Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS SonomaQUIC certificate check bypass with wolfSSL

Risk 34
Severity
6.3
EPSS
0.04%
Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Accounts. The issue was addressed with improved checks.

1 / 13
Source: Apple
First published (updated )
CVE-2024-2379

Apple macOS SonomaTLS certificate check bypass with mbedTLS

Risk 42
Severity
6.5
Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Accounts. The issue was addressed with improved checks.

1 / 14
Source: Apple
First published (updated )
CVE-2024-2466

redhat/jbcs-httpd24-curlUse After Free, Buffer Overflow, Input Validation

Risk 38
Severity
5.9
Use After Free, Buffer Overflow, Input Validation
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

1 / 22
First published (updated )
CVE-2022-43552

Apple macOS VenturaRace Condition, Input Validation, Use After Free

Risk 31
Severity
5.5
Race Condition, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data.

1 / 22
Source: MITRE
First published (updated )
CVE-2025-43313

Apple macOS SequoiaInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 31
Severity
5.5
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

1 / 131
Source: MITRE
First published (updated )
CVE-2025-24165

Apple macOS SequoiaInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 32
Severity
5.5
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 61
Source: Apple
First published (updated )
CVE-2025-30431

Apple macOS SonomaApple Multiple Products Unspecified Vulnerability

Risk 65
Severity
4.2
Exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
CVE-2025-43200

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 55
Source: Apple
First published (updated )
CVE-2023-40403

Apple tvOSInput Validation, Race Condition, Use After Free

Risk 45
Severity
6.3
Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Accessibility. A logic issue was addressed with improved checks.

1 / 21
Source: Apple
First published (updated )
CVE-2025-43210

Apple macOS SonomaRace Condition, Input Validation, Use After Free, Double Free, Integer Overflow, SQL Injection

Risk 36
Severity
6.2
Race Condition, Input Validation, Use After Free, Double Free, Integer Overflow, SQL Injection
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Admin Framework. A path handling issue was addressed with improved validation.

1 / 85
Source: Apple
First published (updated )
CVE-2025-43238

Apple macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 32
Severity
5.5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption.

1 / 72
Source: MITRE
First published (updated )
CVE-2025-24235

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 32
Severity
5.5
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 145
Source: Apple
First published (updated )
CVE-2025-24278

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 23
Severity
5.5
EPSS
0.01%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 61
Source: Apple
First published (updated )
CVE-2025-30447

Apple macOSInfoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Infoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 149
Source: Apple
First published (updated )
CVE-2025-24279

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 44
Severity
6.3
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 30
Source: Apple
First published (updated )
CVE-2025-24212

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information.

1 / 67
Source: MITRE
First published (updated )
CVE-2025-24210

Apple macOS SonomaInfoleak

Risk 24
Severity
5.5
EPSS
0.06%
Infoleak
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Apple Neural Engine. The issue was addressed with improved memory handling.

1 / 6
Source: Apple
First published (updated )
CVE-2024-23207

Apple Multiple ProductsApple Multiple Products Improper Certificate Validation Vulnerability

Risk 65
Severity
5.5
Exploited
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

1 / 27
Source: MITRE
First published (updated )
CVE-2023-41991

Apple Multiple ProductsApple Multiple Products Kernel Unspecified Vulnerability

Risk 65
Severity
5.5
Exploited
Zeroday
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 26
Source: Apple
First published (updated )
CVE-2023-38606

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation, Buffer Overflow, Use After Free, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 65
Source: Apple
First published (updated )
CVE-2023-28204

Apple WatchOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 23
Severity
5.5
EPSS
0.01%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 121
Source: Apple
First published (updated )
CVE-2025-30438

apple iPadOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 31
Severity
5.5
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 133
Source: Apple
First published (updated )
CVE-2025-24205

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 37
Severity
6.4
EPSS
0.05%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time delays after 4 failures.

1 / 66
Source: MITRE
First published (updated )
CVE-2025-30432

Apple macOS SonomaUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 29
Severity
5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 76
Source: Apple
First published (updated )
CVE-2025-24203

Apple iPadOSInfoleak, Use After Free, Input Validation, Null Pointer Dereference

Risk 31
Severity
5.5
Infoleak, Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 23
Source: Apple
First published (updated )
CVE-2025-24244

apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow

Risk 31
Severity
5.5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 31
Source: Apple
First published (updated )
CVE-2025-24215

Apple macOSInfoleak, Use After Free, Input Validation, Null Pointer Dereference

Risk 31
Severity
5.5
Infoleak, Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 14
Source: Apple
First published (updated )
CVE-2025-24276

Apple macOSUse After Free, Input Validation, Null Pointer Dereference

Risk 51
Severity
6.8
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 16
Source: Apple
First published (updated )
CVE-2025-24272

apple macOS SonomaInfoleak, Input Validation

Risk 31
Severity
5.5
Infoleak, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accounts. A logic issue was addressed with improved file handling.

1 / 19
Source: Apple
First published (updated )
CVE-2024-54547

Apple macOS SonomaRace Condition, Input Validation, Use After Free

Risk 32
Severity
5.5
Race Condition, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Admin Framework. A path handling issue was addressed with improved validation.

1 / 31
Source: Apple
First published (updated )
CVE-2025-43284

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203