VYPR

macOS

by Apple Inc.

CVEs (3,816)

  • CVE-2019-8526HigKEVDec 18, 2019
    Apple Inc.
    macOS Mojave
    risk 0.63cvss 7.8epss 0.01

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

  • CVE-2018-4344HigKEVApr 3, 2019
    Apple Inc.
    tvOS
    risk 0.63cvss 7.8epss 0.03

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  • CVE-2022-22721CriMar 14, 2022
    Apache
    HTTP Server
    risk 0.62cvss 9.1epss 0.42

    If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.

  • CVE-2021-30860HigKEVAug 24, 2021
    Apple Inc.
    macOS
    risk 0.62cvss 7.8epss 0.76

    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a…

  • CVE-2021-31010HigKEVAug 24, 2021
    Apple Inc.
    macOS
    risk 0.61cvss 7.5epss 0.04

    A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was…

  • CVE-2019-8689HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.13

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously…

  • CVE-2019-8672HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.11

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously…

  • CVE-2019-8671HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web…

  • CVE-2019-8623HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead…

  • CVE-2019-8622HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead…

  • CVE-2019-8611HigDec 18, 2019
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary…

  • CVE-2019-6224HigMar 5, 2019
    Apple Inc.
    tvOS
    risk 0.61cvss 8.8epss 0.10

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

  • CVE-2019-6223HigKEVMar 5, 2019
    Apple Inc.
    macOS
    risk 0.61cvss 7.5epss 0.03

    A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

  • CVE-2018-4089HigApr 3, 2018
    Apple Inc.
    Safari
    risk 0.61cvss 8.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. tvOS before 11.2.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…

  • CVE-2026-64740CriJul 27, 2026
    Apple Inc.
    macOS
    risk 0.60cvss 9.3epss 0.00

    A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to…

  • CVE-2026-28827CriMar 25, 2026
    Apple Inc.
    macOS
    risk 0.60cvss 9.3epss 0.00

    A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.

  • CVE-2026-20688CriMar 25, 2026
    Apple Inc.
    macOS
    risk 0.60cvss 9.3epss 0.00

    A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.

  • CVE-2024-44206CriOct 24, 2024
    Apple Inc.
    macOS
    risk 0.60cvss 9.3epss 0.00

    An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.

  • CVE-2022-42867HigDec 15, 2022
    Apple Inc.
    macOS
    risk 0.60cvss 8.8epss 0.35

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

  • CVE-2021-44224HigDec 20, 2021
    Apache
    HTTP Server
    risk 0.60cvss 8.2epss 0.82

    A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server…

Page 15 of 191