CVE Vulnerability Advisory Database

[Affected Scope] Apple devices running iOS before 26.3, iPadOS before 26.3, macOS Tahoe before 26.3, tvOS before 26.3, visionOS before 26.3, and watchOS before 26.3

[Impact] An attacker with local memory write capabilities can exploit this vulnerability to execute arbitrary code with elevated privileges, potentially compromising the entire system

[Mitigation] Apply the official software updates immediately to upgrade systems to version 26.3 or later

[Affected Scope] Apple devices running Safari prior to 18.1.1, iOS/iPadOS 17/18, macOS Sequoia, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete device compromise

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.1.1, macOS 15.1.1, etc.)

[Affected Scope] Adobe Acrobat and Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier), and 20.005.30514 (and earlier)

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official security patches provided by Adobe and restrict opening untrusted PDF documents

[Affected Scope] Apple iOS/iPadOS prior to 15.7.8 and 16.3, macOS Monterey prior to 12.6.8, macOS Big Sur prior to 11.7.9, macOS Ventura prior to 13.2, tvOS prior to 16.3, and watchOS prior to 9.3

[Impact] Processing a maliciously crafted font file may lead to arbitrary code execution (RCE) with system privileges, and active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched OS versions (iOS 15.7.8 / 16.3, macOS 12.6.8 / 11.7.9 / 13.2 or later)

[Affected Scope] Apple iOS devices prior to 16.6.1, iPadOS devices prior to 16.6.1, and watchOS devices prior to 9.6.2

[Impact] A maliciously crafted attachment can bypass validation logic, allowing attackers to execute arbitrary code with system privileges without user interaction

[Mitigation] Immediately update affected devices to iOS 16.6.1, iPadOS 16.6.1, watchOS 9.6.2, or later versions

[Affected Scope] Apple iOS/iPadOS prior to 15.6, macOS Monterey prior to 12.5, Safari prior to 15.6, watchOS prior to 8.7, and tvOS prior to 15.6

[Impact] Processing maliciously crafted web content may allow remote attackers to execute arbitrary code on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to patched versions

[Affected Scope] iOS versions prior to 15.7.7 and 16.4, iPadOS prior to 15.7.7 and 16.4, macOS Ventura prior to 13.3, and Safari prior to 16.4

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete system compromise

[Mitigation] Immediately apply official Apple software updates to secure versions (iOS 15.7.7/16.4, macOS Ventura 13.3, etc.)

[Affected Scope] Adobe Acrobat and Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier)

[Impact] Successful exploitation could lead to arbitrary code execution in the context of the current user when a victim opens a crafted malicious PDF

[Mitigation] Immediately apply the official Adobe security patches to upgrade to the latest secure versions

[Affected Scope] Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier

[Impact] Successful exploitation of this Use-After-Free vulnerability allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted PDF file

[Mitigation] Immediately apply the official Adobe security patch (APSB20-48) and restrict opening PDF files from untrusted sources