Vendor CVEs

Apple Inc.

All CVEs

9,259 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-13784	Apple Inc. Safari	Hig	0.61	8.8	0.06	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It…
CVE-2017-13783	Apple Inc. Safari	Hig	0.61	8.8	0.06	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It…
CVE-2017-7117	Apple Inc. Safari	Hig	0.61	8.8	0.10	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-7061	Apple Inc. Safari	Hig	0.61	8.8	0.08	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7056	Apple Inc. Safari	Hig	0.61	8.8	0.08	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7049	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047	Apple Inc. tvOS	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7043	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042	Apple Inc. Safari	Hig	0.61	8.8	0.09	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041	Apple Inc. Safari	Hig	0.61	8.8	0.10	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037	Apple Inc. Safari	Hig	0.61	8.8	0.08	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7018	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-2491	Apple Inc. Iphone OS	Hig	0.61	8.8	0.08	Jun 27, 2017	Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.
CVE-2017-6984	Apple Inc. Safari	Hig	0.61	8.8	0.08	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute…
CVE-2017-6980	Apple Inc. Safari	Hig	0.61	8.8	0.07	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2547	Apple Inc. Safari	Hig	0.61	8.8	0.16	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2536	Apple Inc. Safari	Hig	0.61	8.8	0.10	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2531	Apple Inc. Safari	Hig	0.61	8.8	0.07	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2521	Apple Inc. tvOS	Hig	0.61	8.8	0.06	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…
CVE-2017-2515	Apple Inc. Safari	Hig	0.61	8.8	0.05	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2514	Apple Inc. Safari	Hig	0.61	8.8	0.06	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2476	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2471	Apple Inc. Safari	Hig	0.61	8.8	0.08	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a…
CVE-2017-2470	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2469	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2468	Apple Inc. Safari	Hig	0.61	8.8	0.08	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2466	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2464	Apple Inc. Safari	Hig	0.61	8.8	0.09	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2460	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2459	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2457	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
CVE-2017-2455	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2454	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2446	Apple Inc. Safari	Hig	0.61	8.8	0.08	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the…
CVE-2017-2373	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2369	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2362	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2016-7626	Apple Inc. tvOS	Hig	0.61	8.8	0.05	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2010-0050	Apple Inc. Safari	Hig	0.61	8.8	0.12	Mar 15, 2010	Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.
CVE-2026-64740	Apple Inc. macOS	Cri	0.60	9.3	0.00	Jul 27, 2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to…
CVE-2026-28827	Apple Inc. macOS	Cri	0.60	9.3	0.00	Mar 25, 2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
CVE-2026-20688	Apple Inc. macOS	Cri	0.60	9.3	0.00	Mar 25, 2026	A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.
CVE-2024-44206	Apple Inc. macOS	Cri	0.60	9.3	0.00	Oct 24, 2024	An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
CVE-2022-42867	Apple Inc. macOS	Hig	0.60	8.8	0.35	Dec 15, 2022	A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2021-44224	Apache HTTP Server	Hig	0.60	8.2	0.82	Dec 20, 2021	A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server…
CVE-2021-22945	Curl Libcurl	Cri	0.60	9.1	0.07	Sep 23, 2021	When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again.

CVE-2017-13784HigNov 13, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It…
CVE-2017-13783HigNov 13, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It…
CVE-2017-7117HigOct 23, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-7061HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7056HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7049HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047HigJul 20, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7043HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7018HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-2491HigJun 27, 2017
Apple Inc.
Iphone OS
risk 0.61cvss 8.8epss 0.08
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.
CVE-2017-6984HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute…
CVE-2017-6980HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2547HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.16
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2536HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2531HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2521HigMay 22, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…
CVE-2017-2515HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.05
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2514HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2476HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2471HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a…
CVE-2017-2470HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2469HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2468HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2466HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2464HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2460HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2459HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2457HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
CVE-2017-2455HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2454HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2446HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the…
CVE-2017-2373HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2369HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2362HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2016-7626HigFeb 20, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.05
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2010-0050HigMar 15, 2010
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.12
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.
CVE-2026-64740CriJul 27, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to…
CVE-2026-28827CriMar 25, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
CVE-2026-20688CriMar 25, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.
CVE-2024-44206CriOct 24, 2024
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
CVE-2022-42867HigDec 15, 2022
Apple Inc.
macOS
risk 0.60cvss 8.8epss 0.35
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2021-44224HigDec 20, 2021
Apache
HTTP Server
risk 0.60cvss 8.2epss 0.82
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server…
CVE-2021-22945CriSep 23, 2021
Curl
Libcurl
risk 0.60cvss 9.1epss 0.07
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.

Page 11 of 186