Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed with improved redaction of sensitive information.

1 / 55
Source: Apple
First published (updated )
CVE-2023-40403

debian/curlHSTS subdomain overwrites parent cache entry

Risk 34
Severity
6.5
EPSS
0.05%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 49
Source: Apple
First published (updated )
CVE-2024-9681

Apple macOS SonomaQUIC certificate check bypass with wolfSSL

Risk 34
Severity
6.3
EPSS
0.04%
Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Accounts. The issue was addressed with improved checks.

1 / 13
Source: Apple
First published (updated )
CVE-2024-2379

Apple macOS SonomaTLS certificate check bypass with mbedTLS

Risk 42
Severity
6.5
Input Validation, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Accounts. The issue was addressed with improved checks.

1 / 14
Source: Apple
First published (updated )
CVE-2024-2466

Apple macOS VenturaInput Validation, Double Free, Buffer Overflow, Use After Free, Race Condition

Risk 39
Severity
6.5
Input Validation, Double Free, Buffer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 29
Source: Apple
First published (updated )
CVE-2023-29469

Apple macOS VenturaThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tv…

Risk 19
Severity
4

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

First published (updated )
REDHAT-BUG-2349766

Apple macOS Sonomaafpfs. This issue was addressed with improved checks.

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

afpfs. The issue was addressed with improved memory handling.

1 / 6
Source: Apple
First published (updated )
CVE-2025-31251

apple iPadOSInput Validation, Null Pointer Dereference, Use After Free

Risk 34
Severity
5.4
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 14
Source: Apple
First published (updated )
CVE-2025-24271

Apple iPadOSInput Validation, Null Pointer Dereference, Use After Free

Risk 38
Severity
6.5
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 13
Source: Apple
First published (updated )
CVE-2025-24251

Apple tvOSInput Validation, Race Condition, Use After Free

Risk 45
Severity
6.3
Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Accessibility. A logic issue was addressed with improved checks.

1 / 21
Source: Apple
First published (updated )
CVE-2025-43210

Apple macOS SonomaRace Condition, Input Validation, Use After Free, Double Free, Integer Overflow, SQL Injection

Risk 36
Severity
6.2
Race Condition, Input Validation, Use After Free, Double Free, Integer Overflow, SQL Injection
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Admin Framework. A path handling issue was addressed with improved validation.

1 / 85
Source: Apple
First published (updated )
CVE-2025-43238

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 28
Source: Apple
First published (updated )
CVE-2020-19190

ubuntu/ncursesBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 40
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 30
Source: Apple
First published (updated )
CVE-2020-19189

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 28
Source: Apple
First published (updated )
CVE-2020-19188

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 28
Source: Apple
First published (updated )
CVE-2020-19186

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 28
Source: Apple
First published (updated )
CVE-2020-19187

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Risk 38
Severity
6.5
Buffer Overflow, Input Validation, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 28
Source: Apple
First published (updated )
CVE-2020-19185

Apple iPadOSPath Traversal, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 23
Severity
5.5
EPSS
0.01%
Path Traversal, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to read sensitive location information.

1 / 92
Source: MITRE
First published (updated )
CVE-2025-30470

Apple macOSUse After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow

Risk 32
Severity
5.5
Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption.

1 / 72
Source: MITRE
First published (updated )
CVE-2025-24235

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 32
Severity
5.5
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 145
Source: Apple
First published (updated )
CVE-2025-24278

Apple iPadOSInfoleak, Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow

Risk 23
Severity
5.5
EPSS
0.01%
Infoleak, Use After Free, Input Validation, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 40
Source: Apple
First published (updated )
CVE-2025-31191

Apple iPadOSInfoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 23
Severity
5.5
EPSS
0.01%
Infoleak, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 61
Source: Apple
First published (updated )
CVE-2025-30447

Apple macOSInfoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Infoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 149
Source: Apple
First published (updated )
CVE-2025-24279

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 44
Severity
6.3
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Accessibility. A logging issue was addressed with improved data redaction.

1 / 30
Source: Apple
First published (updated )
CVE-2025-24212

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 32
Severity
5.5
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A logic error was addressed with improved error handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Parsing an image may lead to disclosure of user information.

1 / 67
Source: MITRE
First published (updated )
CVE-2025-24210

Apple macOSPath Traversal, Use After Free, Input Validation, Null Pointer Dereference

Risk 32
Severity
5.5
Path Traversal, Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data.

1 / 30
Source: NVD
First published (updated )
CVE-2025-43465

redhat/jbcs-httpd24-curlInput Validation

Risk 37
Severity
5.9
Input Validation
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client.

1 / 31
First published (updated )
CVE-2022-32208

redhat/jbcs-httpd24-curlInput Validation

Risk 39
Severity
6.5
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a malicious actor.

1 / 31
First published (updated )
CVE-2022-32206

Apple macOS Big SurNULL Pointer Dereference in vim/vim

Risk 71
Severity
5.5
Null Pointer Dereference, Race Condition, Buffer Overflow, Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accounts. A privacy issue was addressed with improved private data redaction for log entries.

1 / 47
Source: Apple
First published (updated )
CVE-2023-2609

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free

Risk 33
Severity
6.3
EPSS
0.01%
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox.

1 / 29
Source: MITRE
First published (updated )
CVE-2025-30429

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203