to improved memory handling. Affected platforms include macOS relea...

CVE-2022-42820

CVE-2022-42820 is a memory corruption issue affecting Apple IOHIDFamily components, addressed by Apple in the macOS Ventura 13 security updates and iOS 16.1 / iPadOS 16. The issue could lead to an app termination or arbitrary code execution. The official Apple advisory references IOHIDFamily and ...

CVE-2022-42838

CVE-2022-42838 affects macOS: camera data access logic could allow a camera extension to continue receiving video after the activating app closes. Impact is limited to local context (ACA/AVL vector) with low overall risk as described; remediation is Apple’s macOS Ventura 13 security update which ...

CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2024-54507

CVE-2024-54507 describes a type confusion in the Apple XNU kernel that could allow a user‑level attacker to read kernel memory. The issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2 through improved memory handling. Connected sources confirm the root cause as a type confusion in the ...

CVE-2024-54520

The CVE-2024-54520 issue is a path-handling vulnerability in macOS components that could allow an app to overwrite arbitrary files. Apple’s security content attributes the problem to improved validation in macOS Sonoma 14.7.2, macOS Sequoia 15.2, and macOS Ventura 13.7.2, with the fix applying to...

CVE-2025-24156

CVE-2025-24156 affects macOS components where an integer overflow was mitigated by improved input validation. Affected versions include macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue could allow an app to elevate privileges. The NVD entry lists a LOCAL/LOW-PR interac...

CVE-2025-30456

CVE-2025-30456 involves a parsing issue in how directory paths are handled. Apple fixed it with improved path validation in macOS Ventura 13.7.5, macOS Sonoma 14.7.5, macOS Sequoia 15.4, and iOS/iPadOS 18.4. The issue could allow an app to gain root privileges. Affected component/firmware version...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2023-27936

CVE-2023-27936 is an out-of-bounds write vulnerability in Apple OS components where insufficient input validation can lead to an app causing unexpected system termination or writes to kernel memory. Affected: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, and iOS/iPadOS 15.7.4. ...

CVE-2023-32396

The CVE-2023-32396 issue affects Apple platforms and is fixed in Xcode 15, tvOS 17, watchOS 10, iOS 17, iPadOS 17, and macOS Sonoma 14. The description states that an app may be able to gain elevated privileges and that the fix involved improved checks. No additional attack vectors or exploit det...

CVE-2024-23203

CVE-2024-23203 affects Apple Shortcuts on macOS Sonoma 14.3, iOS 17.3, and iPadOS 17.3. A shortcut may access sensitive data via certain actions without prompting the user. Root cause: insufficient permissions checks; fixed by additional permissions checks. Remediation: update to macOS Sonoma 14....

CVE-2024-27884

CVE-2024-27884 affects Apple platforms (macOS Sonoma 14.5, watchOS 10.5, visionOS 1.2, tvOS 17.5, iOS 17.5 and iPadOS 17.5). Description in multiple sources indicates the issue was addressed with a new entitlement, enabling an app to access user-sensitive data. In visionOS security content, CVE-2...

CVE-2024-40812

CVE-2024-40812 is a logic issue in Apple software addressed by improved checks and fixed in multiple OS versions. The vulnerability could allow a shortcut to bypass Internet permission requirements, with the fixed versions including iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Ve...

CVE-2024-54550

CVE-2024-54550 concerns Apple platforms: macOS Sequoia, iOS, and iPadOS. The issue arises from the Contact Information Handler, enabling an app to view autocompleted contact information from Messages/Mail in system logs. Root cause described as improved redaction in macOS/iOS/iPadOS updates. Affe...

CVE-2025-24097

The CVE-2025-24097 entry concerns a permissions issue that could allow an app to read arbitrary file metadata. Affected products include macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, and macOS Sequoia 15.4. The root cause is a permissions restriction flaw described as “additional rest...

CVE-2025-43343

CVE-2025-43343 involves a memory-handling issue in WebKitGTK/WebKit2GTK where processing malicious web content may crash the process. The initial advisory states the flaw is fixed in Safari 26, visionOS 26, watchOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26; Debian/AlmaLinux advisories confirm WebK...

CVE-2021-30926

CVE-2021-30926 is a memory corruption issue in ICC profile processing that could lead to arbitrary code execution when handling a malicious image. Apple attributes the root cause to improper input validation during ICC profile processing, and fixes were released in macOS Monterey 12.1 and corresp...

CVE-2022-32834

CVE-2022-32834 describes an access issue addressed by sandbox improvements. It affects Apple macOS, with fixes implemented in macOS Monterey 12.5, macOS Big Sur 11.6.8, and Security Update 2022-005 Catalina. The issue enables an app to access sensitive user information due to sandbox-related weak...

CVE-2022-32843

CVE-2022-32843 is an out-of-bounds write vulnerability addressed by Apple's Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12.5. Processing a maliciously crafted PostScript file may cause an app to terminate or disclose process memory. Exploitation would be local (att...

CVE-2023-27942

CVE-2023-27942 affects Apple platforms (macOS, iOS, iPadOS, tvOS, watchOS). The issue involved an app potentially accessing user‑sensitive data due to insufficient checks; Apple addressed it with improved checks. The fix is listed for macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6....

CVE-2024-23204

CVE-2024-23204 affects macOS Shortcuts (and related OSes) with a root cause of insufficient permissions checks that could allow a shortcut to access sensitive data via certain actions without prompting the user. The issue is fixed in macOS Sonoma 14.3 and across watchOS 10.3, iOS 17.3 and iPadOS ...

CVE-2025-24176

CVE-2025-24176 is a local permission-elevation vulnerability in macOS. The issue is described as a permissions problem addressed by improved validation and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. A local attacker may gain elevated privileges due to insuffici...

CVE-2022-32811

CVE-2022-32811 describes a memory corruption flaw that is mitigated by improved locking. Affected software includes macOS Monterey 12.5, macOS Big Sur 11.6.8, and Security Update 2022-005 Catalina. The issue could allow an app to execute arbitrary code with kernel privileges. Remediation is upgra...

CVE-2023-40432

CVE-2023-40432 is associated with Apple platforms and is addressed by memory-management fixes in multiple OS updates. The connected Apple security content indicates the vulnerability could allow an app to execute arbitrary code with kernel privileges and that mitigation is via updated memory hand...

CVE-2024-23236

CVE-2024-23236 is a local, correctness-type issue in macOS Sonoma 14.5 where an app may read arbitrary files. The publicly documented fix is in macOS Sonoma 14.5 (Apple security content cites CFNetwork as affected). The provided sources indicate the vulnerability is addressed by the macOS 14.5 up...

CVE-2024-27799

CVE-2024-27799 affects Apple OSes: macOS Sonoma 14.5, macOS Ventura 13.6.7, macOS Monterey 12.7.5, and iOS 16.7.8 / iPadOS 16.7.8. The issue arises from insufficient entitlement checks, allowing an unprivileged app to log keystrokes in other apps, including those using secure input mode. Apple’s ...

CVE-2025-24153

CVE-2025-24153 affects macOS Sequoia 15.3 where a buffer overflow in memory handling allowed an app with root privileges to potentially execute arbitrary code with kernel privileges. The issue is addressed in macOS Sequoia 15.3 (patch/fix provided by Apple). The NVD/NCSC entries corroborate a ker...