ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.securitytracker.com/id?1023708

Resource:

vdb-entry

x_refsource_SECTRACK

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://support.apple.com/kb/HT4225

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://support.apple.com/kb/HT4070

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.securityfocus.com/bid/38671

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Resource:

vendor-advisory

x_refsource_FEDORA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	vendor-advisory x_refsource_MANDRIVA x_transferred
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.vupen.com/english/advisories/2010/2722	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.ubuntu.com/usn/USN-1006-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.securitytracker.com/id?1023708	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/41856	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
http://support.apple.com/kb/HT4225	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html	vendor-advisory x_refsource_FEDORA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053	vdb-entry signature x_refsource_OVAL x_transferred
http://support.apple.com/kb/HT4070	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.vupen.com/english/advisories/2011/0552	vdb-entry x_refsource_VUPEN x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.securityfocus.com/bid/38671	vdb-entry x_refsource_BID x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html	vendor-advisory x_refsource_FEDORA x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.securitytracker.com/id?1023708

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://support.apple.com/kb/HT4225

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://support.apple.com/kb/HT4070

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.securityfocus.com/bid/38671

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:15 Mar, 2010 | 13:28

Updated At:29 Apr, 2026 | 01:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions up to 4.0.4(inclusive)

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*

>>safari>>4.0

cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*

>>safari>>4.0.0b

cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*

>>safari>>4.0.1

cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*

>>safari>>4.0.2

cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*

>>safari>>4.0.3

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

Evaluator Description

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html 'WebKit CVE-ID: CVE-2010-0046 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later, Windows 7, Vista, XP Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue exists in WebKit's handling of CSS format() arguments. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. This issue is addressed through improved handling of CSS format() arguments. Credit to Robert Swiecki of Google Inc. for reporting this issue.'

Evaluator Solution

Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html 'Safari 4.0.5 is available via the Apple Software Update application, or Apple's Safari download site at: http://www.apple.com/safari/download/'

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html	product-security@apple.com	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html	product-security@apple.com	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html	product-security@apple.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	product-security@apple.com	N/A
http://secunia.com/advisories/41856	product-security@apple.com	N/A
http://secunia.com/advisories/43068	product-security@apple.com	N/A
http://support.apple.com/kb/HT4070	product-security@apple.com	Vendor Advisory
http://support.apple.com/kb/HT4225	product-security@apple.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	product-security@apple.com	N/A
http://www.securityfocus.com/bid/38671	product-security@apple.com	Patch
http://www.securitytracker.com/id?1023708	product-security@apple.com	N/A
http://www.ubuntu.com/usn/USN-1006-1	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2010/2722	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0212	product-security@apple.com	N/A
http://www.vupen.com/english/advisories/2011/0552	product-security@apple.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053	product-security@apple.com	N/A
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/41856	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/43068	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT4070	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT4225	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/38671	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.securitytracker.com/id?1023708	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-1006-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/2722	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0212	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0552	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4070

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4225

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38671

Source: product-security@apple.com

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1023708

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053

Source: product-security@apple.com

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT4070

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT4225

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38671

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1023708

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.ubuntu.com/usn/USN-1006-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/2722

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0552

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

2479Records found

CVE-2015-1061

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.41% / 90.20%

7 Day CHG~0.00%

Published-12 Mar, 2015 | 10:00

Updated-06 May, 2026 | 22:30

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.

Vendor-n/a Apple Inc.

Product-tvos iphone_os mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5332

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.43% / 91.80%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0014

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-52.27% / 97.94%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Product-windows_7 mac_os_x windows_server_2008 windows_vista .net_framework windows_xp silverlight windows windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-2101

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-14.53% / 94.51%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3808

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.15% / 84.37%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3809

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.37% / 85.07%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1770

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.18% / 88.78%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

Vendor-n/a Canonical Ltd.Apple Inc.openSUSE Google LLC SUSE Microsoft Corporation

Product-webkit ubuntu_linux windows_7 mac_os_x suse_linux_enterprise_server windows_vista windows_xp safari chrome suse_linux_enterprise_desktop mac_os_x_server opensuse n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-2208

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-2.99% / 86.64%

7 Day CHG~0.00%

Published-30 Jun, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-2205

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-7.95% / 92.11%

7 Day CHG~0.00%

Published-30 Jun, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1177

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-10.81% / 93.41%

7 Day CHG+2.55%

Published-29 Mar, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving document.write calls with long crafted strings.

Vendor-n/a Apple Inc.

Product-iphone_os safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0195

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-18.13% / 95.23%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0647

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-10.17% / 93.17%

7 Day CHG~0.00%

Published-18 Feb, 2010 | 17:19

Updated-29 Apr, 2026 | 01:13

WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.

Vendor-n/a Google LLC Apple Inc.

Product-chrome webkit n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1180

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-15.14% / 94.65%

7 Day CHG+3.41%

Published-29 Mar, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514.

Vendor-n/a Apple Inc.

Product-iphone_os safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0043

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-16.21% / 94.86%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 20:00

Updated-29 Apr, 2026 | 01:13

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image.

Product-windows safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0019

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-21.63% / 95.77%

7 Day CHG~0.00%

Published-11 Aug, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka "Microsoft Silverlight Memory Corruption Vulnerability."

Product-silverlight mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-1712

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.82% / 89.57%

7 Day CHG~0.00%

Published-10 Jun, 2009 | 17:37

Updated-23 Apr, 2026 | 00:35

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.

Vendor-n/a Apple Inc.

Product-safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-1698

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.78% / 92.01%

7 Day CHG~0.00%

Published-10 Jun, 2009 | 17:37

Updated-23 Apr, 2026 | 00:35

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Vendor-n/a Apple Inc.

Product-ipod_touch iphone_os safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-1704

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.36% / 85.05%

7 Day CHG~0.00%

Published-10 Jun, 2009 | 17:37

Updated-23 Apr, 2026 | 00:35

CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file.

Vendor-n/a Apple Inc.

Product-safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-0955

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-23.45% / 96.01%

7 Day CHG~0.00%

Published-02 Jun, 2009 | 18:00

Updated-23 Apr, 2026 | 00:35

Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a "sign extension issue."

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-3638

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.86% / 83.21%

7 Day CHG~0.00%

Published-26 Sep, 2008 | 16:00

Updated-23 Apr, 2026 | 00:35

Java on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs, which allows remote attackers to execute arbitrary programs.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-0043

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.88% / 89.64%

7 Day CHG~0.00%

Published-08 Feb, 2008 | 01:00

Updated-23 Apr, 2026 | 00:35

Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions.

Vendor-n/a Apple Inc.

Product-iphoto n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-5045

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.05% / 83.98%

7 Day CHG~0.00%

Published-24 Sep, 2007 | 00:00

Updated-23 Apr, 2026 | 00:35

Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter containing the Firefox "-chrome" argument. NOTE: this is a related issue to CVE-2006-4965 and the result of an incomplete fix for CVE-2007-3670.

Vendor-n/a Mozilla Corporation Apple Inc.

Product-firefox quicktime n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5331

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-87.37% / 99.46%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Vendor-n/a Apple Inc.Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x windows flash_player air_sdk air linux_kernel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1415

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-31.85% / 96.84%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 17:28

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to an "API abuse issue."

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1898

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-35.27% / 97.08%

7 Day CHG~0.00%

Published-11 Aug, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability."

Product-silverlight windows mac_os_x .net_framework n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-1176

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-11.73% / 93.75%

7 Day CHG~0.00%

Published-29 Mar, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to an array of long strings, an array of IMG elements with crafted strings in their SRC attributes, a TBODY element with no associated TABLE element, and certain calls to the delete operator and the cloneNode, clearAttributes, and CollectGarbage methods, possibly a related issue to CVE-2009-0075.

Vendor-n/a Apple Inc.

Product-iphone_os safari n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0671

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-6.21% / 90.95%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1535

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-91.61% / 99.69%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 10:00

Updated-22 Apr, 2026 | 10:36

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

Product-linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player linux_kernel opensuse n/a Flash Player

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-0191

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-18.13% / 95.23%

7 Day CHG~0.00%

Published-14 Apr, 2010 | 15:44

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3819

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.58% / 85.67%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-0945

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-15.33% / 94.69%

7 Day CHG~0.00%

Published-13 May, 2009 | 17:00

Updated-23 Apr, 2026 | 00:35

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

Product-mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-0754

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-9.97% / 93.10%

7 Day CHG~0.00%

Published-14 May, 2007 | 21:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor (STSD) atom size in a QuickTime movie.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2020-29612

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 49.78%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:39

Updated-04 Aug, 2024 | 16:55

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27921

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7||HIGH

EPSS-0.18% / 39.69%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:31

Updated-04 Aug, 2024 | 16:25

A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2020-27917

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.71% / 72.39%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:12

Updated-04 Aug, 2024 | 16:25

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos macos icloud watchOS tvOS macOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

CVE-2020-27907

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.26%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:28

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27912

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.99% / 76.98%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:10

Updated-04 Aug, 2024 | 16:25

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos macos icloud watchOS tvOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27915

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.26%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:30

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27916

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.62% / 70.23%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:12

Updated-04 Aug, 2024 | 16:25

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos watchOS tvOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2007-0731

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-3.53% / 87.74%

7 Day CHG~0.00%

Published-13 Mar, 2007 | 22:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS X 10.4 through 10.4.8 allows context-dependent attackers to execute arbitrary code via a long ACL.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a

CVE-2020-27941

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 45.87%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:35

Updated-04 Aug, 2024 | 16:25

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CVE-2020-27903

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.33% / 55.92%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:07

Updated-04 Aug, 2024 | 16:25

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges.

Vendor-Apple Inc.

Product-macos macOS

CVE-2007-0712

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-28.11% / 96.52%

7 Day CHG~0.00%

Published-05 Mar, 2007 | 22:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MIDI file.

Product-windows quicktime mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-27926

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 65.02%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:12

Updated-04 Aug, 2024 | 16:25

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-416

Use After Free

CVE-2020-27932

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-12.77% / 94.06%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:13

Updated-27 Oct, 2025 | 17:38

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-mac_os_x itunes icloud watchos ipados macos iphone_os watchOS iOS and iPadOS macOS Multiple Products

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-27909

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.52% / 66.96%

7 Day CHG~0.00%

Published-08 Dec, 2020 | 20:09

Updated-04 Aug, 2024 | 16:25

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos watchOS tvOS iOS and iPadOS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-27914

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 46.26%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:30

Updated-04 Aug, 2024 | 16:25

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-27947

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.65%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:37

Updated-04 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-1030

Matching Score-8

Assigner-Okta

Matching Score-8

Assigner-Okta

CVSS Score-8.8||HIGH

EPSS-0.36% / 58.27%

7 Day CHG~0.00%

Published-23 Mar, 2022 | 19:46

Updated-02 Aug, 2024 | 23:47

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.

Vendor-okta Okta Linux Kernel Organization, Inc Apple Inc.

Product-macos advanced_server_access linux_kernel Advanced Server Access Client

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2020-27905

Matching Score-8

Assigner-Apple Inc.