Apple Security Vulnerabilities (CVEs)

This is a memory corruption vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileges. It a...

CVE-2019-8830 is an out-of-bounds read vulnerability in Apple's FaceTime video processing that could allow arbitrary code execution when processing ma...

This memory corruption vulnerability in Apple operating systems allows malicious applications to execute arbitrary code with system privileges. It aff...

This vulnerability allows attackers to execute arbitrary code on affected Apple devices by tricking users into processing malicious web content. It af...

This macOS vulnerability allows malicious applications to bypass file access restrictions and read protected files. It affects macOS High Sierra, Moja...

CVE-2019-8773 is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web...

CVE-2019-8776 is a memory corruption vulnerability in macOS that allows an application to execute arbitrary code with system privileges. This affects ...

This memory corruption vulnerability in macOS allows malicious applications to execute arbitrary code with kernel privileges, potentially taking full ...

CVE-2019-8734 is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web...

This memory corruption vulnerability in Apple's iOS, iPadOS, watchOS, and tvOS allows malicious applications to execute arbitrary code with kernel pri...

CVE-2019-8751 is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web...

CVE-2019-8675 is a buffer overflow vulnerability in macOS that allows attackers in a privileged network position to execute arbitrary code. This affec...

A buffer overflow vulnerability in macOS allows attackers in a privileged network position to execute arbitrary code. This affects macOS systems befor...

This is a memory corruption vulnerability in Apple operating systems that allows an application to execute arbitrary code with kernel privileges. It a...

CVE-2019-8728 is a memory corruption vulnerability in Apple's WebKit browser engine that allows arbitrary code execution when processing malicious web...

CVE-2019-8618 is a sandbox escape vulnerability affecting Apple operating systems. A sandboxed process could bypass security restrictions, potentially...

This CVE describes an input validation vulnerability in Apple operating systems that allows applications to read restricted memory. Successful exploit...

CVE-2019-8639 is a memory corruption vulnerability in Apple's WebKit browser engine that allows attackers to execute arbitrary code on affected device...

CVE-2019-8539 is a memory initialization vulnerability in macOS that allows a malicious application to execute arbitrary code with system privileges. ...

CVE-2019-8575 is a data deletion vulnerability in Apple AirPort base stations where performing a factory reset may not properly erase all user informa...

CVE-2019-8580 is a vulnerability in Apple AirPort base stations where source-routed IPv4 packets were unexpectedly accepted despite being disabled by ...

CVE-2019-8588 is a null pointer dereference vulnerability in Apple AirPort Base Station firmware that allows remote attackers to cause denial of servi...

CVE-2018-4467 is a memory corruption vulnerability in macOS that allows malicious applications to elevate privileges. This affects macOS systems runni...

CVE-2018-4474 is a memory consumption vulnerability in multiple Apple products that could allow an attacker to cause denial of service through resourc...

CVE-2019-8509 is a privilege escalation vulnerability in macOS that allows malicious applications to gain elevated privileges. This affects macOS syst...

CVE-2018-4428 is an iOS lock screen vulnerability that allowed attackers with physical access to a locked device to use the share function to potentia...

CVE-2018-4451 is a memory corruption vulnerability in macOS that could allow an attacker to execute arbitrary code on affected systems. The vulnerabil...

This macOS kernel vulnerability allows malicious applications to execute arbitrary code with kernel privileges through memory corruption. It affects m...

CVE-2020-9937 is an out-of-bounds write vulnerability in Apple's image processing components that could allow arbitrary code execution when processing...

This vulnerability allows attackers to execute arbitrary code or crash applications by tricking users into opening malicious USD (Universal Scene Desc...

This vulnerability allows attackers to execute arbitrary code by tricking users into processing maliciously crafted images. It affects Apple iOS, iPad...

This macOS kernel vulnerability allows a malicious application to exploit a race condition to execute arbitrary code with kernel privileges. It affect...

CVE-2020-9901 is a privilege escalation vulnerability in Apple's path validation logic for symbolic links. A local attacker could exploit improper sym...

This is a memory corruption vulnerability in Apple's iOS, iPadOS, macOS, tvOS, and watchOS that allows an application to execute arbitrary code with k...

This CVE describes a buffer overflow vulnerability in Apple's image processing components across multiple platforms. Attackers can exploit it by craft...

A logic issue in macOS state management allows remote attackers to cause denial of service. This affects macOS systems before Catalina 10.15.6. The vu...

This CVE describes a buffer overflow vulnerability in Apple's USD file processing that could allow arbitrary code execution when opening malicious fil...