Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple WatchOSApple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

Risk 65
Severity
6.1
Exploited
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

1 / 3
Source: CISA
First published (updated )
CVE-2021-1879

Apple iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Risk 65
Severity
4.3
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

1 / 3
First published (updated )
CVE-2020-9819

Apple WatchOSRace Condition

Risk 32
Severity
5.5
Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to read sensitive location information.

1 / 14
Source: MITRE
First published (updated )
CVE-2023-32416

Apple macOS Big SurBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 33
Severity
5.5
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to cause a denial-of-service.

1 / 28
Source: MITRE
First published (updated )
CVE-2023-38593

ubuntu/webkit2gtkBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 40
Severity
6.5
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 63
Source: Apple
First published (updated )
CVE-2023-38133

ubuntu/webkit2gtkBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 40
Severity
6.5
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information.

1 / 57
Source: Ubuntu
First published (updated )
CVE-2023-38599

Apple tvOSXSS, Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 39
Severity
6.1
XSS, Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 56
Source: Apple
First published (updated )
CVE-2023-32445

Apple macOS SonomaAutomation. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

1 / 9
Source: MITRE
First published (updated )
CVE-2023-42953

Apple macOS SonomaAutomation. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

1 / 26
Source: MITRE
First published (updated )
CVE-2023-42878

Apple macOS SonomaAutomation. The issue was addressed with improved checks.

Risk 37
Severity
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Automation. The issue was addressed with improved checks.

1 / 24
Source: Apple
First published (updated )
CVE-2023-42839

Apple macOS SonomaAutomation. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Automation. The issue was addressed with improved checks.

1 / 5
Source: Apple
First published (updated )
CVE-2023-42823

Apple macOS SonomaUse After Free

Risk 37
Severity
6.2
Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

1 / 18
Source: MITRE
First published (updated )
CVE-2023-42834

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 27
Severity
4.4
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 46
Source: Apple
First published (updated )
CVE-2023-41981

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 94
Source: Apple
First published (updated )
CVE-2023-41968

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 54
Source: Apple
First published (updated )
CVE-2023-41073

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive data logged when a user shares a link.

1 / 87
Source: MITRE
First published (updated )
CVE-2023-41070

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 24
Severity
5.5
EPSS
0.06%
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data.

1 / 47
Source: MITRE
First published (updated )
CVE-2023-40429

Apple macOS SonomaUse After Free, Input Validation, Buffer Overflow

Risk 38
Severity
6.5
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 25
Source: Apple
First published (updated )
CVE-2023-40420

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 95
Source: Apple
First published (updated )
CVE-2023-40424

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 35
Severity
5.4
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing.

1 / 78
Source: MITRE
First published (updated )
CVE-2023-40417

Apple WatchOSInput Validation, Use After Free

Risk 32
Severity
5.5
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An authentication issue was addressed with improved state management. This issue is fixed in watchOS 10. An Apple Watch Ultra may not lock when using the Depth app.

1 / 24
First published (updated )
CVE-2023-40418

Apple macOS SonomaInput Validation, Use After Free, Buffer Overflow

Risk 32
Severity
5.5
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 10
Source: Apple
First published (updated )
CVE-2023-40410

Apple macOS SonomaUse After Free, Buffer Overflow

Risk 32
Severity
5.5
Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 9
Source: Apple
First published (updated )
CVE-2023-40399

Apple macOS SonomaUse After Free, Input Validation, Buffer Overflow

Risk 32
Severity
5.5
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 22
Source: Apple
First published (updated )
CVE-2023-38596

Apple macOS SonomaUse After Free, Input Validation, Buffer Overflow

Risk 35
Severity
4.3
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 17
Source: Apple
First published (updated )
CVE-2023-35984

Apple macOS SonomaUse After Free, Input Validation, Buffer Overflow

Risk 32
Severity
5.5
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 15
Source: Apple
First published (updated )
CVE-2023-32361

Apple macOS SonomaInput Validation, Use After Free, Buffer Overflow

Risk 33
Severity
5.5
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 26
Source: Apple
First published (updated )
CVE-2023-40528

Apple WatchOSInput Validation, Use After Free

Risk 38
Severity
6.5
Input Validation, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

libarchive. Multiple memory corruption issues existed in libarchive. These issues were addressed with improved input validation.

1 / 4
First published (updated )
CVE-2021-36976

vim Vimheap-buffer-overflow in Vim

Risk 31
Severity
5.5
Use After Free, Race Condition, Input Validation
AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Accounts. A logic issue was addressed with improved file handling.

1 / 70
Source: Apple
First published (updated )
CVE-2024-45306

ubuntu/chromium-browserInappropriate implementation in Navigation

Risk 38
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

An inappropriate implementation flaw was found in the Navigation component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=1248444

External References:

https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2022-0108

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203