Apple Security Vulnerabilities (CVEs)

A race condition vulnerability in macOS allows malicious applications to potentially gain root privileges. This affects macOS Big Sur, Monterey, and V...

This macOS kernel vulnerability allows malicious applications to bypass memory bounds checks, potentially causing system crashes or writing to kernel ...

This CVE describes a memory corruption vulnerability in Apple operating systems that allows malicious applications to cause system crashes or write to...

This vulnerability allows unauthorized access to photos in the Hidden Photos Album on Apple devices without proper authentication. It affects users of...

This is a memory corruption vulnerability (CWE-787) in macOS that allows a malicious application to execute arbitrary code with kernel privileges. It ...

This is a macOS kernel memory corruption vulnerability that allows malicious applications to execute arbitrary code with kernel privileges. It affects...

This vulnerability allows attackers to execute arbitrary code by tricking users into processing malicious font files. It affects Apple macOS, iOS, and...

This vulnerability allows malicious applications to inject code into sensitive Xcode binaries on macOS systems. It affects macOS Monterey, Big Sur, an...

This vulnerability allows an attacker with arbitrary read/write capability to bypass Pointer Authentication security mechanisms on Apple devices. It a...

This CVE describes memory corruption vulnerabilities in macOS that could allow arbitrary code execution when processing malicious files. Attackers cou...

This CVE describes memory corruption vulnerabilities in macOS that could allow arbitrary code execution when processing malicious files. Attackers cou...

This CVE describes memory corruption vulnerabilities in macOS that could allow attackers to execute arbitrary code or cause application crashes by tri...

This CVE describes memory corruption vulnerabilities in macOS that could allow arbitrary code execution when processing malicious files. Attackers cou...

This CVE describes memory corruption vulnerabilities in macOS's AppleGVA framework that could allow arbitrary code execution when processing malicious...

This vulnerability in macOS AppleVADriver allows out-of-bounds write when processing images, potentially leading to arbitrary code execution. Attacker...

This CVE-2023-42886 is an out-of-bounds read vulnerability in macOS that could allow a user to cause unexpected app termination or arbitrary code exec...

This memory handling vulnerability in Apple's image processing components allows arbitrary code execution when processing a malicious image. It affect...

This CVE describes memory corruption vulnerabilities in macOS that could allow arbitrary code execution when processing malicious files. Attackers cou...

This CVE describes memory corruption vulnerabilities in macOS that could allow arbitrary code execution when processing malicious files. Attackers cou...

This memory handling vulnerability in Apple operating systems allows arbitrary code execution in user-installed apps when processing malicious input. ...

This is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web content....

This is a memory corruption vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileges. It a...

This macOS vulnerability allows websites to access sensitive user data through improper symlink resolution. It affects macOS Monterey, Ventura, and So...

This CVE-2023-42847 vulnerability allows attackers to bypass authentication mechanisms and access passkeys without proper credentials. It affects macO...

This is a logic vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web content. Attackers c...

This is a memory corruption vulnerability in macOS that could allow arbitrary code execution or application crashes when processing malicious files. I...

This vulnerability in iOS/iPadOS VoiceOver accessibility feature could expose user passwords by reading them aloud. It affects users with VoiceOver en...

This CVE describes a use-after-free vulnerability in macOS that allows an application to execute arbitrary code with kernel privileges. Attackers coul...

This is a memory corruption vulnerability in Apple operating systems that allows an app to execute arbitrary code with kernel privileges. It affects i...

This vulnerability in iOS/iPadOS prevents devices from properly locking, allowing unauthorized physical access to unlocked devices. It affects users o...

This CVE describes a use-after-free vulnerability in Apple's web content processing components that could allow arbitrary code execution when visiting...

CVE-2023-44487 is an HTTP/2 protocol vulnerability that allows attackers to cause denial of service by rapidly resetting streams, consuming server res...

This CVE describes a use-after-free vulnerability in Apple's iOS, iPadOS, and macOS that allows a malicious app to execute arbitrary code with kernel ...

CVE-2023-41984 is a memory handling vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileg...

This CVE describes a privilege escalation vulnerability in Apple operating systems where improper access restrictions allow a user to gain elevated pr...

This CVE-2023-41071 is a use-after-free vulnerability in Apple operating systems that allows an app to execute arbitrary code with kernel privileges. ...

This vulnerability allows arbitrary code execution when processing malicious web content in Apple's WebKit browser engine. It affects users of Safari ...

This is a kernel privilege escalation vulnerability in Apple operating systems that allows malicious apps to execute arbitrary code with kernel-level ...

This is a memory handling vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileges. It aff...

This CVE describes a permissions bypass vulnerability in Apple operating systems where an application can delete files it shouldn't have access to. Th...

This vulnerability in Safari's iframe sandbox enforcement allows attackers with JavaScript execution to bypass security restrictions and execute arbit...

This iOS/iPadOS privilege escalation vulnerability allows malicious apps to gain root privileges on affected devices. The issue affects iOS and iPadOS...

This vulnerability allows a malicious app to execute arbitrary code with kernel privileges on iOS and iPadOS devices. It affects users running iOS/iPa...

This CVE describes a memory handling vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privile...

This vulnerability allows malicious apps to gain elevated privileges on Apple devices. It affects iOS, iPadOS, tvOS, and watchOS devices running versi...

This CVE describes a bounds check vulnerability in macOS that allows remote attackers to cause denial-of-service conditions. The issue affects macOS s...