CVE Vulnerability Advisory Database

[Affected Scope] All Apple devices running versions prior to iOS 18.7.11/26.7.1 and macOS Sequoia 15.8.1/Tahoe 26.7.1.

[Impact] Processing a maliciously crafted file can lead to arbitrary code execution with system privileges, resulting in full device compromise.

[Mitigation] Immediately apply the latest security patches provided by Apple (e.g., iOS 18.7.11, macOS 15.8.1) and restart the device.

[Affected Scope] Apple devices running iOS before 26.3, iPadOS before 26.3, macOS Tahoe before 26.3, tvOS before 26.3, visionOS before 26.3, and watchOS before 26.3

[Impact] An attacker with local memory write capabilities can exploit this vulnerability to execute arbitrary code with elevated privileges, potentially compromising the entire system

[Mitigation] Apply the official software updates immediately to upgrade systems to version 26.3 or later

[Affected Scope] Apple devices running iOS/iPadOS prior to 18.7.3 and 26.2, macOS Tahoe prior to 26.2, and Safari prior to 26.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), with active exploitation reported in highly targeted attacks

[Mitigation] Immediately apply the official security updates (version 26.2 / 18.7.3 or later) provided by Apple

[Affected Scope] Apple operating systems prior to iOS 18.7.2, macOS Sequoia 15.7.2, and other legacy versions

[Impact] A local malicious application can trigger unexpected system termination or write directly to kernel memory, potentially leading to privilege escalation

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.7.2, macOS 15.7.2, etc.)

[Affected Scope] Apple devices running versions prior to iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, and macOS Sonoma 14.8.2

[Impact] A malicious local application can exploit lock state validation flaws to corrupt shared memory, leading to privilege escalation and arbitrary code execution

[Mitigation] Immediately apply the official Apple security updates to transition to patched OS versions

[Affected Scope] macOS Ventura prior to 13.5, iOS/iPadOS prior to 16.6, iOS/iPadOS prior to 15.8.7, and Safari prior to 16.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade operating systems and Safari to the patched versions

[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services

[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services

[Affected Scope] WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS prior to v2.25.21.78, and WhatsApp for Mac prior to v2.25.21.78

[Impact] Unrelated attackers can bypass authorization to trigger the processing of arbitrary URL content on target devices, potentially leading to full device compromise when chained with OS-level exploits

[Mitigation] Immediately update WhatsApp and WhatsApp Business to the latest secure versions via the App Store and apply pending Apple OS security patches

[Affected Scope] Apple devices running iOS/iPadOS versions prior to 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, or macOS versions prior to Sequoia 15.6.1, Sonoma 14.7.8, and Ventura 13.7.8

[Impact] Processing a maliciously crafted image file may lead to memory corruption, allowing remote attackers to execute arbitrary code or gain full system control without user interaction

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.8.5, 16.7.12, 18.6.2, iPadOS 17.7.10, macOS 15.6.1, etc.)

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)

[Affected Scope] Apple operating systems including iOS 15/16/17/18, iPadOS 15/16/17/18, macOS Ventura/Sonoma/Sequoia, visionOS, and watchOS

[Impact] A logic issue in processing maliciously crafted photos or videos shared via iCloud Links allows unauthorized data access and modification, with active exploitation observed in highly targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple (e.g., iOS 18.3.1, macOS 15.3.1) and exercise caution when opening untrusted iCloud shared links

[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1

[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability

[Affected Scope] Apple iPhone and iPad devices running iOS/iPadOS versions prior to 15.8.4, 16.7.11, 17.7.5, or 18.3.1

[Impact] A physical attacker can disable USB Restricted Mode on a locked device, potentially allowing unauthorized data extraction and forensic access

[Mitigation] Immediately update all affected devices to iOS/iPadOS 15.8.4, 16.7.11, 17.7.5, 18.3.1 or later

[Affected Scope] Apple operating systems prior to iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and other legacy versions

[Impact] A malicious application can exploit a Use-After-Free vulnerability to elevate privileges to system/kernel level and execute arbitrary code

[Mitigation] Immediately upgrade all affected Apple devices to the latest patched versions (iOS 18.3, macOS 15.3, etc.) via official software update channels

[Affected Scope] Apple devices running Safari prior to 18.1.1, iOS/iPadOS 17/18, macOS Sequoia, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete device compromise

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.1.1, macOS 15.1.1, etc.)

[Affected Scope] Apple OS versions prior to iOS 17.5, macOS Sonoma 14.5, and Safari 17.5.

[Impact] An attacker with existing read/write capabilities can bypass PAC to gain full system control or execute arbitrary code.

[Mitigation] Immediately update to the latest OS versions (iOS 17.5, macOS 14.5, etc.) provided by Apple.

[Affected Scope] iOS and iPadOS prior to 16.7.8 / 17.4, macOS Monterey prior to 12.7.6, macOS Ventura prior to 13.6.7, macOS Sonoma prior to 14.4, and other Apple OS platforms

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass critical kernel memory protections, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 17.4, macOS Sonoma 14.4, etc.) to all affected devices

[Affected Scope] Apple devices running iOS/iPadOS prior to 16.7.6 or 17.4, macOS Monterey prior to 12.7.4, Ventura prior to 13.6.5, Sonoma prior to 14.4, watchOS prior to 10.4, tvOS prior to 17.4, and visionOS prior to 1.1

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass kernel memory protections, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched versions (e.g., iOS 17.4, macOS Sonoma 14.4)

[Affected Scope] Apple devices running iOS and iPadOS versions prior to 17, or iOS and iPadOS versions prior to 15.8.7

[Impact] A local malicious application can exploit a Use-After-Free vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 17, iOS 15.8.7, or later versions