VYPR

Mac OS X

by Apple Inc.

CVEs (3,257)

  • CVE-2002-1347CriDec 18, 2002
    Cyrus SASL
    Cyrus SASL library
    risk 0.64cvss 9.8epss 0.07

    Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication…

  • CVE-2021-30713HigKEVSep 8, 2021
    Apple Inc.
    macOS
    risk 0.63cvss 7.8epss 0.07

    A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

  • CVE-2021-30869HigKEVAug 24, 2021
    Apple Inc.
    macOS
    risk 0.63cvss 7.8epss 0.04

    A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may…

  • CVE-2020-9859HigKEVJun 5, 2020
    Apple Inc.
    tvOS
    risk 0.63cvss 7.8epss 0.01

    A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

  • CVE-2019-8526HigKEVDec 18, 2019
    Apple Inc.
    macOS Mojave
    risk 0.63cvss 7.8epss 0.01

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

  • CVE-2018-4344HigKEVApr 3, 2019
    Apple Inc.
    tvOS
    risk 0.63cvss 7.8epss 0.03

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  • CVE-2022-22721CriMar 14, 2022
    Apache
    HTTP Server
    risk 0.62cvss 9.1epss 0.42

    If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

  • CVE-2021-30860HigKEVAug 24, 2021
    Apple Inc.
    macOS
    risk 0.62cvss 7.8epss 0.76

    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a…

  • CVE-2021-31010HigKEVAug 24, 2021
    Apple Inc.
    macOS
    risk 0.61cvss 7.5epss 0.04

    A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was…

  • CVE-2019-8689HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.13

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously…

  • CVE-2019-8672HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.11

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously…

  • CVE-2019-8671HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web…

  • CVE-2019-8623HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead…

  • CVE-2019-8622HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead…

  • CVE-2019-8611HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…

  • CVE-2019-6224HigMar 5, 2019
    Apple Inc.
    tvOS
    risk 0.61cvss 8.8epss 0.09

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

  • CVE-2019-6223HigKEVMar 5, 2019
    Apple Inc.
    macOS
    risk 0.61cvss 7.5epss 0.03

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

  • CVE-2018-4404HigJan 11, 2019
    Apple Inc.
    iOS
    risk 0.61cvss 8.8epss 0.14

    In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.

  • CVE-2018-4089HigApr 3, 2018
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.07

    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…

  • CVE-2017-7047HigJul 20, 2017
    Apple Inc.
    tvOS
    risk 0.61cvss 8.8epss 0.07

    An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…

Page 8 of 163