Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
Buffer Overflow, Input Validation, Race Condition, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Airport. A permissions issue was addressed with improved redaction of sensitive information.

1 / 100
Source: Apple
First published (updated )
CVE-2023-41993

debian/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 83
Severity
8.8
Exploited
Zeroday
EPSS
0.11%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-23222

debian/webkit2gtkApple iOS, iPadOS, macOS Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2021-30858

Apple macOS Big SurApple Multiple Products WebKit Storage Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management.

1 / 5
Source: Red Hat
First published (updated )
CVE-2021-30661

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30665

debian/webkit2gtkApple Multiple Products WebKit Integer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow was addressed with improved input validation.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30663

ubuntu/webkit2gtkApple Multiple Products WebKit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free, Buffer Overflow, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 66
Source: Ubuntu
First published (updated )
CVE-2023-32373

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A vulnerability was discovered in WebKitGTK's JIT compiler.

1 / 6
Source: Red Hat
First published (updated )
CVE-2024-44308

Apple Multiple ProductsApple Multiple Products WebKit Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 4
Source: NVD
First published (updated )
CVE-2023-23529

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Apple macOS VenturaApple Multiple products Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Race Condition, Buffer Overflow, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

1 / 63
Source: MITRE
First published (updated )
CVE-2023-43000

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

debian/webkit2gtkApple iOS and macOS Out-of-Bounds Write Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 4
First published (updated )
CVE-2022-32893

Apple macOS MontereyWebRTC Heap Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 62
Source: Apple
First published (updated )
CVE-2022-2294

Apple Multiple ProductsApple Multiple Products Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A type confusion issue was addressed with improved state handling.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1789

redhat/webkitgtkApple Multiple Products Type Confusion Vulnerability

Risk 97
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

1 / 5
Source: CISA
First published (updated )
CVE-2019-8506

Apple macOS MontereyApple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

1 / 4
Source: NVD
First published (updated )
CVE-2022-22620

debian/webkit2gtkApple Multiple Products Integer Overflow or Wraparound Vulnerability

Risk 93
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK. An integer overflow was addressed with improved input validation.

Reference: https://webkitgtk.org/security/WSA-2022-0001.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30952

Apple tvOSApple Multiple Products Unspecified Vulnerability

Risk 94
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Out-of-bounds Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 35
Source: Apple
First published (updated )
CVE-2022-48503

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 61
Source: Apple
First published (updated )
CVE-2023-37450

ubuntu/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 6
Source: Ubuntu
First published (updated )
CVE-2023-32439

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

1 / 17
Source: Ubuntu
First published (updated )
CVE-2023-42917

Apple Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability

Risk 65
Severity
8.6
Exploited
Buffer Overflow, Use After Free, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 63
Source: Apple
First published (updated )
CVE-2023-32409

Apple SafariInput Validation, Null Pointer Dereference, Use After Free

Risk 72
Severity
8.1
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 21
Source: Apple
First published (updated )
CVE-2025-24180

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation, Buffer Overflow, Use After Free, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 65
Source: Apple
First published (updated )
CVE-2023-28204

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 16
Source: Apple
First published (updated )
CVE-2023-42916

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203