Vulnerabilities and malware affecting Apple's platforms — macOS, iOS, iPadOS, and Safari — including PAM-abusing stealers, cross-platform RATs, and the Mac-native malware families that have moved from novelty to fixture in enterprise threat models. Combined article + CVE feed for the Apple beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2014-4404/https://0daynews.com/cve/cve-2014-4404/Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2015-1130/https://0daynews.com/cve/cve-2015-1130/The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2016-4655/https://0daynews.com/cve/cve-2016-4655/The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2016-4656/https://0daynews.com/cve/cve-2016-4656/A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2016-4657/https://0daynews.com/cve/cve-2016-4657/Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2018-4344/https://0daynews.com/cve/cve-2018-4344/Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-6223/https://0daynews.com/cve/cve-2019-6223/Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-7286/https://0daynews.com/cve/cve-2019-7286/Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-7287/https://0daynews.com/cve/cve-2019-7287/Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-8506/https://0daynews.com/cve/cve-2019-8506/A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-8526/https://0daynews.com/cve/cve-2019-8526/Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2019-8605/https://0daynews.com/cve/cve-2019-8605/A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-27930/https://0daynews.com/cve/cve-2020-27930/Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-27932/https://0daynews.com/cve/cve-2020-27932/Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-27950/https://0daynews.com/cve/cve-2020-27950/Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2020-3837/https://0daynews.com/cve/cve-2020-3837/Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-9818/https://0daynews.com/cve/cve-2020-9818/Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-9819/https://0daynews.com/cve/cve-2020-9819/Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2020-9859/https://0daynews.com/cve/cve-2020-9859/Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-9907/https://0daynews.com/cve/cve-2020-9907/Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2020-9934/https://0daynews.com/cve/cve-2020-9934/Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2021-1782/https://0daynews.com/cve/cve-2021-1782/Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-1789/https://0daynews.com/cve/cve-2021-1789/A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-1870/https://0daynews.com/cve/cve-2021-1870/Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2021-1871/https://0daynews.com/cve/cve-2021-1871/Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2021-1879/https://0daynews.com/cve/cve-2021-1879/Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2021-30657/https://0daynews.com/cve/cve-2021-30657/Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2021-30661/https://0daynews.com/cve/cve-2021-30661/Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30663/https://0daynews.com/cve/cve-2021-30663/Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30665/https://0daynews.com/cve/cve-2021-30665/Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30666/https://0daynews.com/cve/cve-2021-30666/Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30713/https://0daynews.com/cve/cve-2021-30713/Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30761/https://0daynews.com/cve/cve-2021-30761/Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30762/https://0daynews.com/cve/cve-2021-30762/Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30807/https://0daynews.com/cve/cve-2021-30807/Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30858/https://0daynews.com/cve/cve-2021-30858/Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30860/https://0daynews.com/cve/cve-2021-30860/Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30869/https://0daynews.com/cve/cve-2021-30869/Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30883/https://0daynews.com/cve/cve-2021-30883/Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30900/https://0daynews.com/cve/cve-2021-30900/Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30952/https://0daynews.com/cve/cve-2021-30952/Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-30983/https://0daynews.com/cve/cve-2021-30983/Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2021-31010/https://0daynews.com/cve/cve-2021-31010/In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-22587/https://0daynews.com/cve/cve-2022-22587/Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2022-22620/https://0daynews.com/cve/cve-2022-22620/Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-22674/https://0daynews.com/cve/cve-2022-22674/macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2022-22675/https://0daynews.com/cve/cve-2022-22675/macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-32893/https://0daynews.com/cve/cve-2022-32893/Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-32894/https://0daynews.com/cve/cve-2022-32894/Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-32917/https://0daynews.com/cve/cve-2022-32917/Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-42827/https://0daynews.com/cve/cve-2022-42827/Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-42856/https://0daynews.com/cve/cve-2022-42856/Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-48503/https://0daynews.com/cve/cve-2022-48503/Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2022-48618/https://0daynews.com/cve/cve-2022-48618/Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-23529/https://0daynews.com/cve/cve-2023-23529/Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-28204/https://0daynews.com/cve/cve-2023-28204/Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2023-28205/https://0daynews.com/cve/cve-2023-28205/Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-28206/https://0daynews.com/cve/cve-2023-28206/Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-32373/https://0daynews.com/cve/cve-2023-32373/Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-32409/https://0daynews.com/cve/cve-2023-32409/Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-32434/https://0daynews.com/cve/cve-2023-32434/Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-32435/https://0daynews.com/cve/cve-2023-32435/Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-32439/https://0daynews.com/cve/cve-2023-32439/Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-37450/https://0daynews.com/cve/cve-2023-37450/Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-38606/https://0daynews.com/cve/cve-2023-38606/Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2023-41061/https://0daynews.com/cve/cve-2023-41061/Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-41064/https://0daynews.com/cve/cve-2023-41064/Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-41974/https://0daynews.com/cve/cve-2023-41974/Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-41990/https://0daynews.com/cve/cve-2023-41990/Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-41991/https://0daynews.com/cve/cve-2023-41991/Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2023-41992/https://0daynews.com/cve/cve-2023-41992/Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-41993/https://0daynews.com/cve/cve-2023-41993/Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-42824/https://0daynews.com/cve/cve-2023-42824/Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-42916/https://0daynews.com/cve/cve-2023-42916/Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2023-42917/https://0daynews.com/cve/cve-2023-42917/Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2023-43000/https://0daynews.com/cve/cve-2023-43000/Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-23222/https://0daynews.com/cve/cve-2024-23222/Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-23225/https://0daynews.com/cve/cve-2024-23225/Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-23296/https://0daynews.com/cve/cve-2024-23296/Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-27822/https://0daynews.com/cve/cve-2024-27822/macOS PackageKit runs PKG-installer shebang scripts under root, and zsh shebangs source ~/.zshenv from the calling user's home before the script body runs, yielding local privilege escalation. Fixed in macOS Sonoma 14.5 (May 2024).Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-44308/https://0daynews.com/cve/cve-2024-44308/Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2024-44309/https://0daynews.com/cve/cve-2024-44309/Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2025-24085/https://0daynews.com/cve/cve-2025-24085/Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2025-24200/https://0daynews.com/cve/cve-2025-24200/Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2025-24201/https://0daynews.com/cve/cve-2025-24201/Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2025-31200/https://0daynews.com/cve/cve-2025-31200/Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2025-31201/https://0daynews.com/cve/cve-2025-31201/Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2025-31277/https://0daynews.com/cve/cve-2025-31277/Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2025-43200/https://0daynews.com/cve/cve-2025-43200/Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2025-43300/https://0daynews.com/cve/cve-2025-43300/Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/cve/cve-2025-43510/https://0daynews.com/cve/cve-2025-43510/Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2025-43520/https://0daynews.com/cve/cve-2025-43520/Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory.Thu, 03 Sep 2026 00:00:00 GMTApplemediumcvehttps://0daynews.com/cve/cve-2025-43529/https://0daynews.com/cve/cve-2025-43529/Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2026-20700/https://0daynews.com/cve/cve-2026-20700/Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.Thu, 03 Sep 2026 00:00:00 GMTApplehighcvehttps://0daynews.com/cve/cve-2026-65400/https://0daynews.com/cve/cve-2026-65400/Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials.Thu, 03 Sep 2026 00:00:00 GMTApplecriticalcvehttps://0daynews.com/articles/2026-08-19-apple-ios-ipados-macos-tahoe-27-vulns-patch/https://0daynews.com/articles/2026-08-19-apple-ios-ipados-macos-tahoe-27-vulns-patch/Apple released updates fixing 27 vulnerabilities across iOS, iPadOS, and macOS Tahoe. One image-processing flaw carries code execution risk — patch this week, not next.Wed, 19 Aug 2026 02:15:00 GMTApplearticlehttps://0daynews.com/articles/2026-08-17-apple-ios-macos-108-vulnerabilities-patched/https://0daynews.com/articles/2026-08-17-apple-ios-macos-108-vulnerabilities-patched/Apple's August 17 patch for iOS/iPadOS (versions 26 and 18) and macOS 26 closes 108 vulnerabilities across the full platform stack. Update devices now.Mon, 17 Aug 2026 21:30:00 GMTApplearticlehttps://0daynews.com/articles/2026-08-14-amnesiastealer-macos-clickfix-browser-hijack/https://0daynews.com/articles/2026-08-14-amnesiastealer-macos-clickfix-browser-hijack/Jamf finds AmnesiaStealer: macOS infostealer that hijacks live browser sessions, steals keychain data, and destroys saved passwords via ClickFix terminal prompts.Fri, 14 Aug 2026 18:00:00 GMTApplearticlehttps://0daynews.com/articles/2026-08-14-macos-screen-sharing-auth-bypass-exploited/https://0daynews.com/articles/2026-08-14-macos-screen-sharing-auth-bypass-exploited/Netherlands NCSC confirms active exploitation of a macOS Screen Sharing authentication bypass after public PoC release. Attackers deploying Monero cryptocurrency miners.Fri, 14 Aug 2026 18:00:00 GMTApplearticlehttps://0daynews.com/articles/2026-08-14-apple-mercenary-spyware-threat-notifications/https://0daynews.com/articles/2026-08-14-apple-mercenary-spyware-threat-notifications/Apple issued Threat Notifications to iPhone users warning of active mercenary spyware attacks. If you received one, here is what to do immediately.Fri, 14 Aug 2026 02:00:00 GMTApplearticlehttps://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/https://0daynews.com/articles/2026-07-27-apple-app-store-fake-sparrow-wallet-1-8m-bitcoin-lawsuit/Three plaintiffs are suing Apple after a fake Sparrow Wallet impersonator on the App Store harvested their seed phrases and drained $1.8 million in Bitcoin.Mon, 27 Jul 2026 19:00:00 GMTApplearticlehttps://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/https://0daynews.com/articles/2026-07-21-apple-hide-my-email-mail-logs-july3-fix-year-disclosure/Apple deployed a July 3 fix for a Hide My Email flaw that unmasked real addresses in Mail logs — disclosed to Apple over a year earlier per 404 Media.Tue, 21 Jul 2026 20:15:00 GMTApplearticlehttps://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/https://0daynews.com/articles/2026-07-13-jamf-crashstealer-werkbit-notarized-macos-stealer/Jamf flagged CrashStealer, a native-C++ macOS infostealer arriving inside Werkbit.app — Apple-notarized and gated behind a meeting PIN.Mon, 13 Jul 2026 20:00:00 GMTApplearticle