| CVE-2024-23225 Known exploited | High 7.8 | A memory corruption issue was addressed with improved validation. Assigned by apple | Mar 5, 2024 |
| CVE-2024-23222 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Jan 23, 2024 |
| CVE-2023-41974 Known exploited | High 7.8 | A use-after-free issue was addressed with improved memory management. Assigned by apple | Jan 10, 2024 |
| CVE-2022-48618 Known exploited | High 7.0 | The issue was addressed with improved checks. Assigned by apple | Jan 9, 2024 |
| CVE-2023-45866 | Medium 6.3 | Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting inject… | Dec 8, 2023 |
| CVE-2023-42917 Known exploited | High 8.8 | A memory corruption vulnerability was addressed with improved locking. Assigned by apple | Nov 30, 2023 |
| CVE-2023-42916 Known exploited | Medium 6.5 | An out-of-bounds read was addressed with improved input validation. Assigned by apple | Nov 30, 2023 |
| CVE-2023-42824 Known exploited | High 7.8 | The issue was addressed with improved checks. Assigned by apple | Oct 4, 2023 |
| CVE-2023-5217 Known exploited | High 8.8 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Sep 28, 2023 |
| CVE-2023-41074 | High 8.8 | The issue was addressed with improved checks. | Sep 27, 2023 |
| CVE-2023-41993 Known exploited | High 8.8 | The issue was addressed with improved checks. Assigned by apple | Sep 21, 2023 |
| CVE-2023-41992 Known exploited | High 7.8 | The issue was addressed with improved checks. Assigned by apple | Sep 21, 2023 |
| CVE-2023-41991 Known exploited | Medium 5.5 | A certificate validation issue was addressed. Assigned by apple | Sep 21, 2023 |
| CVE-2023-41990 Known exploited | High 7.8 | The issue was addressed with improved handling of caches. Assigned by apple | Sep 11, 2023 |
| CVE-2023-41064 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 7, 2023 |
| CVE-2023-41061 Known exploited | High 7.8 | A validation issue was addressed with improved logic. Assigned by apple | Sep 7, 2023 |
| CVE-2022-48503 Known exploited | High 8.8 | The issue was addressed with improved bounds checks. Assigned by apple | Aug 14, 2023 |
| CVE-2023-38606 Known exploited | Medium 5.5 | This issue was addressed with improved state management. Assigned by apple | Jul 26, 2023 |
| CVE-2023-37450 Known exploited | High 8.8 | The issue was addressed with improved checks. Assigned by apple | Jul 26, 2023 |
| CVE-2023-32439 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32435 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32434 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32409 Known exploited | High 8.6 | The issue was addressed with improved bounds checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32373 Known exploited | High 8.8 | A use-after-free issue was addressed with improved memory management. Assigned by apple | Jun 23, 2023 |
| CVE-2023-28204 Known exploited | Medium 6.5 | An out-of-bounds read was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-28206 Known exploited | High 8.6 | An out-of-bounds write issue was addressed with improved input validation. Assigned by apple | Apr 10, 2023 |
| CVE-2023-28205 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Apr 10, 2023 |
| CVE-2023-23529 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Feb 27, 2023 |
| CVE-2022-42856 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Dec 15, 2022 |
| CVE-2022-40304 | High 7.8 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 23, 2022 |
| CVE-2022-40303 | High 7.5 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 22, 2022 |
| CVE-2022-42827 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Nov 1, 2022 |
| CVE-2022-32917 Known exploited | High 7.8 | The issue was addressed with improved bounds checks. Assigned by apple | Sep 20, 2022 |
| CVE-2022-32894 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2022 |
| CVE-2022-32893 Known exploited | High 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2022 |
| CVE-2022-37434 | Critical 9.8 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre | Aug 5, 2022 |
| CVE-2022-2294 Known exploited | High 8.8 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jul 28, 2022 |
| CVE-2022-22675 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | May 26, 2022 |
| CVE-2022-22620 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Mar 18, 2022 |
| CVE-2022-22587 Known exploited | Critical 9.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Mar 18, 2022 |
| CVE-2022-23308 | High 7.5 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre | Feb 26, 2022 |
| CVE-2021-30807 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Oct 19, 2021 |
| CVE-2021-30663 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30666 Known exploited | High 8.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30762 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30761 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30983 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
