Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple Multiple ProductsApple Multiple Products Use-After-Free Vulnerability

Risk 90
Severity
10
Exploited
Zeroday
EPSS
0.21%
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

1 / 40
Source: MITRE
First published (updated )
CVE-2025-24085

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple macOS SequoiaApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

1 / 3
Source: MITRE
First published (updated )
CVE-2025-43300

Apple visionOSUse After Free, Race Condition, Input Validation

Risk 86
Severity
9.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Accounts. A logic issue was addressed with improved file handling.

1 / 48
Source: Apple
First published (updated )
CVE-2024-54492

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 126
Source: Apple
First published (updated )
CVE-2025-30433

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 90
Source: Apple
First published (updated )
CVE-2025-30426

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 99
Severity
9.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 85
Source: Apple
First published (updated )
CVE-2025-24178

debian/webkit2gtkBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

Risk 91
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 155
Source: Apple
First published (updated )
CVE-2025-24264

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 38
Source: Apple
First published (updated )
CVE-2025-24190

apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 38
Source: Apple
First published (updated )
CVE-2025-24211

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination.

1 / 28
Source: MITRE
First published (updated )
CVE-2025-24237

Apple iPadOSInput Validation, Buffer Overflow, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Input Validation, Buffer Overflow, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 33
Source: Apple
First published (updated )
CVE-2025-24230

Apple WatchOSInput Validation, Race Condition, Use After Free

Risk 86
Severity
9.8
Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 34
Source: Apple
First published (updated )
CVE-2025-43209

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A vulnerability was discovered in WebKitGTK's JIT compiler.

1 / 6
Source: Red Hat
First published (updated )
CVE-2024-44308

debian/webkit2gtkUse After Free, Race Condition, Input Validation

Risk 82
Severity
8.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 75
Source: Debian
First published (updated )
CVE-2024-54505

Apple WatchOSInput Validation, Use After Free, Buffer Overflow, Race Condition, Double Free, SQL Injection

Risk 82
Severity
8.8
Input Validation, Use After Free, Buffer Overflow, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 83
Source: Apple
First published (updated )
CVE-2025-31278

Apple tvOSUse After Free, Input Validation

Risk 74
Severity
8.4
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. An app may be able to cause unexpected system termination or corrupt kernel memory.

1 / 26
Source: MITRE
First published (updated )
CVE-2024-44285

Apple macOS VenturaUse After Free, Input Validation

Risk 57
Severity
8.2
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Accounts. A logic issue was addressed with improved file handling.

1 / 30
Source: Apple
First published (updated )
CVE-2024-54468

Apple WatchOSUse After Free, Input Validation, Null Pointer Dereference

Risk 76
Severity
8
Exploited
Zeroday
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3. An attacker on the local network may corrupt process memory.

1 / 6
Source: MITRE
First published (updated )
CVE-2025-24137

Apple iPadOSUse After Free, Race Condition, Input Validation

Risk 70
Severity
7.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to gain elevated privileges.

1 / 40
Source: MITRE
First published (updated )
CVE-2024-44225

Apple WatchOSUse After Free, Input Validation, Null Pointer Dereference

Risk 74
Severity
7.8
Exploited
Zeroday
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to execute arbitrary code with kernel privileges.

1 / 34
Source: MITRE
First published (updated )
CVE-2025-24159

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 68
Severity
7.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 105
Source: Apple
First published (updated )
CVE-2025-24173

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Apple iPadOSCode Injection, Input Validation, Null Pointer Dereference, Use After Free

Risk 68
Severity
7.8
Code Injection, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 23
Source: Apple
First published (updated )
CVE-2025-24243

debian/webkit2gtkUse After Free, Race Condition, Input Validation

Risk 46
Severity
7.5
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 73
Source: Apple
First published (updated )
CVE-2024-54479

Apple macOS SonomaInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 45
Severity
7.5
Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A remote attacker may be able to cause a denial-of-service.

1 / 59
Source: MITRE
First published (updated )
CVE-2024-54538

apple iPadOSAccounts. This issue was addressed with improved data access restriction.

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 3
Source: Apple
First published (updated )
CVE-2025-24221

Apple macOS VenturaInput Validation, Integer Overflow, Double Free, Use After Free

Risk 43
Severity
7.5
Input Validation, Integer Overflow, Double Free, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

afpfs. The issue was addressed with improved memory handling.

1 / 52
Source: Apple
First published (updated )
CVE-2025-31221

Apple macOS SonomaDouble Free, Input Validation

Risk 43
Severity
7.5
Double Free, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

afpfs. The issue was addressed with improved memory handling.

1 / 13
Source: Apple
First published (updated )
CVE-2025-31208

Apple WatchOSInput Validation, Race Condition, Use After Free

Risk 43
Severity
7.5
Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. A non-privileged user may be able to modify restricted network settings.

1 / 15
Source: MITRE
First published (updated )
CVE-2025-43223

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203