macOS

CVEs (3,953)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-3910	Apple Inc. iTunes	Cri	0.64	9.8	0.02	Apr 1, 2020	A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVE-2020-3909	Apple Inc. iTunes	Cri	0.64	9.8	0.03	Apr 1, 2020	A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVE-2016-4606	Curl Curl	Cri	0.64	9.8	0.03	Feb 21, 2020	Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other…
CVE-2019-8648	Apple Inc. tvOS	Cri	0.64	9.8	0.03	Dec 18, 2019	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVE-2018-4353	Apple Inc. macOS	Cri	0.64	9.8	0.01	Apr 3, 2019	A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4332	Apple Inc. tvOS	Cri	0.64	9.8	0.02	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4331	Apple Inc. tvOS	Cri	0.64	9.8	0.04	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4295	Apple Inc. macOS	Cri	0.64	9.8	0.01	Apr 3, 2019	An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4291	Apple Inc. macOS	Cri	0.64	9.8	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4288	Apple Inc. macOS High Sierra	Cri	0.64	9.8	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4287	Apple Inc. macOS	Cri	0.64	9.8	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4286	Apple Inc. macOS	Cri	0.64	9.8	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4268	Apple Inc. macOS High Sierra	Cri	0.64	9.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4259	Apple Inc. macOS	Cri	0.64	9.8	0.02	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4298	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.
CVE-2018-4258	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.
CVE-2018-4257	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.
CVE-2018-4254	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation.
CVE-2018-4169	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improved input validation.
CVE-2017-13889	Apple Inc. macOS	Cri	0.64	9.8	0.01	Jan 11, 2019	In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials. This was addressed with improved credential validation.

CVE-2020-3910CriApr 1, 2020
Apple Inc.
iTunes
risk 0.64cvss 9.8epss 0.02
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVE-2020-3909CriApr 1, 2020
Apple Inc.
iTunes
risk 0.64cvss 9.8epss 0.03
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVE-2016-4606CriFeb 21, 2020
Curl
Curl
risk 0.64cvss 9.8epss 0.03
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other…
CVE-2019-8648CriDec 18, 2019
Apple Inc.
tvOS
risk 0.64cvss 9.8epss 0.03
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
CVE-2018-4353CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4332CriApr 3, 2019
Apple Inc.
tvOS
risk 0.64cvss 9.8epss 0.02
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4331CriApr 3, 2019
Apple Inc.
tvOS
risk 0.64cvss 9.8epss 0.04
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4295CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4291CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.02
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4288CriApr 3, 2019
Apple Inc.
macOS High Sierra
risk 0.64cvss 9.8epss 0.02
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4287CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.02
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4286CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.02
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4268CriApr 3, 2019
Apple Inc.
macOS High Sierra
risk 0.64cvss 9.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4259CriApr 3, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.02
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4298CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed in Remote Management. This issue was addressed through improved permission validation.
CVE-2018-4258CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.
CVE-2018-4257CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.
CVE-2018-4254CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation.
CVE-2018-4169CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was addressed with improved input validation.
CVE-2017-13889CriJan 11, 2019
Apple Inc.
macOS
risk 0.64cvss 9.8epss 0.01
In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the validation of credentials. This was addressed with improved credential validation.

Page 13 of 198