Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

6.0
2
7.0
2
9.0
1

Apple visionOSApple Multiple Buffer Overflow Vulnerability

Risk 91
Severity
7.8
Exploited
Buffer Overflow, Use After Free, Race Condition, Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

1 / 21
Source: MITRE
First published (updated )
CVE-2026-20700

Apple Multiple ProductsApple Multiple Products Use-After-Free WebKit Vulnerability

Risk 95
Severity
8.8
Exploited
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

1 / 76
Source: Red Hat
First published (updated )
CVE-2025-43529

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Apple WatchOSApple Multiple Products Classic Buffer Overflow Vulnerability

Risk 65
Severity
7.1
Exploited
Use After Free, Race Condition, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause unexpected system termination or write kernel memory.

1 / 56
Source: MITRE
First published (updated )
CVE-2025-43520

Apple WatchOSApple Multiple Products Improper Locking Vulnerability

Risk 88
Severity
7.8
Exploited
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.

1 / 55
Source: MITRE
First published (updated )
CVE-2025-43510

Apple tvOSApple Multiple Products Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Double Free, SQL Injection, Race Condition, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 81
Source: Apple
First published (updated )
CVE-2025-31277

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

SQLite SQLiteInteger Truncation on SQLite

Risk 79
Severity
7.2
Exploited
EPSS
0.05%
SQL Injection, Input Validation, Buffer Overflow, Race Condition, Double Free, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 183
Source: Apple
First published (updated )
CVE-2025-6965

Apple SafariDouble Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition

Risk 91
Severity
7.8
Exploited
Zeroday
Double Free, Use After Free, Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 189
Source: Apple
First published (updated )
CVE-2025-24213

Apple SafariInput Validation, Null Pointer Dereference, Use After Free

Risk 72
Severity
8.1
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 21
Source: Apple
First published (updated )
CVE-2025-24180

Apple WatchOSUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow, Integer Overflow

Risk 75
Severity
7.8
Exploited
Zeroday
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A malicious app may be able to gain root privileges.

1 / 103
Source: MITRE
First published (updated )
CVE-2025-24107

Apple WatchOSUse After Free, Input Validation, Null Pointer Dereference

Risk 74
Severity
7.8
Exploited
Zeroday
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to execute arbitrary code with kernel privileges.

1 / 34
Source: MITRE
First published (updated )
CVE-2025-24159

Apple WatchOSUse After Free, Input Validation, Null Pointer Dereference

Risk 76
Severity
8
Exploited
Zeroday
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3. An attacker on the local network may corrupt process memory.

1 / 6
Source: MITRE
First published (updated )
CVE-2025-24137

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 30
Source: MITRE
First published (updated )
CVE-2024-23225

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Input Validation, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

1 / 86
Source: MITRE
First published (updated )
CVE-2024-23296

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

1 / 17
Source: Ubuntu
First published (updated )
CVE-2023-42917

Apple Multiple ProductsApple Multiple Products Kernel Privilege Escalation Vulnerability

Risk 86
Severity
7.8
Exploited
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

App Store. The issue was addressed with improved handling of protocols.

1 / 18
Source: Apple
First published (updated )
CVE-2023-41992

Apple iOS, iPadOS, and watchOSApple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Risk 85
Severity
7.8
Exploited
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2023-41061

ubuntu/webkit2gtkApple Multiple Products WebKit Code Execution Vulnerability

Risk 95
Severity
8.8
Exploited
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 61
Source: Apple
First published (updated )
CVE-2023-37450

Apple Multiple ProductsApple Multiple Products Integer Overflow Vulnerability

Risk 91
Severity
7.8
Exploited
Zeroday
Integer Overflow, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Kernel. An integer overflow was addressed with improved input validation.

1 / 11
Source: Apple
First published (updated )
CVE-2023-32434

Apple Multiple ProductsApple Multiple Products WebKit Sandbox Escape Vulnerability

Risk 65
Severity
8.6
Exploited
Buffer Overflow, Use After Free, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 63
Source: Apple
First published (updated )
CVE-2023-32409

ubuntu/webkit2gtkApple Multiple Products WebKit Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free, Buffer Overflow, Input Validation, Race Condition, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 66
Source: Ubuntu
First published (updated )
CVE-2023-32373

Apple Multiple ProductsApple Multiple Products Code Execution Vulnerability

Risk 85
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

1 / 3
Source: CISA
First published (updated )
CVE-2023-41990

Apple Multiple ProductsApple Multiple Products Memory Corruption Vulnerability

Risk 81
Severity
7
Exploited
Input Validation, Race Condition, Integer Overflow, Double Free
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved restrictions.

1 / 31
Source: Apple
First published (updated )
CVE-2022-48618

Apple iOS and iPadOSApple iOS and iPadOS Out-of-Bounds Write Vulnerability

Risk 86
Severity
7.8
Exploited
Race Condition, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

1 / 23
First published (updated )
CVE-2022-42827

debian/webkit2gtkApple iOS and macOS Out-of-Bounds Write Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 4
First published (updated )
CVE-2022-32893

Apple iOS and macOSApple iOS and macOS Out-of-Bounds Write Vulnerability

Risk 87
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2022-32894

Apple tvOSApple Multiple Products Unspecified Vulnerability

Risk 94
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow, Out-of-bounds Read
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 35
Source: Apple
First published (updated )
CVE-2022-48503

Apple macOS MontereyWebRTC Heap Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 62
Source: Apple
First published (updated )
CVE-2022-2294

Apple macOS Big SurApple macOS Out-of-Bounds Write Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

1 / 6
First published (updated )
CVE-2022-22675

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203