Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

16.0
7
18.0
1

Apple macOS Big SurApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1870

debian/webkit2gtkApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1871

tvOSRace Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free

Risk 88
Severity
9.8
Race Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 79
Source: Apple
First published (updated )
CVE-2023-28201

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 69
Severity
9.1
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 49
Source: Apple
First published (updated )
CVE-2024-23255

Apple macOS SonomaRace Condition, Buffer Overflow, Input Validation

Risk 80
Severity
8.8
Race Condition, Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 75
Source: Apple
First published (updated )
CVE-2024-23226

Apple macOS CatalinaAppleMobileFileIntegrity. This issue was addressed with improved checks.

Risk 78
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AppleMobileFileIntegrity. This issue was addressed with improved checks.

1 / 2
First published (updated )
CVE-2020-3883

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3901

redhat/webkitgtkWebKit. A memory consumption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3899

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3895

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved memory handling.

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3900

redhat/webkitgtkWebKit. A type confusion issue was addressed with improved memory handling.

Risk 82
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3897

Apple macOS SonomaBuffer Overflow, Race Condition, Input Validation

Risk 74
Severity
8.6
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 31
Source: Apple
First published (updated )
CVE-2024-0258

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2021-30807

Apple macOS Big SurInput Validation, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 22
Source: Apple
First published (updated )
CVE-2023-28181

Apple Ipad OsApple Neural Engine. The issue was addressed with improved memory handling.

Risk 71
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 6
Source: Apple
First published (updated )
CVE-2023-27970

Apple tvOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow

Risk 71
Severity
7.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges.

1 / 47
First published (updated )
CVE-2023-27969

Apple iOS and iPadOSUse After Free, Input Validation, Race Condition, Buffer Overflow

Risk 68
Severity
7.8
Use After Free, Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.

1 / 70
Source: MITRE
First published (updated )
CVE-2023-42977

Apple Ipad OsApple Neural Engine. The issue was addressed with improved memory handling.

Risk 71
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 5
Source: Apple
First published (updated )
CVE-2023-27959

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

1 / 3
First published (updated )
CVE-2021-30883

ubuntu/webkit2gtkBuffer Overflow, Race Condition, Input Validation

Risk 72
Severity
7.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A maliciously crafted webpage may be able to fingerprint the user. WebKit Bugzilla: 266703

1 / 80
Source: Red Hat
First published (updated )
CVE-2024-23280

Apple tvOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 45
Severity
7.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 66
Source: Apple
First published (updated )
CVE-2023-27963

Apple tvOSWebKit. An information leakage issue was addressed.

Risk 42
Severity
7.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

A flaw was found in WebKitGTK. An information leakage issue was addressed.

References: https://webkitgtk.org/security/WSA-2021-0007.html https://www.openwall.com/lists/oss-security/2021/12/20/6

1 / 3
Source: Red Hat
First published (updated )
CVE-2021-30888

ubuntu/webkit2gtkBuffer Overflow, Race Condition, Input Validation

Risk 39
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A malicious website may exfiltrate audio data cross-origin WebKit Bugzilla: 263795

1 / 79
Source: Red Hat
First published (updated )
CVE-2024-23254

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 41
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 66
Source: Apple
First published (updated )
CVE-2024-23241

Apple macOS SonomaInput Validation

Risk 37
Severity
6.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. The issue was addressed with improved authentication.

1 / 23
Source: Apple
First published (updated )
CVE-2024-44297

Apple macOS Big SurUse After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 39
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 57
Source: Apple
First published (updated )
CVE-2023-28182

ubuntu/webkit2gtkBuffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition

Risk 39
Severity
6.5
Buffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

[Unknown description]

1 / 78
First published (updated )
CVE-2023-27954

debian/bluezInput Validation

Risk 50
Severity
6.3
Input Validation
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 13
Source: Apple

Remedy

In `/etc/bluetooth/input.conf` set `ClassicBondedOnly=true` and then `systemctl restart bluetooth`. Setting `ClassicBondedOnly=false` will re-enable legacy device support (like the PS3 controller) and the vulnerability.
First published (updated )
CVE-2023-45866

redhat/webkitgtkInput Validation, XSS

Risk 39
Severity
6.1
Input Validation, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3902

Apple macOS SonomaRace Condition, Buffer Overflow, Input Validation

Risk 37
Severity
5.9
Race Condition, Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to leak sensitive user information.

1 / 57
Source: MITRE
First published (updated )
CVE-2024-23239

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203