Vendor CVEs

Apple Inc.

All CVEs

9,002 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-7049	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047	Apple Inc. tvOS	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7043	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042	Apple Inc. Safari	Hig	0.61	8.8	0.09	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041	Apple Inc. Safari	Hig	0.61	8.8	0.10	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039	Apple Inc. Safari	Hig	0.61	8.8	0.06	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037	Apple Inc. Safari	Hig	0.61	8.8	0.08	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7018	Apple Inc. Safari	Hig	0.61	8.8	0.07	Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-2491	Apple Inc. Iphone OS	Hig	0.61	8.8	0.08	Jun 27, 2017	Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.
CVE-2017-6984	Apple Inc. Safari	Hig	0.61	8.8	0.08	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute…
CVE-2017-6980	Apple Inc. Safari	Hig	0.61	8.8	0.07	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2547	Apple Inc. Safari	Hig	0.61	8.8	0.14	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2536	Apple Inc. Safari	Hig	0.61	8.8	0.10	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2531	Apple Inc. Safari	Hig	0.61	8.8	0.07	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2521	Apple Inc. tvOS	Hig	0.61	8.8	0.06	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…
CVE-2017-2515	Apple Inc. Safari	Hig	0.61	8.8	0.05	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2514	Apple Inc. Safari	Hig	0.61	8.8	0.06	May 22, 2017	An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2476	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2471	Apple Inc. Safari	Hig	0.61	8.8	0.09	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a…
CVE-2017-2470	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2469	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2468	Apple Inc. Safari	Hig	0.61	8.8	0.08	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2466	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2464	Apple Inc. Safari	Hig	0.61	8.8	0.09	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2460	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2459	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2457	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
CVE-2017-2455	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2454	Apple Inc. Safari	Hig	0.61	8.8	0.07	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2446	Apple Inc. Safari	Hig	0.61	8.8	0.08	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the…
CVE-2017-2373	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2369	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2362	Apple Inc. Safari	Hig	0.61	8.8	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2016-7626	Apple Inc. tvOS	Hig	0.61	8.8	0.05	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2010-0050	Apple Inc. Safari	Hig	0.61	8.8	0.12	Mar 15, 2010	Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.
CVE-2026-64740	Apple Inc. macOS	Cri	0.60	9.3	0.00	Jul 27, 2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to…
CVE-2026-28827	Apple Inc. macOS	Cri	0.60	9.3	0.00	Mar 25, 2026	A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
CVE-2026-20688	Apple Inc. macOS	Cri	0.60	9.3	0.00	Mar 25, 2026	A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.
CVE-2024-44206	Apple Inc. macOS	Cri	0.60	9.3	0.00	Oct 24, 2024	An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
CVE-2022-42867	Apple Inc. macOS	Hig	0.60	8.8	0.35	Dec 15, 2022	A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2021-44224	Apache HTTP Server	Hig	0.60	8.2	0.82	Dec 20, 2021	A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server…
CVE-2021-22945	Curl Libcurl	Cri	0.60	9.1	0.07	Sep 23, 2021	When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again.
CVE-2020-9906	Apple Inc. Ipados	Cri	0.60	9.1	0.05	Oct 22, 2020	A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-39868	Apple Inc. macOS	Cri	0.59	9.1	0.01	Jun 29, 2026	This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause…
CVE-2026-20677	Apple Inc. macOS	Cri	0.59	9.0	0.00	Feb 11, 2026	A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A shortcut may be able to bypass sandbox…
CVE-2025-43273	Apple Inc. macOS	Cri	0.59	9.1	0.01	Jul 30, 2025	A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.8. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2025-31281	Apple Inc. macOS	Cri	0.59	9.1	0.01	Jul 30, 2025	An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2017-7049HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047HigJul 20, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7043HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7018HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-2491HigJun 27, 2017
Apple Inc.
Iphone OS
risk 0.61cvss 8.8epss 0.08
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.
CVE-2017-6984HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute…
CVE-2017-6980HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2547HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.14
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2536HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2531HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2521HigMay 22, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code…
CVE-2017-2515HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.05
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2514HigMay 22, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
CVE-2017-2476HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2471HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a…
CVE-2017-2470HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2469HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2468HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2466HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2464HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2460HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2459HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2457HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)…
CVE-2017-2455HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2454HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2017-2446HigApr 2, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the…
CVE-2017-2373HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2369HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-2362HigFeb 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2016-7626HigFeb 20, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.05
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory…
CVE-2010-0050HigMar 15, 2010
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.12
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.
CVE-2026-64740CriJul 27, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to…
CVE-2026-28827CriMar 25, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to break out of its sandbox.
CVE-2026-20688CriMar 25, 2026
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to break out of its sandbox.
CVE-2024-44206CriOct 24, 2024
Apple Inc.
macOS
risk 0.60cvss 9.3epss 0.00
An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restrictions.
CVE-2022-42867HigDec 15, 2022
Apple Inc.
macOS
risk 0.60cvss 8.8epss 0.35
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2021-44224HigDec 20, 2021
Apache
HTTP Server
risk 0.60cvss 8.2epss 0.82
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server…
CVE-2021-22945CriSep 23, 2021
Curl
Libcurl
risk 0.60cvss 9.1epss 0.07
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
CVE-2020-9906CriOct 22, 2020
Apple Inc.
Ipados
risk 0.60cvss 9.1epss 0.05
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-39868CriJun 29, 2026
Apple Inc.
macOS
risk 0.59cvss 9.1epss 0.01
This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause…
CVE-2026-20677CriFeb 11, 2026
Apple Inc.
macOS
risk 0.59cvss 9.0epss 0.00
A race condition was addressed with improved handling of symbolic links. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3. A shortcut may be able to bypass sandbox…
CVE-2025-43273CriJul 30, 2025
Apple Inc.
macOS
risk 0.59cvss 9.1epss 0.01
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.8. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2025-31281CriJul 30, 2025
Apple Inc.
macOS
risk 0.59cvss 9.1epss 0.01
An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination.

Page 11 of 181