ByteOS

Product

macOS

Versions

Affected

From unspecified before 13.4 (custom)

Vendor

Product

watchOS

Versions

Affected

From unspecified before 9.5 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 16.5 (custom)

Vendor

Product

tvOS

Versions

Affected

From unspecified before 16.5 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	An app may be able to execute arbitrary code with kernel privileges

Type: N/A

CWE ID: N/A

Description: An app may be able to execute arbitrary code with kernel privileges

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213758	N/A
https://support.apple.com/en-us/HT213764	N/A
https://support.apple.com/en-us/HT213757	N/A
https://support.apple.com/en-us/HT213761	N/A

Hyperlink: https://support.apple.com/en-us/HT213758

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213764

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213757

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213761

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213758	x_transferred
https://support.apple.com/en-us/HT213764	x_transferred
https://support.apple.com/en-us/HT213757	x_transferred
https://support.apple.com/en-us/HT213761	x_transferred

Hyperlink: https://support.apple.com/en-us/HT213758

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213764

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213757

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213761

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:23 Jun, 2023 | 18:15

Updated At:27 Jul, 2023 | 04:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 16.5(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 16.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.4(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 16.5(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 9.5(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-843	Primary	nvd@nist.gov

CWE ID: CWE-843

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT213757	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213758	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213761	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213764	product-security@apple.com	Release Notes Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213757

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213758

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213761

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213764

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Similar CVEs

1593Records found

CVE-2022-46706

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.89%

7 Day CHG~0.00%

Published-14 Aug, 2023 | 22:40

Updated-09 Oct, 2024 | 14:31

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x Security Update - Catalina macOS macos securtiy_update_catalina

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30859

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 49.99%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:49

Updated-03 Aug, 2024 | 22:48

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30869

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-4.23% / 88.31%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:49

Updated-30 Jul, 2025 | 01:38

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.

Vendor-Apple Inc.

Product-macos iphone_os ipados mac_os_x iOS and iPadOS macOS iOS, iPadOS, and macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2023-41075

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.14% / 34.56%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-26 Aug, 2024 | 20:35

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos ipados macOS iOS and iPadOS macos ipados

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-30310

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.90%

7 Day CHG~0.00%

Published-13 May, 2025 | 16:53

Updated-14 May, 2025 | 14:28

Dreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Dreamweaver Desktop versions 21.4 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Microsoft Corporation Adobe Inc.Apple Inc.

Product-dreamweaver macos windows Dreamweaver Desktop

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-24213

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.71%

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-13 May, 2025 | 17:15

This issue was addressed with improved handling of floats. This issue is fixed in tvOS 18.5, Safari 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, watchOS 11.5, visionOS 2.5. A type confusion issue could lead to memory corruption.

Vendor-Apple Inc.

Product-ipados macos iphone_os tvos safari macOS visionOS tvOS iPadOS watchOS Safari iOS and iPadOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-42841

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.01%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 17:15

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. Processing a maliciously crafted package may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-34221

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.33%

7 Day CHG~0.00%

Published-15 Jul, 2022 | 15:33

Updated-16 Sep, 2024 | 23:22

Adobe Acrobat Reader Type Confusion vulnerability could lead to Arbitrary code execution

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-32915

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.23%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 20:15

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2024-45112

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.73%

7 Day CHG~0.00%

Published-13 Sep, 2024 | 08:58

Updated-19 Sep, 2024 | 14:56

Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)

Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs when a resource is accessed using a type that is not compatible with the actual object type, leading to a logic error that an attacker could exploit. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader acrobat_dc acrobat_reader acrobat_reader_dc acrobat

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-3853

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 60.74%

7 Day CHG~0.00%

Published-27 Feb, 2020 | 20:45

Updated-04 Aug, 2024 | 07:44

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados mac_os_x tvOS macOS watchOS iOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-27932

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-2.03% / 83.05%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:13

Updated-30 Jul, 2025 | 01:45

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-ipados watchos iphone_os macos icloud itunes mac_os_x watchOS iOS and iPadOS macOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-22661

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.28% / 50.81%

7 Day CHG+0.03%

Published-18 Mar, 2022 | 18:00

Updated-03 Aug, 2024 | 03:21

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-8250

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-8.30% / 91.90%

7 Day CHG~0.00%

Published-06 Jul, 2020 | 17:38

Updated-04 Aug, 2024 | 21:17

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc macos windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-8249

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-8.30% / 91.90%

7 Day CHG~0.00%

Published-06 Jul, 2020 | 17:38

Updated-04 Aug, 2024 | 21:17

Product-acrobat_dc macos windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-30954

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 55.83%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos watchOS macOS iOS and iPadOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2024-30282

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.66%

7 Day CHG~0.00%

Published-16 May, 2024 | 08:59

Updated-02 Dec, 2024 | 17:48

Adobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability

Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows animate macos Animate animate

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-5330

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-29.61% / 96.45%

7 Day CHG~0.00%

Published-08 Aug, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vendor-n/a Apple Inc.VMware (Broadcom Inc.)Microsoft Corporation

Product-esxi workstation_player fusion workstation_pro tools windows mac_os_x n/a

CWE ID-CWE-426

Untrusted Search Path

CVE-2022-32924

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.46%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 04:16

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos watchos ipados tvos iphone_os macOS watchOS tvOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-32940

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.92%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 19:15

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-watchos tvos macos ipados iphone_os macOS tvOS watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27802

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 8.79%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos visionos macos visionOS iOS and iPadOS macOS tvOS macos iphone_os visionos ipad_os tv_os

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-27796

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.1||HIGH

EPSS-0.02% / 4.24%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges.

Vendor-Apple Inc.

Product-iphone_os macos ipados iOS and iPadOS macOS iphone_os macos ipad_os

CWE ID-CWE-1325

Improperly Controlled Sequential Memory Allocation

CVE-2010-0036

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.56% / 80.75%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-13493

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-8.8||HIGH

EPSS-0.34% / 55.75%

7 Day CHG~0.00%

Published-02 Dec, 2020 | 17:25

Updated-04 Aug, 2024 | 12:18

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file.

Vendor-pixar n/a Apple Inc.

Product-macos openusd Pixar

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-4324

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.89% / 99.76%

7 Day CHG~0.00%

Published-15 Dec, 2009 | 02:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.openSUSE

Product-linux_enterprise_debuginfo acrobat_reader mac_os_x opensuse acrobat windows linux_enterprise n/a Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2024-27826

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 21.69%

7 Day CHG~0.00%

Published-29 Jul, 2024 | 22:17

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.8, macOS Sonoma 14.5, macOS Monterey 12.7.6, watchOS 10.5, visionOS 1.3, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS watch_os macos iphone_os visionos ipad_os tv_os

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-27856

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.39%

7 Day CHG~0.00%

Published-15 Jan, 2025 | 19:35

Updated-14 Mar, 2025 | 13:42

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-tvos macos iphone_os safari visionos ipados watchos visionOS Safari tvOS iOS and iPadOS macOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27857

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.1||HIGH

EPSS-0.74% / 71.96%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:47

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos visionos macos visionOS iOS and iPadOS macOS tvOS ios ipados macos tvos visionos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27798

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.29%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-14 Mar, 2025 | 19:15

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.5. An attacker may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-863

Incorrect Authorization

CVE-2024-27822

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.4||HIGH

EPSS-0.07% / 20.35%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-13 Feb, 2025 | 17:46

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-277

Insecure Inherited Permissions

CVE-2024-27793

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.3||MEDIUM

EPSS-0.30% / 53.03%

7 Day CHG~0.00%

Published-08 May, 2024 | 22:15

Updated-26 Mar, 2025 | 14:15

The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iTunes for Windows itunes

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27811

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.09% / 26.57%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ios macos tvos visionos watchos ipad_os

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-27828

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7||HIGH

EPSS-0.06% / 17.63%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved memory handling. This issue is fixed in visionOS 1.2, watchOS 10.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados visionos visionOS iOS and iPadOS watchOS tvOS tvos iphone_os visionos watchos ipad_os

CWE ID-CWE-786

Access of Memory Location Before Start of Buffer

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CVE-2010-1297

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-93.62% / 99.83%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 18:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.openSUSE

Product-air windows opensuse acrobat linux_enterprise flash_player mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4302

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.32%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 19:48

Updated-05 Aug, 2024 | 05:11

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-4452

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.28%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:21

Updated-05 Aug, 2024 | 05:18

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CVE-2023-0976

Matching Score-8

Assigner-Trellix

Matching Score-8

Assigner-Trellix

CVSS Score-6.3||MEDIUM

EPSS-0.15% / 36.77%

7 Day CHG~0.00%

Published-07 Jun, 2023 | 07:35

Updated-06 Jan, 2025 | 21:05

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

Vendor-Apple Inc.Musarubra US LLC (Trellix)

Product-macos agent Trellix Agent

CWE ID-CWE-427

Uncontrolled Search Path Element

CVE-2018-4344

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.02%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-07-18||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Vendor-n/a Apple Inc.

Product-watchos tvos mac_os_x iphone_os iOS, macOS, tvOS, watchOS Multiple Products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-23244

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Mar, 2025 | 20:33

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4. An app from a standard user account may be able to escalate privilege after admin user login.

Vendor-Apple Inc.

Product-macos macOS macos

CVE-2024-23300

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.13%

7 Day CHG~0.00%

Published-12 Mar, 2024 | 20:33

Updated-13 Feb, 2025 | 17:39

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-garageband GarageBand garageband

CWE ID-CWE-416

Use After Free

CVE-2024-23276

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-19 Mar, 2025 | 16:15

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-23265

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.31%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Feb, 2025 | 17:39

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ios macos tvos visionos watchos ipad_os

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23294

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.18%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-29 Mar, 2025 | 00:15

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-20

Improper Input Validation

CVE-2024-23208

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-2.95% / 85.92%

7 Day CHG~0.00%

Published-23 Jan, 2024 | 00:25

Updated-04 Jun, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos tvos ipados watchos iOS and iPadOS macOS tvOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2025-54216

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.88%

7 Day CHG~0.00%

Published-12 Aug, 2025 | 21:01

Updated-14 Aug, 2025 | 03:55

InCopy | Out-of-bounds Write (CWE-787)

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-macos windows incopy InCopy

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23268

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.63%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Feb, 2025 | 17:39

An injection issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2024-23233

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.42%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-29 Mar, 2025 | 00:15

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-277

Insecure Inherited Permissions

CVE-2024-23286

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.11% / 77.26%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-13 Feb, 2025 | 17:39

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. Processing an image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ipados macos tvos iphone_os visionos watchos

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23258

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.30%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-13 Feb, 2025 | 17:34

An out-of-bounds read was addressed with improved input validation. This issue is fixed in visionOS 1.1, macOS Sonoma 14.4. Processing an image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-visionos macos visionOS macOS visionos macos

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-23270

Matching Score-8

Assigner-Apple Inc.