Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

16.0
7
18.0
1

Apple macOS SonomaUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 29
Severity
5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 76
Source: Apple
First published (updated )
CVE-2025-24203

Apple macOS SonomaInput Validation

Risk 37
Severity
6.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. The issue was addressed with improved authentication.

1 / 23
Source: Apple
First published (updated )
CVE-2024-44297

Apple Ipad OsInfoleak, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 14
Severity
2.4
Infoleak, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. This issue was addressed by restricting options offered on a locked device.

1 / 35
Source: Apple
First published (updated )
CVE-2024-44139

Apple macOS SonomaBluetooth. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 12
Source: Apple
First published (updated )
CVE-2024-23250

Apple macOS SonomaBuffer Overflow, Race Condition, Input Validation

Risk 74
Severity
8.6
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 31
Source: Apple
First published (updated )
CVE-2024-0258

Apple tvOSBuffer Overflow, Race Condition

Risk 33
Severity
5.5
Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 16
Source: Apple
First published (updated )
CVE-2024-23297

Apple macOS SonomaRace Condition, Buffer Overflow, Input Validation

Risk 37
Severity
5.9
Race Condition, Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to leak sensitive user information.

1 / 57
Source: MITRE
First published (updated )
CVE-2024-23239

Apple macOS SonomaBuffer Overflow, Race Condition, Input Validation

Risk 29
Severity
4.6
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 65
Source: Apple
First published (updated )
CVE-2024-23293

Apple macOS SonomaRace Condition, Buffer Overflow, Input Validation

Risk 80
Severity
8.8
Race Condition, Buffer Overflow, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 75
Source: Apple
First published (updated )
CVE-2024-23226

ubuntu/webkit2gtkBuffer Overflow, Race Condition, Input Validation

Risk 39
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A malicious website may exfiltrate audio data cross-origin WebKit Bugzilla: 263795

1 / 79
Source: Red Hat
First published (updated )
CVE-2024-23254

ubuntu/webkit2gtkBuffer Overflow, Race Condition, Input Validation

Risk 72
Severity
7.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A maliciously crafted webpage may be able to fingerprint the user. WebKit Bugzilla: 266703

1 / 80
Source: Red Hat
First published (updated )
CVE-2024-23280

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 41
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 66
Source: Apple
First published (updated )
CVE-2024-23241

Apple macOSBluetooth. The issue was addressed with improved checks.

Risk 37
Severity
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 10
Source: Apple
First published (updated )
CVE-2024-23277

Apple macOSBluetooth. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data.

1 / 15
Source: MITRE
First published (updated )
CVE-2024-23205

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 69
Severity
9.1
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 49
Source: Apple
First published (updated )
CVE-2024-23255

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 18
Severity
3.3
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to view Mail data.

1 / 68
Source: MITRE
First published (updated )
CVE-2024-23242

debian/bluezInput Validation

Risk 50
Severity
6.3
Input Validation
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 13
Source: Apple

Remedy

In `/etc/bluetooth/input.conf` set `ClassicBondedOnly=true` and then `systemctl restart bluetooth`. Setting `ClassicBondedOnly=false` will re-enable legacy device support (like the PS3 controller) and the vulnerability.
First published (updated )
CVE-2023-45866

Apple iOS and iPadOSUse After Free, Input Validation, Race Condition, Buffer Overflow

Risk 68
Severity
7.8
Use After Free, Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.

1 / 70
Source: MITRE
First published (updated )
CVE-2023-42977

tvOSRace Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free

Risk 88
Severity
9.8
Race Condition, Buffer Overflow, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 79
Source: Apple
First published (updated )
CVE-2023-28201

Apple macOS Big SurInput Validation, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 22
Source: Apple
First published (updated )
CVE-2023-28181

Apple Ipad OsBuffer Overflow, Input Validation, Integer Overflow, Use After Free

Risk 18
Severity
3.3
Buffer Overflow, Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 36
Source: Apple
First published (updated )
CVE-2023-28194

Apple macOS Big SurUse After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 39
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 57
Source: Apple
First published (updated )
CVE-2023-28182

Apple tvOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 32
Severity
5.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.

1 / 64
First published (updated )
CVE-2023-28178

Apple Ipad OsApple Neural Engine. The issue was addressed with improved memory handling.

Risk 71
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 6
Source: Apple
First published (updated )
CVE-2023-27970

Apple tvOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow

Risk 71
Severity
7.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges.

1 / 47
First published (updated )
CVE-2023-27969

Apple tvOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 45
Severity
7.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 66
Source: Apple
First published (updated )
CVE-2023-27963

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 33
Severity
5.5
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 15
Source: Apple
First published (updated )
CVE-2023-27961

Apple Ipad OsApple Neural Engine. The issue was addressed with improved memory handling.

Risk 71
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 5
Source: Apple
First published (updated )
CVE-2023-27959

ubuntu/webkit2gtkBuffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition

Risk 39
Severity
6.5
Buffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

[Unknown description]

1 / 78
First published (updated )
CVE-2023-27954

Apple tvOSBuffer Overflow, Input Validation

Risk 33
Severity
5.5
Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 33
Source: Apple
First published (updated )
CVE-2023-27956

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203