Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

16.0
4
18.0
1

Apple macOS SonomaUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 29
Severity
5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 76
Source: Apple
First published (updated )
CVE-2025-24203

Apple macOS SonomaInput Validation

Risk 37
Severity
6.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. The issue was addressed with improved authentication.

1 / 23
Source: Apple
First published (updated )
CVE-2024-44297

Apple macOS SonomaBluetooth. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 12
Source: Apple
First published (updated )
CVE-2024-23250

Apple tvOSBuffer Overflow, Race Condition

Risk 33
Severity
5.5
Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 16
Source: Apple
First published (updated )
CVE-2024-23297

Apple macOS SonomaRace Condition, Buffer Overflow, Input Validation

Risk 37
Severity
5.9
Race Condition, Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with improved state handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to leak sensitive user information.

1 / 57
Source: MITRE
First published (updated )
CVE-2024-23239

Apple macOS SonomaBuffer Overflow, Race Condition, Input Validation

Risk 29
Severity
4.6
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 65
Source: Apple
First published (updated )
CVE-2024-23293

ubuntu/webkit2gtkBuffer Overflow, Race Condition, Input Validation

Risk 39
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A malicious website may exfiltrate audio data cross-origin WebKit Bugzilla: 263795

1 / 79
Source: Red Hat
First published (updated )
CVE-2024-23254

Apple macOSBuffer Overflow, Race Condition, Input Validation

Risk 41
Severity
6.5
Buffer Overflow, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 66
Source: Apple
First published (updated )
CVE-2024-23241

Apple macOSBluetooth. The issue was addressed with improved checks.

Risk 37
Severity
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 10
Source: Apple
First published (updated )
CVE-2024-23277

Apple macOSBluetooth. The issue was addressed with improved checks.

Risk 33
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data.

1 / 15
Source: MITRE
First published (updated )
CVE-2024-23205

debian/bluezInput Validation

Risk 50
Severity
6.3
Input Validation
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 13
Source: Apple

Remedy

In `/etc/bluetooth/input.conf` set `ClassicBondedOnly=true` and then `systemctl restart bluetooth`. Setting `ClassicBondedOnly=false` will re-enable legacy device support (like the PS3 controller) and the vulnerability.
First published (updated )
CVE-2023-45866

Apple macOS Big SurUse After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 39
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 57
Source: Apple
First published (updated )
CVE-2023-28182

Apple tvOSInput Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 32
Severity
5.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.

1 / 64
First published (updated )
CVE-2023-28178

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow

Risk 33
Severity
5.5
Input Validation, Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 15
Source: Apple
First published (updated )
CVE-2023-27961

ubuntu/webkit2gtkBuffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition

Risk 39
Severity
6.5
Buffer Overflow, Input Validation, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

[Unknown description]

1 / 78
First published (updated )
CVE-2023-27954

Apple tvOSBuffer Overflow, Input Validation

Risk 33
Severity
5.5
Buffer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 33
Source: Apple
First published (updated )
CVE-2023-27956

Apple macOS Big SurUse After Free, Buffer Overflow

Risk 33
Severity
5.5
Use After Free, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 19
Source: Apple
First published (updated )
CVE-2023-27955

redhat/webkitgtkInput Validation, XSS

Risk 39
Severity
6.1
Input Validation, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3902

Apple This document describes the security content of tvOSWebKit. A logic issue was addressed with improved restrictions.

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated.

1 / 2
First published (updated )
CVE-2020-3887

redhat/webkitgtkWebKit Page Loading. A logic issue was addressed with improved restrictions.

Risk 23
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-3885

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203