Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2021-30665 | not reported | — | Listed | Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing ma... | — |
| CVE-2021-30657 | not reported | — | Listed | Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks. | — |
| CVE-2021-30713 | not reported | — | Listed | Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to by... | — |
| CVE-2021-30666 | not reported | — | Listed | Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This... | — |
| CVE-2021-30661 | not reported | — | Listed | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when... | — |
| CVE-2021-1879 | not reported | — | Listed | Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when process... | — |
| CVE-2021-1871 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerabi... | — |
| CVE-2021-1870 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerabi... | — |
| CVE-2021-1782 | not reported | — | Listed | Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privile... | — |
| CVE-2021-30762 | not reported | — | Listed | Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This... | — |
| CVE-2020-9819 | not reported | — | Listed | Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously... | — |
| CVE-2020-9818 | not reported | — | Listed | Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termina... | — |
| CVE-2020-27932 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with ker... | — |
| CVE-2020-27950 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kerne... | — |
| CVE-2021-30807 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execut... | — |
| CVE-2020-27930 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processin... | — |
| CVE-2021-30860 | not reported | — | Listed | Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing... | — |
| CVE-2019-6223 | not reported | — | Listed | Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to... | — |
| CVE-2021-30858 | not reported | — | Listed | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted... | — |
| CVE-2018-11776 | not reported | — | Listed | Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespa... | — |