CVE Vulnerability Advisory Database

[Affected Scope] Systems running macOS Big Sur prior to 11.7, macOS Monterey prior to 12.6, iOS/iPadOS prior to 15.7, and iOS prior to 16

[Impact] A local attacker can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.6, Big Sur 11.7, iOS 15.7/16, iPadOS 15.7 or later)

[Affected Scope] Apple iOS devices prior to 15.6.1, iPadOS devices prior to 15.6.1, and macOS Monterey prior to 12.5.1.

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported.

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 15.6.1, macOS Monterey 12.5.1 or later) provided by Apple.

[Affected Scope] Apple devices running versions prior to iOS 15.6.1, iPadOS 15.6.1, macOS Monterey 12.5.1, and Safari 15.6.1

[Impact] Processing maliciously crafted web content may allow remote attackers to execute arbitrary code (RCE) and compromise the target system

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.6.1, macOS 12.5.1, Safari 15.6.1 or later)

[Affected Scope] Apple macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, iOS/iPadOS prior to 15.4.1, watchOS prior to 8.6, and tvOS prior to 15.5

[Impact] A local attacker can execute arbitrary code with kernel privileges via a malicious application, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (macOS 12.3.1, iOS 15.4.1, etc.) to all affected endpoints

[Affected Scope] macOS Monterey prior to 12.3.1, macOS Big Sur prior to 11.6.6, and macOS Catalina prior to Security Update 2022-004.

[Impact] A local attacker can exploit this vulnerability to read sensitive kernel memory, potentially leading to the disclosure of cryptographic keys, system credentials, or memory layouts.

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.3.1, Big Sur 11.6.6, or Security Update 2022-004 Catalina).

[Affected Scope] Systems running macOS Monterey prior to 12.2.1, iOS prior to 15.3.1, iPadOS prior to 15.3.1, and Safari prior to 15.3

[Impact] Processing maliciously crafted web content may lead to arbitrary remote code execution (RCE) on the target system, with active exploitation reported in the wild

[Mitigation] Immediately apply official Apple security updates to upgrade macOS, iOS, iPadOS, and Safari to the patched versions

[Affected Scope] Apple iOS versions prior to 15.3, iPadOS versions prior to 15.3, macOS Big Sur versions prior to 11.6.3, and macOS Monterey versions prior to 12.2

[Impact] A malicious application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerable kernel components

[Affected Scope] Apple macOS Big Sur prior to 11.5.1, iOS prior to 14.7.1, iPadOS prior to 14.7.1, and watchOS prior to 7.6.1

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official software updates provided by Apple to patch the affected systems

[Affected Scope] All Mac systems running macOS Big Sur versions prior to 11.4

[Impact] A local malicious application can bypass the Transparency, Consent, and Control (TCC) framework to access sensitive user data and hardware (camera, microphone, screen recording) without consent

[Mitigation] Immediately update macOS to Big Sur 11.4 or later to apply the official security patch

[Affected Scope] Apple WebKit engine in versions prior to iOS 14.5.1, iPadOS 14.5.1, macOS Big Sur 11.3.1, watchOS 7.4.1, and tvOS 14.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution, with active exploitation reported in the wild

[Mitigation] Immediately update Apple operating systems to the latest patched versions (iOS 14.5.1, macOS 11.3.1, or later) using official software update channels

[Affected Scope] Apple devices running versions prior to iOS 14.5, iPadOS 14.5, macOS Big Sur 11.3, tvOS 14.6, and Safari 14.1.1

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target device

[Mitigation] Immediately apply the official software updates provided by Apple (iOS 14.5.1, macOS 11.3.1, or later)

[Affected Scope] Systems running Safari prior to 14.1, iOS prior to 12.5.3, iOS/iPadOS prior to 14.5, watchOS prior to 7.4, tvOS prior to 14.5, and macOS Big Sur prior to 11.3

[Impact] Processing maliciously crafted web content may trigger a Use-After-Free vulnerability in the WebKit rendering engine, allowing remote attackers to execute arbitrary code on the target device. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] macOS Big Sur versions prior to 11.3, and macOS Catalina (without Security Update 2021-002)

[Impact] A malicious, unsigned, and unnotarized application can completely bypass Gatekeeper, File Quarantine, and Notarization checks, leading to arbitrary code execution without user warnings

[Mitigation] Immediately upgrade to macOS Big Sur 11.3 or later, or apply Security Update 2021-002 for macOS Catalina

[Affected Scope] Apple iOS before 14.8, iOS before 12.5.5, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2

[Impact] A sandboxed process or local attacker can bypass sandbox restrictions, escalate privileges, and gain unauthorized access to sensitive system resources

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.)

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Apple iOS and iPadOS prior to 15.0.2, macOS Monterey prior to 12.0.1, Big Sur prior to 11.6.1, tvOS prior to 15.1, and watchOS prior to 8.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise; active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.0.2 / macOS 12.0.1 or later)

[Affected Scope] Systems running iOS versions prior to 12.5.5, iOS/iPadOS versions prior to 14.4, macOS Big Sur prior to 11.2, and unpatched Catalina/Mojave systems

[Impact] A malicious application can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security patches provided by Apple to update the operating system to the latest version

[Affected Scope] Apple iOS before 14.8, iPadOS before 14.8, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2

[Impact] Processing a maliciously crafted PDF or image file can lead to arbitrary code execution without user interaction (Zero-Click), potentially resulting in complete device compromise

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] Apple WebKit-based browsers and applications running on iOS versions prior to 14.8, iPadOS versions prior to 14.8, and macOS Big Sur versions prior to 11.6

[Impact] Processing maliciously crafted web content may allow remote attackers to trigger a Use-After-Free condition, leading to arbitrary code execution (RCE) on the target system

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.8, macOS Big Sur 11.6, or later

[Affected Scope] Systems running iOS versions prior to 14.4, iPadOS versions prior to 14.4, macOS Big Sur versions prior to 11.2, and Catalina/Mojave without Security Update 2021-001

[Impact] A remote attacker can execute arbitrary code on the target system, and active exploitation in the wild has been reported

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later