Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSInput Validation, Use After Free, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 69
Source: Apple
First published (updated )
CVE-2025-43493

Apple WatchOSInput Validation, Use After Free, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 72
Source: Apple
First published (updated )
CVE-2025-43503

Apple WatchOSInput Validation, Use After Free, Race Condition

Risk 24
Severity
4.3
Input Validation, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 104
Source: Apple
First published (updated )
CVE-2025-43458

Apple WatchOSInput Validation, Use After Free, Race Condition, Buffer Overflow

Risk 23
Severity
4.3
Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. A permissions issue was addressed with additional restrictions.

1 / 107
Source: Apple
First published (updated )
CVE-2025-43443

Apple WatchOSUse After Free, Input Validation, Race Condition

Risk 82
Severity
8.8
Use After Free, Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 107
Source: NVD
First published (updated )
CVE-2025-43438

Apple WatchOSUse After Free, Input Validation, Race Condition

Risk 23
Severity
4.3
Use After Free, Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 107
Source: Red Hat
First published (updated )
CVE-2025-43434

Apple WatchOSBuffer Overflow, Input Validation, Use After Free, Race Condition

Risk 23
Severity
4.3
Buffer Overflow, Input Validation, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 108
Source: Red Hat
First published (updated )
CVE-2025-43429

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Apple macOS VenturaApple Multiple products Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Race Condition, Buffer Overflow, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

1 / 63
Source: MITRE
First published (updated )
CVE-2023-43000

libxslt libxsltLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

Risk 44
Severity
7.8
EPSS
0.02%
Input Validation, Double Free, Use After Free, Race Condition
AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.

1 / 40
Source: IBM
First published (updated )
CVE-2025-7425

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal, XSS

Risk 34
Severity
5.4
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

1 / 211
Source: MITRE
First published (updated )
CVE-2026-86898

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 38
Severity
6.5
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 202
Source: MITRE
First published (updated )
CVE-2026-84635

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal

Risk 31
Severity
5.5
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 157
Source: Apple
First published (updated )
CVE-2026-86897

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 77
Severity
8.8
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 109
Source: Apple
First published (updated )
CVE-2026-65390

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 77
Severity
8.8
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 108
Source: Apple
First published (updated )
CVE-2026-65391

Apple iOSUse After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 147
Source: Apple
First published (updated )
CVE-2026-84518

Apple tvOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 37
Severity
6.5
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.

1 / 205
Source: NVD
First published (updated )
CVE-2026-64753

Apple visionOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65351

Apple visionOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65337

Apple iPadOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65336

Apple SafariUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65340

Apple iOSRace Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 34
Severity
5.4
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 160
Source: Apple
First published (updated )
CVE-2026-65341

Apple iOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 145
Source: Apple
First published (updated )
CVE-2026-65338

Apple SafariUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 153
Source: MITRE
First published (updated )
CVE-2026-65334

Apple iOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65331

Apple iOSUse After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65335

Apple visionOSUse After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65332

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203