CVE Vulnerability Advisory Database

[Affected Scope] Systems running macOS Big Sur prior to 11.7, macOS Monterey prior to 12.6, iOS/iPadOS prior to 15.7, and iOS prior to 16

[Impact] A local attacker can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.6, Big Sur 11.7, iOS 15.7/16, iPadOS 15.7 or later)

[Affected Scope] Apple iOS devices prior to 15.6.1, iPadOS devices prior to 15.6.1, and macOS Monterey prior to 12.5.1.

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported.

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 15.6.1, macOS Monterey 12.5.1 or later) provided by Apple.

[Affected Scope] Apple macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, iOS/iPadOS prior to 15.4.1, watchOS prior to 8.6, and tvOS prior to 15.5

[Impact] A local attacker can execute arbitrary code with kernel privileges via a malicious application, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (macOS 12.3.1, iOS 15.4.1, etc.) to all affected endpoints

[Affected Scope] Systems running macOS Monterey prior to 12.2.1, iOS prior to 15.3.1, iPadOS prior to 15.3.1, and Safari prior to 15.3

[Impact] Processing maliciously crafted web content may lead to arbitrary remote code execution (RCE) on the target system, with active exploitation reported in the wild

[Mitigation] Immediately apply official Apple security updates to upgrade macOS, iOS, iPadOS, and Safari to the patched versions

[Affected Scope] Apple iOS versions prior to 15.3, iPadOS versions prior to 15.3, macOS Big Sur versions prior to 11.6.3, and macOS Monterey versions prior to 12.2

[Impact] A malicious application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerable kernel components

[Affected Scope] Apple macOS Big Sur prior to 11.5.1, iOS prior to 14.7.1, iPadOS prior to 14.7.1, and watchOS prior to 7.6.1

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the affected systems

[Affected Scope] Apple devices running iOS versions prior to 12.5.3 (including iPhone 5s, iPhone 6, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation)

[Impact] Processing maliciously crafted web content may allow remote attackers to trigger a buffer overflow, leading to arbitrary code execution and complete device compromise

[Mitigation] Immediately update affected devices to iOS 12.5.3 or later to apply the official security patch

[Affected Scope] Apple WebKit engine in versions prior to iOS 14.5.1, iPadOS 14.5.1, macOS Big Sur 11.3.1, watchOS 7.4.1, and tvOS 14.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution, with active exploitation reported in the wild

[Mitigation] Immediately update Apple operating systems to the latest patched versions (iOS 14.5.1, macOS 11.3.1, or later) using official software update channels

[Affected Scope] Systems running Safari prior to 14.1, iOS prior to 12.5.3, iOS/iPadOS prior to 14.5, watchOS prior to 7.4, tvOS prior to 14.5, and macOS Big Sur prior to 11.3

[Impact] Processing maliciously crafted web content may trigger a Use-After-Free vulnerability in the WebKit rendering engine, allowing remote attackers to execute arbitrary code on the target device. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] Legacy Apple devices running iOS versions prior to 12.5.4 (including iPhone 5s, iPhone 6, iPad Air, iPad mini 2/3, and iPod touch 6th gen)

[Impact] Processing maliciously crafted web content may trigger a Use-After-Free condition, leading to arbitrary code execution (RCE) and potential device compromise

[Mitigation] Immediately update affected legacy iOS devices to version 12.5.4 or later, and restrict access to untrusted web links

[Affected Scope] Apple devices running iOS versions prior to 12.5.4 (including iPhone 5s, iPhone 6, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation)

[Impact] Processing maliciously crafted web content may allow remote attackers to trigger memory corruption and execute arbitrary code with system privileges

[Mitigation] Immediately update affected devices to iOS 12.5.4 or later to remediate the vulnerability

[Affected Scope] Apple iOS before 14.8, iOS before 12.5.5, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2

[Impact] A sandboxed process or local attacker can bypass sandbox restrictions, escalate privileges, and gain unauthorized access to sensitive system resources

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.)

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1

[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions

[Affected Scope] Apple iOS and iPadOS prior to 15.0.2, macOS Monterey prior to 12.0.1, Big Sur prior to 11.6.1, tvOS prior to 15.1, and watchOS prior to 8.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise; active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.0.2 / macOS 12.0.1 or later)

[Affected Scope] Systems running iOS versions prior to 12.5.5, iOS/iPadOS versions prior to 14.4, macOS Big Sur prior to 11.2, and unpatched Catalina/Mojave systems

[Impact] A malicious application can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security patches provided by Apple to update the operating system to the latest version

[Affected Scope] Apple iOS before 14.8, iPadOS before 14.8, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2

[Impact] Processing a maliciously crafted PDF or image file can lead to arbitrary code execution without user interaction (Zero-Click), potentially resulting in complete device compromise

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Apple WebKit-based browsers and applications running on iOS versions prior to 14.8, iPadOS versions prior to 14.8, and macOS Big Sur versions prior to 11.6

[Impact] Processing maliciously crafted web content may allow remote attackers to trigger a Use-After-Free condition, leading to arbitrary code execution (RCE) on the target system

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.8, macOS Big Sur 11.6, or later

[Affected Scope] Apple devices running iOS versions prior to 12.5.2, iOS versions prior to 14.4.2, iPadOS versions prior to 14.4.2, and watchOS versions prior to 7.3.3

[Impact] Processing maliciously crafted web content can bypass the Same-Origin Policy (SOP), leading to Universal Cross-Site Scripting (UXSS) and arbitrary script execution, which has been actively exploited in the wild

[Mitigation] Immediately update affected devices to the patched versions: iOS 12.5.2, iOS 14.4.2, iPadOS 14.4.2, watchOS 7.3.3, or later

[Affected Scope] Systems running iOS versions prior to 14.4, iPadOS versions prior to 14.4, macOS Big Sur versions prior to 11.2, and Catalina/Mojave without Security Update 2021-001

[Impact] A remote attacker can execute arbitrary code on the target system, and active exploitation in the wild has been reported

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later