Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Apple macOS MontereyWebRTC Heap Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 62
Source: Apple
First published (updated )
CVE-2022-2294

Apple SafariUse After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 65
Severity
4.3
Exploited
Zeroday
EPSS
0.04%
Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 159
Source: MITRE
First published (updated )
CVE-2025-30427

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Apple SafariInput Validation, Null Pointer Dereference, Use After Free

Risk 72
Severity
8.1
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 21
Source: Apple
First published (updated )
CVE-2025-24180

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Risk 65
Severity
6.3
Exploited
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may lead to a cross site scripting attack.

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-44309

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A vulnerability was discovered in WebKitGTK's JIT compiler.

1 / 6
Source: Red Hat
First published (updated )
CVE-2024-44308

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

debian/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 83
Severity
8.8
Exploited
Zeroday
EPSS
0.11%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-23222

Apple macOS VenturaApple Multiple products Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Race Condition, Buffer Overflow, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

1 / 63
Source: MITRE
First published (updated )
CVE-2023-43000

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 16
Source: Apple
First published (updated )
CVE-2023-42916

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

1 / 17
Source: Ubuntu
First published (updated )
CVE-2023-42917

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
Buffer Overflow, Input Validation, Race Condition, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Airport. A permissions issue was addressed with improved redaction of sensitive information.

1 / 100
Source: Apple
First published (updated )
CVE-2023-41993

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 61
Source: Apple
First published (updated )
CVE-2023-37450

ubuntu/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 6
Source: Ubuntu
First published (updated )
CVE-2023-32439

Apple Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability

Risk 65
Severity
8.6
Exploited
Buffer Overflow, Use After Free, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 63
Source: Apple
First published (updated )
CVE-2023-32409

ubuntu/webkit2gtkApple Multiple Products WebKit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free, Buffer Overflow, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 66
Source: Ubuntu
First published (updated )
CVE-2023-32373

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation, Buffer Overflow, Use After Free, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 65
Source: Apple
First published (updated )
CVE-2023-28204

Apple Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 4
Source: NVD
First published (updated )
CVE-2023-23529

Apple tvOSApple Multiple Products Unspecified Vulnerability

Risk 94
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Out-of-bounds Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 35
Source: Apple
First published (updated )
CVE-2022-48503

debian/webkit2gtkApple iOS and macOS Out-of-Bounds Write Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 4
First published (updated )
CVE-2022-32893

Apple macOS MontereyApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

1 / 4
Source: NVD
First published (updated )
CVE-2022-22620

debian/webkit2gtkApple Multiple Products Integer Overflow or Wraparound Vulnerability

Risk 93
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK. An integer overflow was addressed with improved input validation.

Reference: https://webkitgtk.org/security/WSA-2022-0001.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30952

debian/webkit2gtkApple iOS, iPadOS, macOS Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2021-30858

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30665

Apple macOS Big SurApple Multiple Products WebKit Storage Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management.

1 / 5
Source: Red Hat
First published (updated )
CVE-2021-30661

debian/webkit2gtkApple Multiple Products WebKit Integer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow was addressed with improved input validation.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30663

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203