Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSUse After Free, Race Condition, Input Validation

Risk 85
Severity
8.8
Use After Free, Race Condition, Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 75
Source: Ubuntu
First published (updated )
CVE-2024-54505

Apple macOS SonomaUse After Free, Double Free, Input Validation

Risk 22
Severity
4.3
Use After Free, Double Free, Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.

1 / 16
Source: MITRE
First published (updated )
CVE-2025-31239

Apple visionOSOut of bounds write in GPU on Mac

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple visionOSUse After Free, Race Condition, Input Validation

Risk 47
Severity
7.5
Use After Free, Race Condition, Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 73
Source: Apple
First published (updated )
CVE-2024-54479

Apple WatchOSInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 37
Severity
5.4
Input Validation, Use After Free, Race Condition, Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. The issue was addressed with improved authentication.

1 / 76
Source: Apple
First published (updated )
CVE-2024-44296

Apple visionOSApple Multiple Products Code Execution Vulnerability

Risk 89
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A vulnerability was discovered in WebKitGTK's JIT compiler.

1 / 5
Source: Red Hat
First published (updated )
CVE-2024-44308

Apple visionOSApple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Risk 50
Severity
6.3
XSS
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

1 / 6
Source: Ubuntu
First published (updated )
CVE-2024-44309

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Apple SafariUse After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 65
Severity
4.3
Exploited
Zeroday
EPSS
0.04%
Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 159
Source: Ubuntu
First published (updated )
CVE-2025-30427

Apple iPadOSDouble Free, Use After Free, Input Validation, Integer Overflow

Risk 24
Severity
4.3
Double Free, Use After Free, Input Validation, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 64
Source: Ubuntu
First published (updated )
CVE-2025-31206

Apple tvOSInput Validation, Use After Free, Buffer Overflow, Race Condition, Double Free, SQL Injection

Risk 85
Severity
8.8
Input Validation, Use After Free, Buffer Overflow, Race Condition, Double Free, SQL Injection
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 84
Source: Apple
First published (updated )
CVE-2025-31278

Apple SafariInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 24
Severity
4.3
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 155
Source: Apple
First published (updated )
CVE-2025-24216

Apple SafariBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition

Risk 61
Severity
7
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 158
Source: Ubuntu
First published (updated )
CVE-2025-24209

Apple iPadOSInput Validation, Use After Free, Double Free, Integer Overflow

Risk 40
Severity
6.5
Input Validation, Use After Free, Double Free, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

afpfs. The issue was addressed with improved memory handling.

1 / 63
Source: Apple
First published (updated )
CVE-2025-31215

Apple tvOSInput Validation, Use After Free, Race Condition, Double Free, SQL Injection

Risk 39
Severity
6.2
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 85
Source: Apple
First published (updated )
CVE-2025-43211

Apple SafariBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

Risk 91
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 155
Source: Apple
First published (updated )
CVE-2025-24264

Apple tvOSUse After Free, Input Validation, Double Free, SQL Injection, Race Condition

Risk 41
Severity
6.5
Use After Free, Input Validation, Double Free, SQL Injection, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 87
Source: Ubuntu
First published (updated )
CVE-2025-43216

Apple macOS SonomaApple Multiple Products Unspecified Vulnerability

Risk 30
Severity
4.2
AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
CVE-2025-43200

Apple macOS Sonomaafpfs. This issue was addressed with improved checks.

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

afpfs. The issue was addressed with improved memory handling.

1 / 6
Source: Apple
First published (updated )
CVE-2025-31251

Apple tvOSUse After Free, Double Free, Input Validation

Risk 31
Severity
5.5
Use After Free, Double Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted image may lead to a denial-of-service.

1 / 25
Source: MITRE
First published (updated )
CVE-2025-31226

apple iPadOSInput Validation, Null Pointer Dereference, Use After Free

Risk 37
Severity
5.4
Input Validation, Null Pointer Dereference, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 14
Source: Apple
First published (updated )
CVE-2025-24271

Apple iPadOSInput Validation, Null Pointer Dereference, Use After Free

Risk 38
Severity
6.5
Input Validation, Null Pointer Dereference, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 13
Source: Apple
First published (updated )
CVE-2025-24251

Apple tvOSInput Validation, Race Condition, Use After Free

Risk 45
Severity
6.3
Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Accessibility. A logic issue was addressed with improved checks.

1 / 21
Source: Apple
First published (updated )
CVE-2025-43210

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 23
Severity
5.5
EPSS
0.01%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 61
Source: Apple
First published (updated )
CVE-2025-30447

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 90
Source: Apple
First published (updated )
CVE-2025-30426

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 44
Severity
6.3
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 30
Source: Apple
First published (updated )
CVE-2025-24212

apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 38
Source: Apple
First published (updated )
CVE-2025-24211

Apple iPadOSInput Validation, Buffer Overflow, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Input Validation, Buffer Overflow, Null Pointer Dereference, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 33
Source: Apple
First published (updated )
CVE-2025-24230

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information.

1 / 67
Source: MITRE
First published (updated )
CVE-2025-24210

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 99
Severity
9.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 85
Source: Apple
First published (updated )
CVE-2025-24178

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203