CVE-2025-24143

CVE-2025-24143 is a fingerprinting vulnerability involving WebKit-derived components. The core issue appears to be insufficient access restrictions to the local file system, allowing a malicious webpage to fingerprint the user. Apple patched this in macOS Sequoia 15.3, Safari 18.3, iOS 18.3, iPad...

CVE-2024-23254

CVE-2024-23254 concerns WebKit/WebKitGTK components where a malicious website could exfiltrate audio data cross-origin. The initial entry notes the issue is fixed in Apple platforms: tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and Safari 17.4. Public disclosur...

CVE-2024-44185

CVE-2024-44185 affects Apple’s WebKit-based components and is fixed by updated builds in multiple Apple OS releases. The issue causes an unexpected process crash when processing maliciously crafted web content and is addressed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 / iPad...

CVE-2025-31204

The CVE-2025-31204 issue affects WebKitGTK/WebKit components as applied in affected platforms, where processing maliciously crafted web content may lead to memory corruption. The available connected documents indicate the root cause is memory handling deficiencies, with the vulnerability fixed by...

CVE-2024-40782

CVE-2024-40782 is a WebKitGTK/use-after-free vulnerability where processing malicious web content could cause an unexpected process crash. It is addressed in Apple platforms as: iOS 16.7.9 and iPadOS 16.7.9; Safari 17.6; iOS 17.6 and iPadOS 17.6; watchOS 10.6; tvOS 17.6; visionOS 1.3; macOS Sonom...

CVE-2026-28847

CVE-2026-28847 concerns a memory handling issue in WebKit/Web content processing that could trigger a crash when processing maliciously crafted content. Apple’s advisories indicate this vulnerability is fixed in Safari 26.5 and related OS updates (iOS 18.7.9 / iPadOS 18.7.9, macOS Tahoe 26.5, tvO...

CVE-2025-24223

The CVE-2025-24223 issue is a memory corruption vulnerability in WebKit-based components affecting multiple Apple platforms. The advisory states that the flaw is triggered by processing maliciously crafted web content and is mitigated by memory handling improvements, with fixes shipped in: watchO...

CVE-2025-24137

CVE-2025-24137 is a type confusion issue addressed by Apple in multiple updates: iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The vulnerability could allow a remote attacker to cause an unexpected application termination...

CVE-2025-24271

CVE-2025-24271 describes an access issue in AirPlay handling where an unauthenticated user on the same network as a signed‑in Mac could send AirPlay commands without pairing. Apple fixed this in multiple OS updates: macOS Sequoia 15.4, macOS Ventura 13.7.5, macOS Sonoma 14.7.5, iOS 18.4 and iPadO...

CVE-2024-27833

CVE-2024-27833 affects Apple WebKit components across multiple Apple platforms. The issue is described as an integer overflow resolved by input validation, with fixes in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5. The description notes that proces...

CVE-2024-40776

CVE-2024-40776 is a use-after-free in the WebKitGTK/WebKit2GTK web engine where processing maliciously crafted web content may lead to an unexpected process crash. The initial CVE description confirms the issue and its fix across Apple platforms (iOS, iPadOS, macOS Sonoma, etc.). Connected adviso...

CVE-2025-31215

CVE-2025-31215 is a WebKitGTK/WebKit-related issue where processing malicious web content may cause an unexpected process crash. The connected advisories show concrete details across multiple distributions: Affected software: webkit2gtk/WebKitGTK (and its WebKit components) used in Linux distros ...

CVE-2025-31277

CVE-2025-31277 is a memory handling vulnerability in WebKit/WebKitGTK affecting Apple platforms (Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where processing malicious web content could lead to memory corruption. The issue’s root cause is described as memory handling defects that allow m...

CVE-2026-43813

CVE-2026-43813 is a validation issue in Apple’s CloudAttestation component which may allow a malicious app to bypass code signing enforcement. The vulnerability is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The underlying issue relates to inpu...

CVE-2024-27838

CVE-2024-27838 describes a fingerprinting risk in WebKit-based components exposed by Apple platforms. The issue, triggered by visiting a malicious webpage, allows fingerprinting of the user. The CVE is fixed in multiple platforms and versions: tvOS 17.5; iOS 16.7.8 and iPadOS 16.7.8; visionOS 1.2...

CVE-2025-43457

CVE-2025-43457 is a use-after-free in WebKitGTK/web content processing that can crash Safari-based engines. Public notes confirm fixes in WebKitGTK/WebKit components across multiple distributions: Debian/DSA-6172-1 and Debian security tracker list WebKitGTK 2.50.6-1 (for oldstable/trixie) with th...

CVE-2024-23235

CVE-2024-23235 is a kernel race condition addressed by Apple with additional validation. It is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4/iPadOS 17.4, watchOS 10.4, and iOS 16.7.6/iPadOS 16.7.6 and tvOS 17.4. The affected impact is that an app may be able to access user-sensitive data. Th...

CVE-2024-23265

CVE-2024-23265 is a memory corruption vulnerability fixed by updated locking in macOS family. Affected products/versions include macOS Monterey 12.7.4 and later (Ventura 13.6.5, Sonoma 14.4), visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, and tvOS 17.4. The is...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2024-27808

CVE-2024-27808 : The vulnerability is in memory handling within WebKit technologies affecting multiple Apple platforms and WebKitGTK-based components. When processing web content, an attacker could trigger arbitrary code execution. The issue is addressed in: tvOS 17.5, visionOS 1.2, Safari 17.5, ...

CVE-2024-27851

CVE-2024-27851 affects Apple WebKit-based content processing. The issue arises from insufficient bounds checks in processing malicious web content, enabling arbitrary code execution. Official mitigation notes specify fixes across multiple Apple platforms, including tvOS 17.5, visionOS 1.2, Safari...

CVE-2025-31206

The CVE-2025-31206 entry describes a type confusion issue in WebKit content processing that can cause an unexpected process crash. Connected advisories confirm this vulnerability affects WebKitGTK/WebKit-based components across multiple Linux distros (e.g., webkit2gtk) and related packages, with ...

CVE-2025-31251

CVE-2025-31251 affects Apple platforms (watchOS, macOS Sonoma, tvOS, iPadOS, iOS, macOS Sequoia, visionOS, macOS Ventura) where maliciously crafted media processing could lead to unexpected app termination or memory corruption. The vulnerability is addressed with fixes in specific updates: watchO...

CVE-2024-40789

CVE-2024-40789 is a WebKitGTK/WebKit-related out-of-bounds access issue. The initial CVE description notes an out-of-bounds access that could cause an unexpected process crash when processing malicious web content, with fixes across Apple platforms (iOS, iPadOS, macOS, Safari, watchOS, tvOS, visi...

CVE-2024-44244

CVE-2024-44244 is a memory corruption vulnerability in WebKitGTK/WebKit2GTK where processing maliciously crafted web content could cause an unexpected process crash. Public advisories across several distros confirm the issue and its fixed versions, including Debian webkit2gtk 2.46.3-1~deb11u2 and...

CVE-2024-40779

CVE-2024-40779 corresponds to an out-of-bounds read in WebKitGTK/WebKit2GTK. The issue is described as being mitigated by improved bounds checking and is fixed in various Apple OS components (e.g., iOS, iPadOS, macOS Sonoma), and is also acknowledged in Linux distributions via webkit2gtk advisori...

CVE-2024-40780

CVE-2024-40780 is an out-of-bounds read in WebKitGTK/webkit2gtk. The issue may cause a crash when processing malicious web content. Concrete details in connected sources show affected packages across distributions (Debian webkit2gtk, Fedora webkit2gtk, Debian DSA/DLA advisories, and Amazon Linux ...

CVE-2025-24113

CVE-2025-24113: A UI spoofing vulnerability in Safari/WebKit is fixed in Safari 18.4 and related OS updates (macOS Ventura/ Sonoma, iOS/iPadOS 18.3–18.4, visionOS, watchOS). Exploitation status is not detailed in the provided documents.

CVE-2024-44191

CVE-2024-44191 affects Apple platforms and is tied to improper state management that could allow an app to gain unauthorized Bluetooth access. Connected sources confirm the issue is resolved in multiple Apple OS updates: iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, iOS 18 and iPadOS 18, visionOS 2...

CVE-2025-31219

CVE-2025-31219 is a memory-handling issue in Apple platforms that can cause unexpected system termination or kernel memory corruption. It is fixed in: watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5/iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, and macOS Ventura 13.7.6. The...

CVE-2025-31273

CVE-2025-31273 is a memory corruption vulnerability in WebKit-based WebKitGTK/WebKit2GTK when processing malicious web content. Connected advisories confirm the issue and list concrete fixes across multiple distributions: Debian/webkit2gtk packages updated to 2.48.5-1~deb12u1/2.48.5-1~deb11u1, Fe...

CVE-2024-1580

CVE-2024-1580: an integer overflow in the dav1d AV1 decoder can cause memory corruption when decoding large-frame videos. Upgrading past 1.4.0 is recommended. Debian reports fixes in bullseye 0.7.1-3+deb11u1 and bookworm 1.0.0-2+deb12u1. Apple advisories link CVE-2024-1580 to out-of-bounds write ...

CVE-2024-27820

CVE-2024-27820 describes a memory-handling issue in Apple’s WebKit/Web content processing that could lead to arbitrary code execution. The vulnerability affects multiple Apple platforms and components (e.g., tvOS, iOS, iPadOS, visionOS, Safari, macOS Sonoma) and is fixed in the listed latest rele...

CVE-2024-44296

CVE-2024-44296 affects the WebKitGTK/WebKit2GTK components used by Linux desktop stacks (webkitgtk/webkit2gtk). The vulnerability allows processing malicious web content to bypass Content Security Policy enforcement. Connected advisories show fixes across distros (e.g., Debian: webkit2gtk 2.46.3-...

CVE-2025-24206

CVE-2025-24206 is an AirPlay-related authentication bypass affecting Apple devices and AirPlay SDK–enabled products. Public sources confirm local-network access enables bypass of authentication with high impact when combined with other AirPlay vulnerabilities. Affected and fixed versions include ...

CVE-2024-27840

CVE-2024-27840 affects Apple platforms including macOS (Ventura 13.x, Monterey 12.x), iOS/iPadOS, tvOS, visionOS, and watchOS. The issue is described as a memory handling problem where an attacker who already has kernel code execution may bypass kernel memory protections. The vulnerability is fix...

CVE-2025-24257

CVE-2025-24257 is an out-of-bounds write issue addressed by Apple in visionOS 2.4, iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4. The vulnerability can cause unexpected system termination or write to kernel memory. The description and connected references confirm affected platforms and that patch...

CVE-2025-31203

Apple fixed an integer overflow by improving input validation in macOS Sequoia 15.4, tvOS 18.4, iPadOS 17.7.6/18.4, macOS Sonoma 14.7.5, watchOS 11.4, and visionOS 2.4. The issue could allow a local-network attacker to cause a denial-of-service. Affected products and versions are listed in the CV...

CVE-2026-20652

CVE-2026-20652 is a remote DoS vulnerability in WebKit-based components (Apple Safari/WebKit and WebKitGTK family) caused by a memory handling issue when processing malicious web content. Affected products include Safari (macOS/iOS/iPadOS/watchOS/tvOS/visionOS) and WebKitGTK/WebKit2GTK in Linux d...

CVE-2026-64757

CVE-2026-64757 describes a memory corruption issue addressed by Apple through improved state management. The vulnerability affects multiple Apple platforms and applications, most notably Safari and WebKit components, with fixes in Safari 26.6 and OS updates for iOS 26.6, iPadOS 26.6, macOS Tahoe ...

CVE-2024-44258

CVE-2024-44258 affects Apple’s ManagedConfiguration framework and the profiled daemon. The issue arises during backup restoration when the destination path’s symlink status is not validated, potentially allowing written files to migrate into restricted, protected areas and modify system files. A ...

CVE-2024-23257

Technical details about CVE-2024-23257 are not publicly provided in the supplied documents; monitor for updates.

CVE-2025-43216

CVE-2025-43216 is a use-after-free in WebKitGTK/WebKit processing of malicious web content that can cause an unexpected Safari crash. The CVE is referenced in multiple advisories tied to WebKitGTK/WebKit, with fixes implemented in Safari 18.6 and corresponding WebKitGTK updates (e.g., WebKitGTK/W...

CVE-2025-24160

CVE-2025-24160 is a vulnerability in Apple platforms (CoreAudio) where parsing a file may lead to an unexpected app termination. It is addressed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. Base metrics show CVSS 3.1 ...

CVE-2025-24161

CVE-2025-24161 affects Apple platforms and multiple components involved in parsing files. Apple’s security content shows this CVE being addressed in iPadOS 17.7.4, iOS 18.3, iPadOS 18.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3, and tvOS 18.3. The underlying issue is a ...

CVE-2025-24230

An out-of-bounds read issue in Apple media handling (triggered by playing a malicious audio file) was fixed via input-validation improvements. Affected: visionOS 2.4; macOS Ventura 13.7.5; tvOS 18.4; iPadOS 17.7.6; iOS 18.4/iPadOS 18.4; macOS Sequoia 15.4; macOS Sonoma 14.7.5. Exploitation status...

CVE-2026-43778

CVE-2026-43778 is a use-after-free issue addressed with improved memory management that can allow an app to terminate the system or corrupt kernel memory. Affected products/versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26....

CVE-2025-31182

CVE-2025-31182 : Apple addresses an issue where an app could delete files it should not access due to improper handling of symlinks. The vulnerability affects multiple Apple OS versions and is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, and m...

CVE-2025-43212

CVE-2025-43212 relates to WebKit/WebKitGTK: processing maliciously crafted web content may cause an unexpected Safari crash. Connected docs confirm it as one of several WebKitGTK issues addressed in security updates and linked to memory handling improvements. Apple’s advisory for Safari 18.6 note...

CVE-2024-27857

CVE-2024-27857 is an out-of-bounds access issue affecting Apple Vision Pro WebKit; fixed in visionOS 1.2 through improved bounds checking. The Apple security content confirms WebKit entry CVE-2024-27857 with this remediation; exploitation details are not disclosed in the connected documents.