Apple Security Vulnerabilities (CVEs)

This vulnerability allows malicious OSAX scripting additions to bypass macOS Gatekeeper security checks and sandbox restrictions, potentially enabling...

This CVE describes a buffer overflow vulnerability in macOS that allows malicious applications to execute arbitrary code with kernel privileges. It af...

This CVE describes a buffer overflow vulnerability in Apple's USD file processing that could allow attackers to crash applications or execute arbitrar...

This CVE-2021-30981 is a buffer overflow vulnerability in macOS that allows an application to execute arbitrary code with kernel privileges. It affect...

This CVE describes a buffer overflow vulnerability in iOS/iPadOS that allows malicious applications to execute arbitrary code with kernel privileges. ...

This vulnerability allows malicious iOS/iPadOS applications to write data beyond allocated memory boundaries, potentially leading to arbitrary code ex...

This vulnerability allows a malicious application to execute arbitrary code with kernel privileges on iOS/iPadOS devices. An out-of-bounds read in the...

This CVE describes a buffer overflow vulnerability in Apple's audio file processing components. Attackers can exploit it by crafting malicious audio f...

This CVE describes a logic flaw in Apple's proxy auto-configuration (PAC) implementation that could cause user traffic to be sent to unintended proxy ...

This macOS vulnerability allows malicious URLs to trigger unexpected JavaScript execution from local files. Attackers could potentially execute arbitr...

This vulnerability allows attackers to execute arbitrary code or crash applications by tricking users into opening malicious USD (Universal Scene Desc...

This vulnerability allows attackers to execute arbitrary code by tricking users into processing maliciously crafted images. It affects Apple devices r...

This memory corruption vulnerability in Apple's ColorSync ICC profile processing allows arbitrary code execution when processing malicious images. It ...

This is a local privilege escalation vulnerability in Apple operating systems that allows an attacker with existing local access to gain elevated priv...

This CVE describes a memory corruption vulnerability in Apple's XNU kernel that allows a malicious application to execute arbitrary code with kernel p...

This is a use-after-free vulnerability in Apple's WebKit browser engine that could allow arbitrary code execution when processing malicious web conten...

This vulnerability allows attackers to execute arbitrary code on affected Apple devices by tricking users into visiting malicious web pages. It affect...

This CVE describes a race condition vulnerability in Apple operating systems that allows malicious applications to execute arbitrary code with kernel ...

This CVE describes a use-after-free vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileg...

This macOS kernel vulnerability allows malicious applications to exploit a race condition to execute arbitrary code with kernel privileges. It affects...

This macOS kernel vulnerability allows malicious applications to execute arbitrary code with kernel privileges, potentially gaining full system contro...

This is a memory corruption vulnerability in Apple's XNU kernel that allows a malicious application to execute arbitrary code with kernel privileges. ...

This is a memory corruption vulnerability in iOS/iPadOS that allows malicious applications to execute arbitrary code with kernel privileges. It affect...

CVE-2021-30916 is a memory corruption vulnerability in Apple operating systems that allows malicious applications to execute arbitrary code with kerne...

This vulnerability allows arbitrary code execution through malicious PDF files due to an out-of-bounds write in Apple's PDF processing. It affects mul...

This CVE describes multiple out-of-bounds write vulnerabilities in macOS that could allow a malicious application to execute arbitrary code with kerne...

This CVE describes a denial-of-service vulnerability in macOS that allows a remote attacker to cause affected devices to unexpectedly restart. The iss...

This vulnerability allows malicious applications to write data beyond allocated memory boundaries in macOS kernel components, potentially leading to a...

This vulnerability allows a local attacker to cause application crashes or execute arbitrary code on affected Apple devices. It affects iOS, iPadOS, a...

CVE-2021-30906 is a local privilege escalation vulnerability in Apple operating systems that allows an attacker with local access to gain elevated sys...

This CVE-2021-30909 is a memory corruption vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel p...

CVE-2021-30894 is a memory corruption vulnerability in Apple iOS, iPadOS, and tvOS that allows malicious applications to execute arbitrary code with k...

This CVE describes a race condition vulnerability in macOS that allows a malicious application to execute arbitrary code with kernel privileges. It af...

This vulnerability allows attackers to read memory outside intended boundaries when processing malicious AppleScript binary files. It affects macOS sy...

This vulnerability allows arbitrary code execution when processing malicious archive files on Apple devices. Attackers can exploit this by tricking us...

This is a memory corruption vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileges. It a...

CVE-2021-30886 is a use-after-free vulnerability in Apple operating systems that allows malicious applications to execute arbitrary code with kernel p...

This vulnerability allows malicious websites to bypass Content Security Policy (CSP) protections and leak sensitive information through redirect behav...

CVE-2021-30868 is a macOS kernel race condition vulnerability that allows malicious applications to execute arbitrary code with kernel privileges. Thi...

CVE-2021-30873 is a privilege escalation vulnerability in macOS that allows malicious applications to gain elevated system privileges. This affects ma...

CVE-2021-30876 is an out-of-bounds read vulnerability in AppleScript binary processing on macOS. Attackers can craft malicious AppleScript binaries to...

This is a use-after-free vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web content. It...

This vulnerability allows arbitrary code execution when processing malicious PDF files due to an integer overflow in Apple's PDF processing components...

This macOS vulnerability allows sandboxed applications to escape their security restrictions, potentially accessing system resources they shouldn't. I...

CVE-2021-30851 is a memory corruption vulnerability in Apple's WebKit browser engine that could allow remote code execution when processing malicious ...

This vulnerability allows sandboxed processes on Apple devices to bypass security restrictions, potentially accessing resources they shouldn't. It aff...