ByteOS

Product

tvOS

Versions

Affected

From unspecified before 18.4 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 18.4 (custom)

Vendor

Product

iPadOS

Versions

Affected

From unspecified before 17.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 15.4 (custom)

Vendor

Product

visionOS

Versions

Affected

From unspecified before 2.4 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 14.7 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 13.7 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Processing a maliciously crafted file may lead to arbitrary code execution

Type: N/A

CWE ID: N/A

Description: Processing a maliciously crafted file may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/en-us/122377	N/A
https://support.apple.com/en-us/122371	N/A
https://support.apple.com/en-us/122372	N/A
https://support.apple.com/en-us/122373	N/A
https://support.apple.com/en-us/122378	N/A
https://support.apple.com/en-us/122374	N/A
https://support.apple.com/en-us/122375	N/A

Hyperlink: https://support.apple.com/en-us/122377

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122371

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122372

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122373

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122378

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122374

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122375

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:31 Mar, 2025 | 23:15

Updated At:04 Apr, 2025 | 17:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 17.7.6(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 18.0(inclusive) to 18.4(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 18.4(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.7.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 14.0(inclusive) to 14.7.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 15.0(inclusive) to 15.4(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 18.4(exclusive)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

>>visionos>>Versions before 2.4(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-94	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-94

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/122371	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122372	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122373	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122374	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122375	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122377	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/122378	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122371

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122372

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122373

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122374

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122375

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122377

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122378

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

1598Records found

CVE-2022-32924

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.46%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 04:16

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos watchos ipados tvos iphone_os macOS watchOS tvOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27856

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.39%

7 Day CHG~0.00%

Published-15 Jan, 2025 | 19:35

Updated-14 Mar, 2025 | 13:42

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-tvos macos iphone_os safari visionos ipados watchos visionOS Safari tvOS iOS and iPadOS macOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-27857

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.1||HIGH

EPSS-0.74% / 71.96%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:47

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos visionos macos visionOS iOS and iPadOS macOS tvOS ios ipados macos tvos visionos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27793

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.3||MEDIUM

EPSS-0.30% / 53.03%

7 Day CHG~0.00%

Published-08 May, 2024 | 22:15

Updated-26 Mar, 2025 | 14:15

The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iTunes for Windows itunes

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-23208

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-2.95% / 85.92%

7 Day CHG~0.00%

Published-23 Jan, 2024 | 00:25

Updated-04 Jun, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos tvos ipados watchos iOS and iPadOS macOS tvOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-41984

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 13.68%

7 Day CHG~0.00%

Published-26 Sep, 2023 | 20:14

Updated-13 Feb, 2025 | 17:09

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos iOS and iPadOS macOS tvOS watchOS ios_and_ipados watchos macos tvos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2025-24159

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.00%

7 Day CHG+0.01%

Published-27 Jan, 2025 | 21:45

Updated-19 Mar, 2025 | 14:15

A validation issue was addressed with improved logic. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-watchos iphone_os macos tvos visionos ipados macOS iPadOS iOS and iPadOS tvOS visionOS watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-54529

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.21%

7 Day CHG~0.00%

Published-11 Dec, 2024 | 22:58

Updated-24 Jan, 2025 | 04:55

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-32897

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.1||HIGH

EPSS-0.42% / 61.09%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 19:21

Updated-03 Aug, 2024 | 07:54

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-32418

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 23.36%

7 Day CHG~0.00%

Published-27 Jul, 2023 | 00:31

Updated-23 Oct, 2024 | 14:35

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-32383

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 37.14%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-20 Jun, 2025 | 16:15

This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed in macOS Monterey 12.6.6, macOS Big Sur 11.7.7, macOS Ventura 13.4. An app may be able to inject code into sensitive binaries bundled with Xcode.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0014

Matching Score-10

Assigner-Microsoft Corporation

Matching Score-10

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-48.81% / 97.68%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Vendor-n/a Microsoft Corporation Apple Inc.

Product-.net_framework windows windows_7 windows_xp windows_server_2008 windows_server_2003 silverlight windows_vista mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1535

Matching Score-10

Assigner-MITRE Corporation

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.Red Hat, Inc.openSUSE Linux Kernel Organization, Inc

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-92.30% / 99.71%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 10:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Product-enterprise_linux_desktop flash_player windows enterprise_linux_workstation opensuse mac_os_x linux_enterprise_desktop linux_kernel enterprise_linux_server n/a Flash Player

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-30282

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.66%

7 Day CHG~0.00%

Published-16 May, 2024 | 08:59

Updated-02 Dec, 2024 | 17:48

Adobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability

Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows animate macos Animate animate

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-5330

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-29.61% / 96.45%

7 Day CHG~0.00%

Published-08 Aug, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vendor-n/a Apple Inc.VMware (Broadcom Inc.)Microsoft Corporation

Product-esxi workstation_player fusion workstation_pro tools windows mac_os_x n/a

CWE ID-CWE-426

Untrusted Search Path

CVE-2022-32940

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.92%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 19:15

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-watchos tvos macos ipados iphone_os macOS tvOS watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27802

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 8.79%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados tvos visionos macos visionOS iOS and iPadOS macOS tvOS macos iphone_os visionos ipad_os tv_os

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-27796

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.1||HIGH

EPSS-0.02% / 4.24%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to elevate privileges.

Vendor-Apple Inc.

Product-iphone_os macos ipados iOS and iPadOS macOS iphone_os macos ipad_os

CWE ID-CWE-1325

Improperly Controlled Sequential Memory Allocation

CVE-2010-0036

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.56% / 80.75%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-13493

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-8.8||HIGH

EPSS-0.34% / 55.75%

7 Day CHG~0.00%

Published-02 Dec, 2020 | 17:25

Updated-04 Aug, 2024 | 12:18

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file.

Vendor-pixar n/a Apple Inc.

Product-macos openusd Pixar

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-4324

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.89% / 99.76%

7 Day CHG~0.00%

Published-15 Dec, 2009 | 02:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.openSUSE

Product-linux_enterprise_debuginfo acrobat_reader mac_os_x opensuse acrobat windows linux_enterprise n/a Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2024-27826

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 21.69%

7 Day CHG~0.00%

Published-29 Jul, 2024 | 22:17

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.8, macOS Sonoma 14.5, macOS Monterey 12.7.6, watchOS 10.5, visionOS 1.3, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS watch_os macos iphone_os visionos ipad_os tv_os

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-27798

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.29%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-14 Mar, 2025 | 19:15

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.5. An attacker may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-863

Incorrect Authorization

CVE-2024-27822

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.4||HIGH

EPSS-0.07% / 20.35%

7 Day CHG~0.00%

Published-13 May, 2024 | 23:00

Updated-13 Feb, 2025 | 17:46

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-277

Insecure Inherited Permissions

CVE-2024-27811

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.09% / 26.57%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ios macos tvos visionos watchos ipad_os

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-27828

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7||HIGH

EPSS-0.06% / 17.63%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved memory handling. This issue is fixed in visionOS 1.2, watchOS 10.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados visionos visionOS iOS and iPadOS watchOS tvOS tvos iphone_os visionos watchos ipad_os

CWE ID-CWE-786

Access of Memory Location Before Start of Buffer

CWE ID-CWE-788

Access of Memory Location After End of Buffer

CVE-2010-1297

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-93.62% / 99.83%

7 Day CHG~0.00%

Published-08 Jun, 2010 | 18:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Vendor-n/a Adobe Inc.Microsoft Corporation SUSE Apple Inc.openSUSE

Product-air windows opensuse acrobat linux_enterprise flash_player mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4302

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.32%

7 Day CHG~0.00%

Published-23 Dec, 2021 | 19:48

Updated-05 Aug, 2024 | 05:11

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2018-4452

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.28%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:21

Updated-05 Aug, 2024 | 05:18

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra, macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CVE-2023-0976

Matching Score-8

Assigner-Trellix

Matching Score-8

Assigner-Trellix

CVSS Score-6.3||MEDIUM

EPSS-0.15% / 36.77%

7 Day CHG~0.00%

Published-07 Jun, 2023 | 07:35

Updated-06 Jan, 2025 | 21:05

A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature located in the System Tree.

Vendor-Apple Inc.Musarubra US LLC (Trellix)

Product-macos agent Trellix Agent

CWE ID-CWE-427

Uncontrolled Search Path Element

CVE-2018-4344

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.02%

7 Day CHG~0.00%

Published-03 Apr, 2019 | 17:43

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-07-18||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Vendor-n/a Apple Inc.

Product-watchos tvos mac_os_x iphone_os iOS, macOS, tvOS, watchOS Multiple Products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-23244

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Mar, 2025 | 20:33

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4. An app from a standard user account may be able to escalate privilege after admin user login.

Vendor-Apple Inc.

Product-macos macOS macos

CVE-2024-23300

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.13%

7 Day CHG~0.00%

Published-12 Mar, 2024 | 20:33

Updated-13 Feb, 2025 | 17:39

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-garageband GarageBand garageband

CWE ID-CWE-416

Use After Free

CVE-2024-23276

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.54%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-19 Mar, 2025 | 16:15

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-269

Improper Privilege Management

CVE-2024-23265

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.31%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Feb, 2025 | 17:39

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ios macos tvos visionos watchos ipad_os

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23294

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.18%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-29 Mar, 2025 | 00:15

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.4. Processing malicious input may lead to code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54216

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.88%

7 Day CHG~0.00%

Published-12 Aug, 2025 | 21:01

Updated-14 Aug, 2025 | 03:55

InCopy | Out-of-bounds Write (CWE-787)

InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-macos windows incopy InCopy

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23268

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.63%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-13 Feb, 2025 | 17:39

An injection issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2024-23233

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.42%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-29 Mar, 2025 | 00:15

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-277

Insecure Inherited Permissions

CVE-2024-23286

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.11% / 77.26%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-13 Feb, 2025 | 17:39

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. Processing an image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos visionos macos visionOS iOS and iPadOS tvOS macOS watchOS ipados macos tvos iphone_os visionos watchos

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23258

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.30%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-13 Feb, 2025 | 17:34

An out-of-bounds read was addressed with improved input validation. This issue is fixed in visionOS 1.1, macOS Sonoma 14.4. Processing an image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-visionos macos visionOS macOS visionos macos

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-23270

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.07%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-27 Mar, 2025 | 20:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, tvOS 17.4. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipad_os macos tvos iOS and iPadOS macOS tvOS macos iphone_os ipad_os tvos

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23274

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.63%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-13 Feb, 2025 | 17:39

An injection issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to elevate privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2022-47965

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.34%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-20 Jun, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-23247

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.18%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-26 Mar, 2025 | 20:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. Processing a file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2022-47915

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.34%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-20 Jun, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-54209

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.67%

7 Day CHG~0.00%

Published-12 Aug, 2025 | 20:54

Updated-14 Aug, 2025 | 03:55

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

InDesign Desktop versions 20.4, 19.5.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-macos windows indesign InDesign Desktop

CWE ID-CWE-122

Heap-based Buffer Overflow

CVE-2024-20727

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.75% / 72.20%

7 Day CHG~0.00%

Published-15 Feb, 2024 | 12:18

Updated-01 Aug, 2024 | 21:59

[TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader acrobat_reader acrobat_reader_dc

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20739

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.13% / 33.26%

7 Day CHG~0.00%

Published-15 Feb, 2024 | 12:26

Updated-06 Dec, 2024 | 14:57

ZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Product-windows audition macos Audition audition

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-20772

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.25%

7 Day CHG~0.00%

Published-10 Apr, 2024 | 13:02

Updated-05 Dec, 2024 | 15:00

Adobe Media Encoder 2024 AI file parsing Stack based buffer overflow

Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.