VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

9,252 total · sorted by risk
  • CVE-2019-6213HigMar 5, 2019
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.

  • CVE-2019-6205HigMar 5, 2019
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.07

    A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

  • CVE-2018-4241HigJun 8, 2018
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.19

    An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Kernel" component. A buffer overflow in mptcp_usr_connectx allows attackers…

  • CVE-2018-4206HigJun 8, 2018
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to…

  • CVE-2018-4193HigJun 8, 2018
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2018-4139HigApr 3, 2018
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2018-4087HigApr 3, 2018
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.11

    An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Core Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a…

  • CVE-2018-4083HigApr 3, 2018
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.06

    An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2017-13876HigDec 25, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-13875HigDec 25, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted…

  • CVE-2017-13867HigDec 25, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-13847HigDec 25, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via…

  • CVE-2017-7529HigJul 13, 2017
    Nginx
    Nginx
    risk 0.54cvss 7.5epss 0.63

    Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

  • CVE-2017-6999HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6998HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6997HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6996HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6995HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6994HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.06

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6989HigMay 22, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.06

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause…

  • CVE-2017-6978HigMay 22, 2017
    Apple Inc.
    Mac OS X
    risk 0.54cvss 7.8epss 0.06

    An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted…

  • CVE-2017-2490HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-2483HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.12

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code…

  • CVE-2017-2482HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.11

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code…

  • CVE-2017-2474HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows attackers to execute arbitrary…

  • CVE-2017-2473HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-2472HigApr 2, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-2443HigApr 2, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2017-2360HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…

  • CVE-2017-2353HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.06

    An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.

  • CVE-2016-7661HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "Power Management" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references.

  • CVE-2016-7660HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port…

  • CVE-2016-7644HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.15

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial…

  • CVE-2016-7637HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service (memory…

  • CVE-2016-7633HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows local users to gain privileges or cause a denial of service (use-after-free) via unspecified vectors.

  • CVE-2016-7621HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.01

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a…

  • CVE-2016-7617HigFeb 20, 2017
    Apple Inc.
    macOS
    risk 0.54cvss 7.8epss 0.09

    An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (type confusion) via a crafted app.

  • CVE-2016-7612HigFeb 20, 2017
    Apple Inc.
    watchOS
    risk 0.54cvss 7.8epss 0.08

    An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial…

  • CVE-2016-4669HigFeb 20, 2017
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.04

    An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a…

  • CVE-2016-4625HigJul 22, 2016
    Apple Inc.
    OS X
    risk 0.54cvss 7.8epss 0.02

    Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.

  • CVE-2016-1863HigJul 22, 2016
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.01

    The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653.

  • CVE-2016-1861HigJun 19, 2016
    Nvidia
    Graphics Driver
    risk 0.54cvss 7.8epss 0.06

    The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.

  • CVE-2016-1848HigMay 20, 2016
    Apple Inc.
    Quicktime
    risk 0.54cvss 7.8epss 0.08

    QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.

  • CVE-2016-1846HigMay 20, 2016
    Nvidia
    Graphics Driver
    risk 0.54cvss 7.8epss 0.10

    The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.

  • CVE-2016-1828HigMay 20, 2016
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.13

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…

  • CVE-2016-1827HigMay 20, 2016
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.12

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…

  • CVE-2016-1825HigMay 20, 2016
    Apple Inc.
    OS X
    risk 0.54cvss 7.8epss 0.10

    IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  • CVE-2016-1823HigMay 20, 2016
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read and memory corruption)…

  • CVE-2016-1821HigMay 20, 2016
    Apple Inc.
    OS X
    risk 0.54cvss 7.8epss 0.10

    IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

  • CVE-2016-1819HigMay 20, 2016
    Apple Inc.
    tvOS
    risk 0.54cvss 7.8epss 0.10

    Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory…

Page 25 of 186