CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability (CVE-2023-28206) Analysis and Mitigation Guide
[Affected Scope] iOS and iPadOS versions prior to 15.7.5 / 16.4.1, macOS Big Sur prior to 11.7.6, Monterey prior to 12.6.5, and Ventura prior to 13.3.1
[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise. This vulnerability is actively exploited in the wild
[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.4.1, macOS 13.3.1)
Apple iOS and iPadOS Kernel Out-of-Bounds Write Vulnerability (CVE-2021-30900) Technical Advisory
[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1
[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise
[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions
Apple iOS, iPadOS, and tvOS Kernel Privilege Escalation and Remote Code Execution Vulnerability (CVE-2020-9907)
[Affected Scope] Apple devices running iOS versions prior to 13.6, iPadOS versions prior to 13.6, and tvOS versions prior to 13.4.8
[Impact] A local application can exploit a memory corruption vulnerability to execute arbitrary code with kernel privileges
[Mitigation] Immediately update affected devices to iOS 13.6, iPadOS 13.6, tvOS 13.4.8 or later