Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability

Risk 65
Severity
6.1
Exploited
Zeroday
EPSS
1.04%
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 3
Source: Apple
First published (updated )
CVE-2025-24200

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 86
Source: MITRE
First published (updated )
CVE-2024-23296

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 30
Source: MITRE
First published (updated )
CVE-2024-23225

debian/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 83
Severity
8.8
Exploited
Zeroday
EPSS
0.11%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-23222

debian/libvpxHeap buffer overflow in vp8 encoding in libvpx

Risk 93
Severity
8.8
Exploited
Zeroday
EPSS
29.61%
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

1 / 10
Source: Microsoft
First published (updated )
CVE-2023-5217

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203