Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple Multiple ProductsApple Multiple Products Use-After-Free Vulnerability

Risk 90
Severity
10
Exploited
Zeroday
EPSS
0.21%
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

1 / 40
Source: MITRE
First published (updated )
CVE-2025-24085

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple macOS SequoiaApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

1 / 3
Source: MITRE
First published (updated )
CVE-2025-43300

Google ChromeUse After Free

Risk 87
Severity
10
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.

First published (updated )
CVE-2010-3116

Apple iPhone OSUse After Free

Risk 87
Severity
10
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of service (application crash), or read the SMS database or other data, via vectors related to "attribute manipulation," as demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.

First published (updated )
CVE-2010-1119

Apple tvOSAppleKeyStore. A memory corruption issue was addressed with improved validation.

Risk 89
Severity
10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AppleKeyStore. A memory corruption issue was addressed with improved validation.

1 / 6
First published (updated )
CVE-2019-6235

Apple tvOSBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wi-Fi. A memory corruption issue was addressed with improved memory handling.

1 / 4
First published (updated )
CVE-2017-7110

Apple tvOSBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wi-Fi. A memory corruption issue was addressed with improved memory handling.

1 / 4
First published (updated )
CVE-2017-7108

Apple tvOSBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wi-Fi. A memory corruption issue was addressed with improved memory handling.

1 / 4
First published (updated )
CVE-2017-7112

Apple tvOSBuffer Overflow

Risk 87
Severity
10
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wi-Fi. A memory corruption issue was addressed with improved memory handling.

1 / 4
First published (updated )
CVE-2017-7105

Apple macOS Big SurApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1870

Apple macOS SonomaBuffer Overflow, Input Validation

Risk 89
Severity
9.8
Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code execution.

1 / 24
Source: MITRE
First published (updated )
CVE-2024-23286

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition

Risk 89
Severity
9.8
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected system termination or write kernel memory.

1 / 29
Source: MITRE
First published (updated )
CVE-2024-23265

debian/webkit2gtkApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1871

Apple macOS SonomaPath Traversal, Input Validation, Race Condition

Risk 89
Severity
9.8
Path Traversal, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.

1 / 33
Source: MITRE
First published (updated )
CVE-2024-27810

debian/webkit2gtkUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 91
Severity
9.8
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 64
Source: Debian
First published (updated )
CVE-2024-40782

Apple visionOSUse After Free, Race Condition, Input Validation

Risk 86
Severity
9.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Accounts. A logic issue was addressed with improved file handling.

1 / 48
Source: Apple
First published (updated )
CVE-2024-54492

Apple visionOSUse After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow

Risk 91
Severity
9.8
Use After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 111
Source: Apple
First published (updated )
CVE-2024-54534

Apple WatchOSInput Validation, Null Pointer Dereference, Use After Free

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Accessibility. An authentication issue was addressed with improved state management.

1 / 13
Source: Apple
First published (updated )
CVE-2025-24126

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 126
Source: Apple
First published (updated )
CVE-2025-30433

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 90
Source: Apple
First published (updated )
CVE-2025-30426

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 99
Severity
9.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 85
Source: Apple
First published (updated )
CVE-2025-24178

debian/webkit2gtkBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition

Risk 91
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 155
Source: Apple
First published (updated )
CVE-2025-24264

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 86
Severity
9.8
Exploited
Zeroday
EPSS
0.10%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 86
Source: Apple
First published (updated )
CVE-2025-31182

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 86
Severity
9.8
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges.

1 / 87
Source: MITRE
First published (updated )
CVE-2025-24238

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 38
Source: Apple
First published (updated )
CVE-2025-24190

apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 38
Source: Apple
First published (updated )
CVE-2025-24211

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination.

1 / 28
Source: MITRE
First published (updated )
CVE-2025-24237

Apple iPadOSInput Validation, Buffer Overflow, Null Pointer Dereference, Use After Free

Risk 86
Severity
9.8
Input Validation, Buffer Overflow, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 33
Source: Apple
First published (updated )
CVE-2025-24230

Apple SafariInput Validation, Use After Free, Buffer Overflow, Null Pointer Dereference, Integer Overflow

Risk 86
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 106
Source: Apple
First published (updated )
CVE-2025-24167

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203