ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.security-protocols.com/sp-x28-advisory.php

Resource:

x_refsource_MISC

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.security-protocols.com/sp-x30-advisory.php

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/17951	vdb-entry x_refsource_BID x_transferred
http://www.vupen.com/english/advisories/2006/1779	vdb-entry x_refsource_VUPEN x_transferred
http://www.us-cert.gov/cas/techalerts/TA06-132A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233	x_refsource_MISC x_transferred
http://securitytracker.com/id?1016067	vdb-entry x_refsource_SECTRACK x_transferred
http://www.osvdb.org/24821	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/25949	vdb-entry x_refsource_XF x_transferred
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/25951	vdb-entry x_refsource_XF x_transferred
http://www.vupen.com/english/advisories/2006/1452	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/bid/17634	vdb-entry x_refsource_BID x_transferred
http://www.osvdb.org/24822	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/20077	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.security-protocols.com/sp-x28-advisory.php	x_refsource_MISC x_transferred
http://secunia.com/advisories/19686	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.security-protocols.com/sp-x30-advisory.php	x_refsource_MISC x_transferred

Hyperlink: http://www.securityfocus.com/bid/17951

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2006/1779

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://securitytracker.com/id?1016067

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.osvdb.org/24821

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25949

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25951

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2006/1452

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/bid/17634

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.osvdb.org/24822

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.security-protocols.com/sp-x28-advisory.php

Resource:

x_refsource_MISC

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.security-protocols.com/sp-x30-advisory.php

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:21 Apr, 2006 | 22:02

Updated At:03 Apr, 2025 | 01:03

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.4

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:P

CPE Matches

cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*

>>mac_os_x>>10.3

cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*

>>mac_os_x>>10.3.1

cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*

>>mac_os_x>>10.3.2

cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*

>>mac_os_x>>10.3.3

cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*

>>mac_os_x>>10.3.4

cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*

>>mac_os_x>>10.3.5

cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*

>>mac_os_x>>10.3.6

cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*

>>mac_os_x>>10.3.7

cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*

>>mac_os_x>>10.3.8

cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*

>>mac_os_x>>10.3.9

cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*

>>mac_os_x>>10.4

cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

>>mac_os_x>>10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

>>mac_os_x>>10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

>>mac_os_x>>10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

>>mac_os_x>>10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

>>mac_os_x>>10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

>>mac_os_x>>10.4.6

cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3

cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.1

cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.2

cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.3

cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.4

cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.5

cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.6

cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.7

cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.8

cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*

>>mac_os_x_server>>10.3.9

cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4

cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.1

cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.2

cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.3

cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.4

cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.5

cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.6

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html	cve@mitre.org	Patch
http://secunia.com/advisories/19686	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20077	cve@mitre.org	Patch Vendor Advisory
http://securitytracker.com/id?1016067	cve@mitre.org	Patch
http://www.osvdb.org/24821	cve@mitre.org	N/A
http://www.osvdb.org/24822	cve@mitre.org	N/A
http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233	cve@mitre.org	Exploit
http://www.security-protocols.com/sp-x28-advisory.php	cve@mitre.org	Vendor Advisory
http://www.security-protocols.com/sp-x30-advisory.php	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/17634	cve@mitre.org	Exploit
http://www.securityfocus.com/bid/17951	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA06-132A.html	cve@mitre.org	Patch Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2006/1452	cve@mitre.org	Vendor Advisory
http://www.vupen.com/english/advisories/2006/1779	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25949	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/25951	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/19686	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20077	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://securitytracker.com/id?1016067	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.osvdb.org/24821	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/24822	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.security-protocols.com/sp-x28-advisory.php	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.security-protocols.com/sp-x30-advisory.php	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/17634	af854a3a-2127-422b-91ae-364da2661108	Exploit
http://www.securityfocus.com/bid/17951	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA06-132A.html	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2006/1452	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vupen.com/english/advisories/2006/1779	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25949	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/25951	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: cve@mitre.org

Resource:

Patch

Source: cve@mitre.org

Resource:

Vendor Advisory

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1016067

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.osvdb.org/24821

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.osvdb.org/24822

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.security-protocols.com/sp-x28-advisory.php

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.security-protocols.com/sp-x30-advisory.php

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/17634

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.securityfocus.com/bid/17951

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: cve@mitre.org

Resource:

Patch

Third Party Advisory

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2006/1452

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2006/1779

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25949

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25951

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1016067

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.osvdb.org/24821

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.osvdb.org/24822

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.security-protocols.com/sp-x28-advisory.php

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.security-protocols.com/sp-x30-advisory.php

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/17634

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Hyperlink: http://www.securityfocus.com/bid/17951

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Third Party Advisory

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2006/1452

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2006/1779

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25949

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/25951

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2349Records found

CVE-2010-1757

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.4||MEDIUM

EPSS-2.64% / 85.14%

7 Day CHG~0.00%

Published-22 Jun, 2010 | 20:24

Updated-11 Apr, 2025 | 00:51

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document.

Vendor-n/a Apple Inc.

Product-iphone_os ipod_touch n/a

CVE-2009-5078

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.32% / 79.03%

7 Day CHG~0.00%

Published-30 Jun, 2011 | 15:26

Updated-11 Apr, 2025 | 00:51

contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.

Vendor-n/a GNU Apple Inc.

Product-mac_os_x groff n/a

CVE-2010-0058

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.4||MEDIUM

EPSS-0.90% / 74.76%

7 Day CHG~0.00%

Published-30 Mar, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into the system.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CVE-2009-2801

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-0.20% / 42.10%

7 Day CHG~0.00%

Published-30 Mar, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to bypass intended access restrictions via packet data, related to a "timing issue."

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CVE-2009-0161

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-0.18% / 40.05%

7 Day CHG~0.00%

Published-13 May, 2009 | 15:14

Updated-07 Aug, 2024 | 04:24

The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate.

Vendor-n/a Apple Inc.

CWE ID-CWE-20

Improper Input Validation

CVE-2015-3082

Matching Score-8

Matching Score-8

CVSS Score-6.4||MEDIUM

EPSS-19.91% / 95.24%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allow remote attackers to bypass intended restrictions on filesystem write operations via unspecified vectors, a different vulnerability than CVE-2015-3083 and CVE-2015-3085.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2015-3083

Matching Score-8

Matching Score-8

CVSS Score-6.4||MEDIUM

EPSS-19.91% / 95.24%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2015-3085

Matching Score-8

Matching Score-8

CVSS Score-6.4||MEDIUM

EPSS-6.01% / 90.33%

7 Day CHG~0.00%

Published-13 May, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x n/a

CVE-2018-12015

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-7.71% / 91.54%

7 Day CHG~0.00%

Published-07 Jun, 2018 | 13:00

Updated-05 Aug, 2024 | 08:24

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.

Vendor-archive\perl n/a Apple Inc.Canonical Ltd.Debian GNU/Linux NetApp, Inc.

Product-ubuntu_linux snapdrive debian_linux \perl mac_os_x data_ontap_edge snap_creator_framework oncommand_workflow_automation n/a

CWE ID-CWE-59

Improper Link Resolution Before File Access ('Link Following')

CVE-2008-3630

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-1.04% / 76.51%

7 Day CHG~0.00%

Published-10 Sep, 2008 | 16:00

Updated-07 Aug, 2024 | 09:45

mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-bonjour windows_vista windows_2003_server windows_xp windows-nt windows_2000 n/a

CVE-2020-9920

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.70% / 70.99%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 18:04

Updated-04 Aug, 2024 | 10:43

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary mail files.

Vendor-Apple Inc.

Product-iphone_os watchos mac_os_x ipados watchOS macOS iOS

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2020-9782

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.49% / 64.38%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 20:42

Updated-04 Aug, 2024 | 10:43

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A remote attacker may be able to overwrite existing files.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2012-1929

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-1.04% / 76.51%

7 Day CHG~0.00%

Published-28 Mar, 2012 | 01:00

Updated-11 Apr, 2025 | 00:51

Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content area.

Vendor-n/a Apple Inc.Opera

Product-mac_os_x opera_browser n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2005-3706

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-1.49% / 80.27%

7 Day CHG~0.00%

Published-02 Mar, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute arbitrary code by causing an application that uses LibSystem to request a large amount of memory.

Vendor-n/a Apple Inc.

CVE-2012-3732

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.4||MEDIUM

EPSS-0.58% / 68.06%

7 Day CHG~0.00%

Published-20 Sep, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote attackers to spoof signed content via an e-mail message in which the From field does not match the signer's identity.

Vendor-n/a Apple Inc.

Product-iphone_os n/a

CVE-2021-44224

Matching Score-8

Assigner-Apache Software Foundation

Vendor-Tenable, Inc.The Apache Software Foundation Apple Inc.Fedora Project Debian GNU/Linux Oracle Corporation

Matching Score-8

Assigner-Apache Software Foundation

CVSS Score-8.2||HIGH

EPSS-6.25% / 90.52%

7 Day CHG~0.00%

Published-20 Dec, 2021 | 11:20

Updated-04 Aug, 2024 | 04:17

Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

Product-http_server communications_operations_monitor debian_linux instantis_enterprisetrack fedora communications_session_route_manager mac_os_x tenable.sc communications_session_report_manager macos communications_element_manager Apache HTTP Server

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2012-0584

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.4||MEDIUM

EPSS-0.58% / 68.06%

7 Day CHG~0.00%

Published-12 Mar, 2012 | 21:00

Updated-11 Apr, 2025 | 00:51

The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.

Product-windows safari n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2006-0387

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-10.60% / 92.98%

7 Day CHG~0.00%

Published-06 Mar, 2006 | 20:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504.

Vendor-n/a Apple Inc.

CVE-2009-0164

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-4.05% / 88.05%

7 Day CHG~0.00%

Published-24 Apr, 2009 | 15:00

Updated-07 Aug, 2024 | 04:24

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.

Vendor-n/a Apple Inc.

Product-cups n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-0054

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.4||MEDIUM

EPSS-1.39% / 79.54%

7 Day CHG~0.00%

Published-18 Mar, 2008 | 23:00

Updated-07 Aug, 2024 | 07:32

Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the NSSelectorFromString API, which causes an "unexpected selector" to be used.

Vendor-n/a Apple Inc.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-1840

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.71% / 81.55%

7 Day CHG+0.68%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-2210

Matching Score-6

Assigner-Symantec - A Division of Broadcom

Matching Score-6

Assigner-Symantec - A Division of Broadcom

CVSS Score-7.3||HIGH

EPSS-29.05% / 96.40%

7 Day CHG~0.00%

Published-30 Jun, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code via a crafted file.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1847

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.75% / 72.18%

7 Day CHG-0.10%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27851

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.40%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:47

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari visionos macos visionOS iOS and iPadOS tvOS macOS Safari watchOS safari tvos iphone_os visionos watchos mac_os

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1828

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-5.15% / 89.48%

7 Day CHG-4.49%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os watchos tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1804

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 55.92%

7 Day CHG-0.31%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2833

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.78% / 81.93%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2831

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-7.6||HIGH

EPSS-1.20% / 78.04%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

Vendor-n/a Apple Inc.

Product-itunes webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3460

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-1.86% / 82.30%

7 Day CHG~0.00%

Published-02 Feb, 2012 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG file.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2869

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.25%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3252

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.69% / 90.86%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.

Product-windows_7 windows_xp itunes windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1792

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 44.03%

7 Day CHG-0.15%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2870

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.25%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4634

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 36.33%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1748

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-4.3||MEDIUM

EPSS-13.40% / 93.92%

7 Day CHG~0.00%

Published-17 Jun, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) character without two subsequent hex characters, which allows context-dependent attackers to obtain sensitive information from cupsd process memory via a crafted request, as demonstrated by the (1) /admin?OP=redirect&URL=% and (2) /admin?URL=/admin/&OP=% URIs.

Vendor-n/a Apple Inc.

Product-cups mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2809

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-7.6||HIGH

EPSS-1.02% / 76.24%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-itunes webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1783

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.92% / 89.21%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle dynamic modification of a text node, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4090

Matching Score-6

Matching Score-6

CVSS Score-9.8||CRITICAL

EPSS-3.31% / 86.74%

7 Day CHG~0.00%

Published-11 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1037, CVE-2016-1063, CVE-2016-1064, CVE-2016-1071, CVE-2016-1072, CVE-2016-1073, CVE-2016-1074, CVE-2016-1076, CVE-2016-1077, CVE-2016-1078, CVE-2016-1080, CVE-2016-1081, CVE-2016-1082, CVE-2016-1083, CVE-2016-1084, CVE-2016-1085, CVE-2016-1086, CVE-2016-1088, CVE-2016-1093, CVE-2016-1095, CVE-2016-1116, CVE-2016-1118, CVE-2016-1119, CVE-2016-1120, CVE-2016-1123, CVE-2016-1124, CVE-2016-1125, CVE-2016-1126, CVE-2016-1127, CVE-2016-1128, CVE-2016-1129, CVE-2016-1130, CVE-2016-4088, CVE-2016-4089, CVE-2016-4093, CVE-2016-4094, CVE-2016-4096, CVE-2016-4097, CVE-2016-4098, CVE-2016-4099, CVE-2016-4100, CVE-2016-4101, CVE-2016-4103, CVE-2016-4104, and CVE-2016-4105.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4768

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.98% / 75.76%

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4767.

Vendor-n/a Apple Inc.Microsoft Corporation

Product-itunes safari windows iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4733

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.82% / 73.41%

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4208

Matching Score-6

Matching Score-6

CVSS Score-9.8||CRITICAL

EPSS-15.08% / 94.31%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4191, CVE-2016-4192, CVE-2016-4193, CVE-2016-4194, CVE-2016-4195, CVE-2016-4196, CVE-2016-4197, CVE-2016-4198, CVE-2016-4199, CVE-2016-4200, CVE-2016-4201, CVE-2016-4202, CVE-2016-4203, CVE-2016-4204, CVE-2016-4205, CVE-2016-4206, CVE-2016-4207, CVE-2016-4211, CVE-2016-4212, CVE-2016-4213, CVE-2016-4214, CVE-2016-4250, CVE-2016-4251, CVE-2016-4252, and CVE-2016-4254.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_dc reader windows acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4589

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.48%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.

Vendor-n/a Apple Inc.

Product-safari iphone_os tvos webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2813

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-7.6||HIGH

EPSS-1.20% / 78.04%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-itunes webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4700

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.40%

7 Day CHG~0.00%

Published-25 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2873

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-9.3||HIGH

EPSS-1.85% / 82.25%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-iphone_os itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-3238

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.6||HIGH

EPSS-1.39% / 79.59%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Apple Inc.

Product-itunes webkit n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-1785

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-7.56% / 91.44%

7 Day CHG~0.00%

Published-30 Jul, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1746

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 45.50%

7 Day CHG~0.00%

Published-24 Mar, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2016-1846

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.00% / 76.03%

7 Day CHG-0.91%

Published-20 May, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2209

Matching Score-6

Matching Score-6