Vendor CVEs

Apple Inc.

All CVEs

9,252 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-4158	Apple Inc. watchOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. watchOS before 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows attackers to execute arbitrary code in a privileged…
CVE-2018-4157	Apple Inc. tvOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Quick Look" component. A race condition allows attackers to execute arbitrary…
CVE-2018-4156	Apple Inc. macOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "PluginKit" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4155	Apple Inc. tvOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows attackers to execute…
CVE-2018-4154	Apple Inc. macOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4152	Apple Inc. macOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4151	Apple Inc. macOS	Hig	0.46	7.0	0.02	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "iCloud Drive" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-13850	Apple Inc. macOS	Hig	0.46	7.1	0.01	Apr 3, 2018	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Font Importer" component. It allows remote attackers to cause a denial of service (memory corruption) or obtain sensitive information from process memory via a crafted…
CVE-2017-7154	Apple Inc. tvOS	Med	0.46	6.6	0.01	Dec 27, 2017	An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of…
CVE-2017-13831	Apple Inc. macOS	Hig	0.46	7.1	0.02	Nov 13, 2017	An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image.
CVE-2017-13820	Apple Inc. macOS	Hig	0.46	7.1	0.01	Nov 13, 2017	An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font.
CVE-2015-3206	Apple Inc. Pykerberos	Hig	0.46	8.1	0.03	Aug 25, 2017	The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.
CVE-2017-2480	Apple Inc. Safari	Med	0.46	6.5	0.04	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-2479	Apple Inc. Safari	Med	0.46	6.5	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-2450	Apple Inc. tvOS	Hig	0.46	7.1	0.02	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information…
CVE-2017-2442	Apple Inc. Safari	Med	0.46	6.5	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a…
CVE-2017-2439	Apple Inc. tvOS	Hig	0.46	7.1	0.03	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive…
CVE-2017-2409	Apple Inc. macOS	Hig	0.46	7.1	0.01	Apr 2, 2017	An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app.
CVE-2017-2367	Apple Inc. Safari	Med	0.46	6.5	0.06	Apr 2, 2017	An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information…
CVE-2017-2371	Apple Inc. Webkit	Med	0.46	6.5	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
CVE-2017-2365	Apple Inc. Safari	Med	0.46	6.5	0.07	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive…
CVE-2017-2364	Apple Inc. Safari	Med	0.46	6.5	0.06	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVE-2017-2363	Apple Inc. Safari	Med	0.46	6.5	0.07	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…
CVE-2016-4743	Apple Inc. Safari	Hig	0.46	7.1	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive…
CVE-2016-4682	Apple Inc. macOS	Hig	0.46	7.1	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and…
CVE-2016-4660	Apple Inc. tvOS	Hig	0.46	7.1	0.02	Feb 20, 2017	An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive…
CVE-2016-4776	Apple Inc. tvOS	Hig	0.46	7.1	0.02	Sep 25, 2016	The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…
CVE-2016-4774	Apple Inc. tvOS	Hig	0.46	7.1	0.02	Sep 25, 2016	The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…
CVE-2016-4773	Apple Inc. tvOS	Hig	0.46	7.1	0.02	Sep 25, 2016	The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4774 and…
CVE-2016-4639	Apple Inc. OS X	Hig	0.46	7.0	0.00	Jul 22, 2016	Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors.
CVE-2016-1762	Xmlsoft Libxml2	Hig	0.46	8.1	0.07	Mar 24, 2016	The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVE-2016-2105	OpenSSL Project OpenSSL	Hig	0.45	7.5	0.40	May 5, 2016	Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
CVE-2008-5183	Apple Inc. Cups	Hig	0.45	7.5	0.09	Nov 21, 2008	cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging…
CVE-2026-64363	Linux Kernel	Hig	0.44	7.8	0.00	Jul 25, 2026	In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer in remove() appleir_remove() runs hid_hw_stop() before timer_delete_sync(). hid_hw_stop() synchronously unregisters the HID input device via hid_disconnect() ->…
CVE-2026-23323	Linux Kernel	Hig	0.44	7.8	0.00	Mar 25, 2026	In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. …
CVE-2025-43534	Apple Inc. Ipados	Med	0.44	6.8	0.00	Mar 25, 2026	A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.
CVE-2026-20613	Apple Inc. Container	Hig	0.44	7.8	0.00	Jan 23, 2026	The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location…
CVE-2025-31228	Apple Inc. Ipados	Med	0.44	6.8	0.00	May 12, 2025	The issue was addressed with improved authentication. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to access notes from the lock screen.
CVE-2025-31192	Apple Inc. macOS	Med	0.44	6.7	0.01	Mar 31, 2025	The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.
CVE-2025-24272	Apple Inc. macOS	Med	0.44	6.8	0.01	Mar 31, 2025	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
CVE-2025-24153	Apple Inc. macOS	Med	0.44	6.7	0.00	Jan 27, 2025	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2024-44141	Apple Inc. macOS	Med	0.44	6.8	0.00	Oct 24, 2024	The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution.
CVE-2024-27878	Apple Inc. macOS	Med	0.44	6.7	0.00	Jul 29, 2024	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2024-23234	Apple Inc. macOS	Med	0.44	6.7	0.00	Mar 8, 2024	An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-41989	Apple Inc. macOS	Med	0.44	6.8	0.01	Oct 25, 2023	The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen.
CVE-2023-41988	Apple Inc. macOS	Med	0.44	6.8	0.01	Oct 25, 2023	This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
CVE-2023-27933	Apple Inc. macOS	Med	0.44	6.7	0.00	May 8, 2023	The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-42830	Apple Inc. macOS	Med	0.44	6.7	0.00	Nov 1, 2022	The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-42829	Apple Inc. macOS	Med	0.44	6.7	0.00	Nov 1, 2022	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-32926	Apple Inc. macOS	Med	0.44	6.7	0.00	Nov 1, 2022	The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16. An app with root privileges may be able to execute arbitrary code with kernel privileges.

CVE-2018-4158HigApr 3, 2018
Apple Inc.
watchOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. watchOS before 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows attackers to execute arbitrary code in a privileged…
CVE-2018-4157HigApr 3, 2018
Apple Inc.
tvOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "Quick Look" component. A race condition allows attackers to execute arbitrary…
CVE-2018-4156HigApr 3, 2018
Apple Inc.
macOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "PluginKit" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4155HigApr 3, 2018
Apple Inc.
tvOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "CoreFoundation" component. A race condition allows attackers to execute…
CVE-2018-4154HigApr 3, 2018
Apple Inc.
macOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4152HigApr 3, 2018
Apple Inc.
macOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2018-4151HigApr 3, 2018
Apple Inc.
macOS
risk 0.46cvss 7.0epss 0.02
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "iCloud Drive" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-13850HigApr 3, 2018
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Font Importer" component. It allows remote attackers to cause a denial of service (memory corruption) or obtain sensitive information from process memory via a crafted…
CVE-2017-7154MedDec 27, 2017
Apple Inc.
tvOS
risk 0.46cvss 6.6epss 0.01
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of…
CVE-2017-13831HigNov 13, 2017
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.02
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image.
CVE-2017-13820HigNov 13, 2017
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.01
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ATS" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted font.
CVE-2015-3206HigAug 25, 2017
Apple Inc.
Pykerberos
risk 0.46cvss 8.1epss 0.03
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.
CVE-2017-2480MedApr 2, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.04
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-2479MedApr 2, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows…
CVE-2017-2450HigApr 2, 2017
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information…
CVE-2017-2442MedApr 2, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a…
CVE-2017-2439HigApr 2, 2017
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.03
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive…
CVE-2017-2409HigApr 2, 2017
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Menus" component. It allows attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted app.
CVE-2017-2367MedApr 2, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information…
CVE-2017-2371MedFeb 20, 2017
Apple Inc.
Webkit
risk 0.46cvss 6.5epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.
CVE-2017-2365MedFeb 20, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.07
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive…
CVE-2017-2364MedFeb 20, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.06
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
CVE-2017-2363MedFeb 20, 2017
Apple Inc.
Safari
risk 0.46cvss 6.5epss 0.07
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin…
CVE-2016-4743HigFeb 20, 2017
Apple Inc.
Safari
risk 0.46cvss 7.1epss 0.02
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive…
CVE-2016-4682HigFeb 20, 2017
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.02
An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and…
CVE-2016-4660HigFeb 20, 2017
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.02
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive…
CVE-2016-4776HigSep 25, 2016
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.02
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…
CVE-2016-4774HigSep 25, 2016
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.02
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and…
CVE-2016-4773HigSep 25, 2016
Apple Inc.
tvOS
risk 0.46cvss 7.1epss 0.02
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4774 and…
CVE-2016-4639HigJul 22, 2016
Apple Inc.
OS X
risk 0.46cvss 7.0epss 0.00
Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors.
CVE-2016-1762HigMar 24, 2016
Xmlsoft
Libxml2
risk 0.46cvss 8.1epss 0.07
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVE-2016-2105HigMay 5, 2016
OpenSSL Project
OpenSSL
risk 0.45cvss 7.5epss 0.40
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
CVE-2008-5183HigNov 21, 2008
Apple Inc.
Cups
risk 0.45cvss 7.5epss 0.09
cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon crash) by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging…
CVE-2026-64363HigJul 25, 2026
Linux
Kernel
risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: fix UAF on pending key_up_timer in remove() appleir_remove() runs hid_hw_stop() before timer_delete_sync(). hid_hw_stop() synchronously unregisters the HID input device via hid_disconnect() ->…
CVE-2026-23323HigMar 25, 2026
Linux
Kernel
risk 0.44cvss 7.8epss 0.00
In the Linux kernel, the following vulnerability has been resolved: hwmon: (macsmc) Fix regressions in Apple Silicon SMC hwmon driver The recently added macsmc-hwmon driver contained several critical bugs in its sensor population logic and float conversion routines. …
CVE-2025-43534MedMar 25, 2026
Apple Inc.
Ipados
risk 0.44cvss 6.8epss 0.00
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.
CVE-2026-20613HigJan 23, 2026
Apple Inc.
Container
risk 0.44cvss 7.8epss 0.00
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location…
CVE-2025-31228MedMay 12, 2025
Apple Inc.
Ipados
risk 0.44cvss 6.8epss 0.00
The issue was addressed with improved authentication. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to access notes from the lock screen.
CVE-2025-31192MedMar 31, 2025
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.01
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.
CVE-2025-24272MedMar 31, 2025
Apple Inc.
macOS
risk 0.44cvss 6.8epss 0.01
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
CVE-2025-24153MedJan 27, 2025
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2024-44141MedOct 24, 2024
Apple Inc.
macOS
risk 0.44cvss 6.8epss 0.00
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution.
CVE-2024-27878MedJul 29, 2024
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2024-23234MedMar 8, 2024
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-41989MedOct 25, 2023
Apple Inc.
macOS
risk 0.44cvss 6.8epss 0.01
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen.
CVE-2023-41988MedOct 25, 2023
Apple Inc.
macOS
risk 0.44cvss 6.8epss 0.01
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data.
CVE-2023-27933MedMay 8, 2023
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-42830MedNov 1, 2022
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-42829MedNov 1, 2022
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVE-2022-32926MedNov 1, 2022
Apple Inc.
macOS
risk 0.44cvss 6.7epss 0.00
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16. An app with root privileges may be able to execute arbitrary code with kernel privileges.

Page 62 of 186