Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS SonomaRace Condition, Input Validation, Use After Free

Risk 69
Severity
7.8
Race Condition, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Admin Framework. A path handling issue was addressed with improved validation.

1 / 24
Source: Apple
First published (updated )
CVE-2025-43187

Apple macOS VenturaRace Condition, Input Validation, Use After Free

Risk 51
Severity
7.1
Race Condition, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Admin Framework. A path handling issue was addressed with improved validation.

1 / 27
Source: Apple
First published (updated )
CVE-2025-43254

Apple macOSRace Condition, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 51
Severity
7.8
EPSS
0.01%
Race Condition, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences.

1 / 143
Source: MITRE
First published (updated )
CVE-2025-31188

Apple macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 56
Severity
7.4
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A sandboxed app may be able to access sensitive user data.

1 / 68
Source: MITRE
First published (updated )
CVE-2025-24229

Apple iPadOSCode Injection, Input Validation, Null Pointer Dereference, Use After Free

Risk 68
Severity
7.8
Code Injection, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 23
Source: Apple
First published (updated )
CVE-2025-24243

Apple macOSAccountPolicy. This issue was addressed by removing the vulnerable code.

Risk 68
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 3
Source: Apple
First published (updated )
CVE-2025-24234

Apple iPadOSUse After Free, Race Condition, Input Validation

Risk 70
Severity
7.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to gain elevated privileges.

1 / 40
Source: MITRE
First published (updated )
CVE-2024-44225

Apple macOSCode Injection, Input Validation

Risk 70
Severity
7.8
Code Injection, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

1 / 12
Source: MITRE
First published (updated )
CVE-2024-54529

Apple macOSRace Condition, Input Validation

Risk 68
Severity
7.8
Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges.

1 / 40
Source: MITRE
First published (updated )
CVE-2024-44291

Apple macOSRace Condition, Input Validation, Use After Free

Risk 70
Severity
7.8
Race Condition, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicious app may be able to gain root privileges.

1 / 63
Source: MITRE
First published (updated )
CVE-2024-44224

Apple iPadOSUse After Free, Race Condition, Input Validation

Risk 70
Severity
8.6
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 38
Source: Apple
First published (updated )
CVE-2024-54514

Apple macOS SonomaInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 45
Severity
7.5
Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A remote attacker may be able to cause a denial-of-service.

1 / 59
Source: MITRE
First published (updated )
CVE-2024-54538

Apple visionOSRace Condition, Input Validation, Buffer Overflow

Risk 59
Severity
8.1
Race Condition, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed by restricting options offered on a locked device.

1 / 49
Source: Apple
First published (updated )
CVE-2024-44169

Apple macOS SonomaAccounts. The issue was addressed with improved checks.

Risk 54
Severity
7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. An app may be able to bypass Privacy preferences.

1 / 7
Source: MITRE
First published (updated )
CVE-2024-40774

Apple macOS SonomaInput Validation, Buffer Overflow

Risk 53
Severity
7.1
Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Accounts. The issue was addressed with improved checks.

1 / 11
Source: Apple
First published (updated )
CVE-2024-40799

Apple macOS SonomaInput Validation, Integer Overflow, Race Condition, Buffer Overflow

Risk 71
Severity
7.8
Input Validation, Integer Overflow, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accounts. The issue was addressed with improved checks.

1 / 21
Source: Apple
First published (updated )
CVE-2024-40784

Apple macOS SonomaInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 72
Severity
7.8
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, visionOS 1.3, watchOS 10.6. A shortcut may be able to bypass Internet permission requirements.

1 / 53
Source: MITRE
First published (updated )
CVE-2024-40809

Apple macOS SonomaInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 54
Severity
7.1
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Accounts. The issue was addressed with improved checks.

1 / 49
Source: Apple
First published (updated )
CVE-2024-40787

Apple WatchOSInput Validation, Race Condition, Integer Overflow, Use After Free

Risk 45
Severity
7.5
Input Validation, Race Condition, Integer Overflow, Use After Free
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirDrop. This issue was addressed through improved state management.

1 / 43
Source: Apple
First published (updated )
CVE-2024-40829

Microsoft Azure Arc Resource BridgeOpenSSH regreSSHion Attack (CVE-2024-6387)

Risk 92
Severity
8.1
Exploited
EPSS
71.47%
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

1 / 36
Source: MITRE
First published (updated )
CVE-2024-6387

apple macOS SonomaInput Validation, Race Condition

Risk 71
Severity
7.8
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to elevate privileges.

1 / 39
Source: MITRE
First published (updated )
CVE-2024-27843

Apple tvOSInput Validation

Risk 62
Severity
7.5
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Apple Neural Engine. The issue was addressed with improved memory handling.

1 / 21
Source: Apple
First published (updated )
CVE-2024-27840

Apple macOS SonomaInput Validation, Race Condition

Risk 53
Severity
7.1
Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Apple Neural Engine. The issue was addressed with improved memory handling.

1 / 35
Source: Apple
First published (updated )
CVE-2024-27800

Apple macOS SonomaAirDrop. This issue was addressed through improved state management.

Risk 72
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AirDrop. This issue was addressed through improved state management.

1 / 4
Source: Apple
First published (updated )
CVE-2024-27826

Apple tvOSAppleVA. The issue was addressed with improved memory handling.

Risk 74
Severity
8.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Apple Neural Engine. The issue was addressed with improved memory handling.

1 / 9
Source: Apple
First published (updated )
CVE-2024-40771

debian/curlHTTP/2 push headers memory-leak

Risk 47
Severity
8.6
EPSS
0.04%
Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Accounts. The issue was addressed with improved checks.

1 / 17
Source: Apple
First published (updated )
CVE-2024-2398

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 30
Source: MITRE
First published (updated )
CVE-2024-23225

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 86
Source: MITRE
First published (updated )
CVE-2024-23296

Apple macOS SonomaCode Injection, Buffer Overflow, Race Condition, Input Validation

Risk 74
Severity
8.6
Code Injection, Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 32
Source: Apple
First published (updated )
CVE-2024-23278

Apple macOS SonomaInteger overflow in VideoLAN dav1d

Risk 82
Severity
8.8
Integer Overflow, Input Validation
AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

1 / 3
Source: MITRE
First published (updated )
CVE-2024-1580

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203