Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

SQLite SQLiteInteger Truncation on SQLite

Risk 79
Severity
7.2
Exploited
EPSS
0.05%
SQL Injection, Input Validation, Buffer Overflow, Race Condition, Double Free, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 183
Source: Apple
First published (updated )
CVE-2025-6965

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Apple visionOSApple Multiple Buffer Overflow Vulnerability

Risk 91
Severity
7.8
Exploited
Buffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

1 / 21
Source: MITRE
First published (updated )
CVE-2026-20700

Apple macOS MontereyWebRTC Heap Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 62
Source: Apple
First published (updated )
CVE-2022-2294

Apple SafariUse After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 65
Severity
4.3
Exploited
Zeroday
EPSS
0.04%
Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 159
Source: MITRE
First published (updated )
CVE-2025-30427

Apple iPadOSAccountPolicy. This issue was addressed by removing the vulnerable code.

Risk 65
Severity
5
Exploited
Zeroday
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to read arbitrary file metadata.

1 / 5
Source: MITRE
First published (updated )
CVE-2025-24097

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Apple SafariInput Validation, Null Pointer Dereference, Use After Free

Risk 72
Severity
8.1
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 21
Source: Apple
First published (updated )
CVE-2025-24180

Apple iPadOSUse After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow

Risk 99
Severity
9.8
Exploited
Zeroday
Use After Free, Input Validation, Null Pointer Dereference, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 85
Source: Apple
First published (updated )
CVE-2025-24178

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 86
Severity
9.8
Exploited
Zeroday
EPSS
0.10%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 86
Source: Apple
First published (updated )
CVE-2025-31182

Apple WatchOSApple Multiple Products Classic Buffer Overflow Vulnerability

Risk 65
Severity
7.1
Exploited
Use After Free, Race Condition, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

1 / 56
Source: MITRE
First published (updated )
CVE-2025-43520

Apple WatchOSApple Multiple Products Improper Locking Vulnerability

Risk 88
Severity
7.8
Exploited
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

1 / 55
Source: MITRE
First published (updated )
CVE-2025-43510

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple Multiple ProductsApple Multiple Products Cross-Site Scripting (XSS) Vulnerability

Risk 65
Severity
6.3
Exploited
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may lead to a cross site scripting attack.

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-44309

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A vulnerability was discovered in WebKitGTK's JIT compiler.

1 / 6
Source: Red Hat
First published (updated )
CVE-2024-44308

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

Apple macOS SequoiaApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Trending
Year
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

1 / 3
Source: MITRE
First published (updated )
CVE-2025-43300

Apple macOS SonomaApple Multiple Products Unspecified Vulnerability

Risk 65
Severity
4.2
Exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
CVE-2025-43200

Apple tvOSApple Multiple Products Memory Corruption Vulnerability

Risk 99
Severity
9.8
Exploited
Zeroday
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

1 / 5
Source: MITRE
First published (updated )
CVE-2025-31200

Apple tvOSApple Multiple Products Arbitrary Read and Write Vulnerability

Risk 99
Severity
9.8
Exploited
Zeroday
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

1 / 4
Source: CISA
First published (updated )
CVE-2025-31201

Apple iOS and iPadOSApple iOS and iPadOS Incorrect Authorization Vulnerability

Risk 65
Severity
6.1
Exploited
Zeroday
EPSS
1.04%
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accessibility. An authorization issue was addressed with improved state management.

1 / 3
Source: Apple
First published (updated )
CVE-2025-24200

Apple Multiple ProductsApple Multiple Products Use-After-Free Vulnerability

Risk 90
Severity
10
Exploited
Zeroday
EPSS
0.21%
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

1 / 40
Source: MITRE
First published (updated )
CVE-2025-24085

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 86
Source: MITRE
First published (updated )
CVE-2024-23296

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 30
Source: MITRE
First published (updated )
CVE-2024-23225

debian/webkit2gtkApple Multiple Products WebKit Type Confusion Vulnerability

Risk 83
Severity
8.8
Exploited
Zeroday
EPSS
0.11%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

Reference: https://webkitgtk.org/security/WSA-2024-0001.html

1 / 7
Source: Red Hat
First published (updated )
CVE-2024-23222

debian/libvpxHeap buffer overflow in vp8 encoding in libvpx

Risk 93
Severity
8.8
Exploited
Zeroday
EPSS
29.61%
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

1 / 10
Source: Microsoft
First published (updated )
CVE-2023-5217

Apple macOS VenturaApple Multiple products Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Race Condition, Buffer Overflow, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

1 / 63
Source: MITRE
First published (updated )
CVE-2023-43000

ubuntu/webkit2gtkApple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Risk 65
Severity
6.5
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 16
Source: Apple
First published (updated )
CVE-2023-42916

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203