Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2012-4924

Summary
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At-15 Sep, 2012 | 17:00
Updated At-06 Aug, 2024 | 20:50
Rejected At-
Credits

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:mitre
Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca
Published At:15 Sep, 2012 | 17:00
Updated At:06 Aug, 2024 | 20:50
Rejected At:
▼CVE Numbering Authority (CNA)

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://secunia.com/advisories/48125
third-party-advisory
x_refsource_SECUNIA
http://www.securityfocus.com/bid/52110
vdb-entry
x_refsource_BID
http://osvdb.org/79438
vdb-entry
x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
vdb-entry
x_refsource_XF
http://www.exploit-db.com/exploits/18538
exploit
x_refsource_EXPLOIT-DB
http://dsecrg.com/pages/vul/show.php?id=417
x_refsource_MISC
Hyperlink: http://secunia.com/advisories/48125
Resource:
third-party-advisory
x_refsource_SECUNIA
Hyperlink: http://www.securityfocus.com/bid/52110
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://osvdb.org/79438
Resource:
vdb-entry
x_refsource_OSVDB
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
Resource:
vdb-entry
x_refsource_XF
Hyperlink: http://www.exploit-db.com/exploits/18538
Resource:
exploit
x_refsource_EXPLOIT-DB
Hyperlink: http://dsecrg.com/pages/vul/show.php?id=417
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://secunia.com/advisories/48125
third-party-advisory
x_refsource_SECUNIA
x_transferred
http://www.securityfocus.com/bid/52110
vdb-entry
x_refsource_BID
x_transferred
http://osvdb.org/79438
vdb-entry
x_refsource_OSVDB
x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
vdb-entry
x_refsource_XF
x_transferred
http://www.exploit-db.com/exploits/18538
exploit
x_refsource_EXPLOIT-DB
x_transferred
http://dsecrg.com/pages/vul/show.php?id=417
x_refsource_MISC
x_transferred
Hyperlink: http://secunia.com/advisories/48125
Resource:
third-party-advisory
x_refsource_SECUNIA
x_transferred
Hyperlink: http://www.securityfocus.com/bid/52110
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://osvdb.org/79438
Resource:
vdb-entry
x_refsource_OSVDB
x_transferred
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
Resource:
vdb-entry
x_refsource_XF
x_transferred
Hyperlink: http://www.exploit-db.com/exploits/18538
Resource:
exploit
x_refsource_EXPLOIT-DB
x_transferred
Hyperlink: http://dsecrg.com/pages/vul/show.php?id=417
Resource:
x_refsource_MISC
x_transferred
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:cve@mitre.org
Published At:15 Sep, 2012 | 17:55
Updated At:29 Apr, 2026 | 01:13

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.09.3HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 9.3
Base severity: HIGH
Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
CPE Matches
ASUS (ASUSTeK Computer Inc.)
asus
>>ipswcom_activex_component>>1.0.0.1
cpe:2.3:a:asus:ipswcom_activex_component:1.0.0.1:*:*:*:*:*:*:*
ASUS (ASUSTeK Computer Inc.)
asus
>>net4switch>>1.0.0020
cpe:2.3:a:asus:net4switch:1.0.0020:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-119Primarynvd@nist.gov
CWE ID: CWE-119
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://dsecrg.com/pages/vul/show.php?id=417cve@mitre.org
N/A
http://osvdb.org/79438cve@mitre.org
N/A
http://secunia.com/advisories/48125cve@mitre.org
Vendor Advisory
http://www.exploit-db.com/exploits/18538cve@mitre.org
Exploit
http://www.securityfocus.com/bid/52110cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384cve@mitre.org
N/A
http://dsecrg.com/pages/vul/show.php?id=417af854a3a-2127-422b-91ae-364da2661108
N/A
http://osvdb.org/79438af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/48125af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.exploit-db.com/exploits/18538af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/bid/52110af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/73384af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://dsecrg.com/pages/vul/show.php?id=417
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://osvdb.org/79438
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/48125
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.exploit-db.com/exploits/18538
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://www.securityfocus.com/bid/52110
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://dsecrg.com/pages/vul/show.php?id=417
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://osvdb.org/79438
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://secunia.com/advisories/48125
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.exploit-db.com/exploits/18538
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://www.securityfocus.com/bid/52110
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73384
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

2682Records found
CVE-2015-6949
Matching Score-10
Assigner-MITRE Corporation
ShareView Details
Matching Score-10
Assigner-MITRE Corporation
CVSS Score-9.3||HIGH
EPSS-7.02% / 93.47%
||
7 Day CHG~0.00%
Published-15 Sep, 2015 | 18:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-tm-1900n/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2017-15655
Matching Score-10
Assigner-MITRE Corporation
ShareView Details
Matching Score-10
Assigner-MITRE Corporation
CVSS Score-9.6||CRITICAL
EPSS-3.09% / 86.27%
||
7 Day CHG~0.00%
Published-31 Jan, 2018 | 20:00
Updated-05 Aug, 2024 | 19:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-asuswrtn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2013-3093
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-8.8||HIGH
EPSS-0.74% / 50.51%
||
7 Day CHG~0.00%
Published-28 Jan, 2020 | 20:13
Updated-06 Aug, 2024 | 16:00
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

ASUS RT-N56U devices allow CSRF.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-rt-n53rt-n10udsl-n55urt-n15urt-n16rt-ac66urt-n56urt-ac66u_firmwarert-n10u_firmwarert-n53_firmwarert-n16_firmwarert-n56u_firmwaredsl-n55u_firmwarert-n15u_firmwaren/a
CWE ID-CWE-352
Cross-Site Request Forgery (CSRF)
CVE-2017-6549
Matching Score-8
Assigner-MITRE Corporation
ShareView Details
Matching Score-8
Assigner-MITRE Corporation
CVSS Score-8.8||HIGH
EPSS-7.55% / 93.85%
||
7 Day CHG~0.00%
Published-09 Mar, 2017 | 09:26
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-rt-ac53rt-ac53_firmwaren/a
CWE ID-CWE-287
Improper Authentication
CVE-2013-6343
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-10||HIGH
EPSS-8.55% / 94.46%
||
7 Day CHG~0.00%
Published-22 Jan, 2014 | 02:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-tm-ac1900rt-ac66urt-ac66u_firmwarert-n56urt-n56u_firmwaretm-ac1900_firmwaren/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2013-4659
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-9.8||CRITICAL
EPSS-13.92% / 96.13%
||
7 Day CHG~0.00%
Published-14 Mar, 2017 | 09:02
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU.

Action-Not Available
Vendor-n/aTRENDnet, Inc.ASUS (ASUSTeK Computer Inc.)
Product-tew-812drurt-ac66u_firmwarert-ac66utew-812dru_firmwaren/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2018-14712
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-6.5||MEDIUM
EPSS-4.23% / 89.91%
||
7 Day CHG~0.00%
Published-13 May, 2019 | 12:21
Updated-05 Aug, 2024 | 09:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-rt-ac3200_firmwarert-ac3200n/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2017-6548
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-9.8||CRITICAL
EPSS-21.34% / 97.33%
||
7 Day CHG~0.00%
Published-09 Mar, 2017 | 09:26
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-rt-ac53rt-ac53_firmwaren/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2017-5712
Matching Score-6
Assigner-Intel Corporation
ShareView Details
Matching Score-6
Assigner-Intel Corporation
CVSS Score-7.2||HIGH
EPSS-4.41% / 90.27%
||
7 Day CHG~0.00%
Published-21 Nov, 2017 | 14:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.

Action-Not Available
Vendor-Intel CorporationASUS (ASUSTeK Computer Inc.)Siemens AG
Product-z170-arz170_pro_gamingprime_b250m-aex-b250m-v3z170m-plusb250_mining_expert_firmwaresimatic_field_pg_m5_firmwareprime_z370-aprime_b250-ab150m_pro_gaming_firmwarerog_maximus_viii_formulasimatic_ipc827dprime_b250m-d_firmwarerog_maximus_ix_extremeb150m-a_d3_firmwareprime_b250m-j_firmwareb250-mrh110i-plus_firmwarerog_maximus_viii_hero_alphasimotion_p320-4sz170_pro_gaming\/aurah110m-c_firmwarerog_maximus_x_codeh110m-k_xsimatic_ipc677cex-b250-v7_firmwarez170-kb150m-k_d3rog_strix_z370-e_gaming_firmwarerog_maximus_viii_geneh170-plus_d3b150m_pro_gamingh110m-d_firmwareh170-pro_firmwarerog_maximus_viii_rangerh110m-p\/dvi_firmwareh110m-c\/psz170-premiumsinumerik_pcu50.5-c_firmwareb150_pro_gaming_d3h110m-p\/dvirog_strix_z370-i_gaming_firmwareh110m-c\/ps_firmwareh170-prob150m-k_d3_firmwarerog_maximus_x_formula_firmwareq170m-cm-bz170-e_firmwarerog_maximus_x_formulah170i-proz170-ph110-plus_firmwareh110m-k_d3_firmwarez170m-plus\/br_firmwareb150-prob250m-c_pro_firmwarerog_strix_h270f_gamingprime_h270-proex-b150-v7rog_maximus_viii_hero_alpha_firmwareh110s2_firmwaresimatic_ipc677db250_mining_expertb150m-plus_d3rog_maximus_ix_formula_firmwareb150m-plus_firmwareb150i_pro_gaming\/wifi\/aurab150-a_firmwareprime_z270-a_firmwareb150m-c_d3b150m-v_plus_firmwareh110m-ksrog_strix_z370-h_gamingex-b150-v7_firmwareh110m-k_firmwarerog_strix_z270i_gaming_firmwareh170-plus_d3_firmwarerog_strix_z270g_gaming_firmwareprime_h270m-plus_firmwarerog_strix_b250g_gamingrog_strix_z270h_gamingex-b150m-v_firmwareprime_h110m2z170_pro_gaming_firmwareh110m-cprime_q270m-cb150-pro_d3b150_pro_gamingsimatic_ipc477ez170-deluxesimatic_ipc547db150i_pro_gaming\/auraz170-k_firmwareh170m-plus_firmwareactive_management_technology_firmwareh110m-c2_firmwareex-b250m-v3_firmwarerog_strix_b250h_gamingsimatic_ipc477d_pro_firmwarez170m-e_d3_firmwareh110tq270m-cm-ah110m-a\/m.2_firmwareprime_b250m-plus_firmwareb150m-plusprime_q270m-c_firmwareh110t-a_firmwareh110m-r_firmwareb250-sq170s1h170-pro\/usb_3.1z170-eprime_b250m-plusq170m2\/cdm\/siex-b150m-v3sinumerik_pcu50.5-p_firmwareh170m-plusprime_b250m-k_firmwareex-b250m-v5_firmwareb150m-c_d3_firmwareprime_z270m-plus_firmwareb150-ab150-plussimatic_ipc627c_firmwareh110m-a_d3_firmwarerog_strix_b250g_gaming_firmwaresimatic_field_pg_m3rog_strix_z370-g_gaming_firmwareh170m-e_d3_firmwareb150m-c\/brprime_z270-psimatic_ipc647dz170i_pro_gaming_firmwareh110m-tsz170m-plus_firmwareex-h110m-v3_firmwareh110m-e_firmwareh110t-ah110m-e\/m.2h110m-k_d3h110m-cs\/brrog_strix_z370-f_gaming_firmwarerog_strix_z370-e_gamingh110s1z170m-e_d3simatic_field_pg_m3_firmwarerog_maximus_viii_herob150m-c\/br_firmwarerog_maximus_viii_formula_firmwareh110m-c2rog_maximus_viii_impactb150m-aq170th110m-ez170-premium_firmwarez170-pro_firmwarerog_maximus_ix_herosabertooth_z170_mark_1_firmwarepio-b150m_firmwaretrooper_h110_d3_firmwareprime_z370-pz170_pro_gaming\/aura_firmwareh110m-a_d3rog_strix_z370-g_gamingtuf_z270_mark_1_firmwareprime_b250-plus_firmwareprime_z370-a_firmwarerog_strix_b250h_gaming_firmwareprime_b250m-a_firmwarerog_strix_b250f_gaming_firmwarerog_strix_h270i_gaming_firmwaresimatic_ipc427d_firmwareprime_h270m-plussimatic_field_pg_m4b150_pro_gaming\/aura_firmwarerog_maximus_ix_coderog_strix_h270f_gaming_firmwaretuf_z270_mark_1simatic_field_pg_m5h110m-cs\/br_firmwareb150_pro_gaming\/auraprime_b250-pro_firmwarez170-ar_firmwaresimatic_ipc827csimatic_ipc427dz170i_pro_gamingrog_maximus_x_code_firmwareq170t_firmwareh110m-cssimatic_ipc427e_firmwarez170-p_firmwarerog_strix_z270e_gaming_firmwaresimatic_ipc477d_proprime_z270-arrog_strix_z270h_gaming_firmwareprime_h270-pro_firmwareq170m2\/cdm\/si_firmwareb150m-k_firmwareprime_b250m-plus\/br_firmwareb150_pro_gaming_firmwareh170m-plus\/brb150m-a\/m.2_firmwareh110m-d\/exper\/sib250-mr_firmwarez170-p_d3prime_h110m2_firmwareh170m-e_d3h110m-fh110m-cs_x_firmwareh110m-e\/m.2_firmwarerog_strix_z270f_gamingex-h110m-v_firmwaresimatic_itp1000prime_h110m2\/fpt_firmwaresimatic_ipc627db150m-d_firmwarerog_maximus_x_herotuf_z370-plus_gamingb150m-f_plus_firmwareb250-s_firmwaresinumerik_pcu50.5-crog_strix_z270e_gamingrog_strix_z270h_gaming\/k1_firmwareprime_z270-ar_firmwaresimatic_ipc627csinumerik_pcu50.5-pex-h110m-v3prime_z270m-plush170m-plus\/br_firmwaretuf_z270_mark_2_firmwareb250m-f_plustuf_z370-plus_gaming_firmwareprime_b250m-dq170m-c_firmwaretuf_z370-pro_gaming_firmwarerog_strix_b250i_gaming_firmwareprime_b250-a_firmwareh110m-ks_firmwareh110s2h110m-c2\/tf_firmwareh110m-c\/br_firmwareh110m-cs_firmwareq270m-cm-a_firmwarerog_maximus_viii_hero_firmwareh170_pro_gaming_firmwaresimatic_ipc847d_firmwareh110m-ks_r1_firmwareh110m-rprime_b250-plush110s1_firmwaresimatic_ipc847c_firmwarez170-arog_maximus_viii_extreme_firmwareprime_h110m2\/fptprime_j3355i-c_firmwarerog_strix_z270i_gamingq170m-cm-b_firmwaresabertooth_z170_s_firmwaresimatic_ipc847dtrooper_b150_d3q170t_v2_firmwarerog_strix_b250f_gamingb250m-c_proz170-a_firmwarerog_maximus_viii_gene_firmwareex-b150m-v3_firmwareq170s1_firmwareex-b250m-v5b150-plus_firmwareb150_pro_gaming_d3_firmwareb150m-v_plush170i-pro_firmwareb150-pro_d3_firmwareb150i_pro_gaming\/aura_firmwaretrooper_b150_d3_firmwareh110m-c\/hdmi_firmwareh110m-f_firmwarerog_maximus_viii_extremeh110m-ks_r1rog_maximus_ix_hero_firmwareb150m-drog_maximus_x_apexb150m-kh170-pro\/usb_3.1_firmwareh110m-a\/dp_firmwareprime_b250m-plus\/brsimotion_p320-4s_firmwareh110m-cs_xsimatic_ipc827c_firmwarerog_maximus_ix_apex_firmwareh110m-a\/dpb150m-cex-h110m-vsimatic_ipc477e_firmwaresabertooth_z170_sprime_j3355i-csimatic_ipc477dprime_h270-plussabertooth_z170_mark_1h110m-c\/hdmirog_maximus_ix_extreme_firmwaresimatic_ipc677d_firmwaresimatic_ipc547erog_maximus_x_apex_firmwareex-b150m-vh110-pluspio-b250i_firmwareprime_h270-plus_firmwareprime_b250m-ch110m-ktuf_z270_mark_2b150m-c_firmwareprime_h110m-psimatic_ipc477d_firmwareex-b150m-v5manageability_engine_firmwaresimatic_ipc647ctuf_z370-pro_gamingq170t_v2rog_strix_z270f_gaming_firmwaresimatic_ipc427eq170m2_firmwarerog_strix_h270i_gamingq270-s_firmwareb150m-a_d3h110m-ts_firmwarepio-b250ih110m-k_x_firmwaresimatic_ipc547d_firmwarerog_maximus_viii_impact_firmwareex-b250m-v_firmwareq170m2b250m-f_plus_firmwareh110m-plusrog_maximus_x_hero_firmwarerog_maximus_viii_ranger_firmwareprime_z270m-plus\/brprime_b250-proprime_z270m-plus\/br_firmwarerog_strix_z370-h_gaming_firmwaretrooper_h110_d3rog_maximus_ix_apexprime_z270-k_firmwareh110m-c\/brsimatic_ipc827d_firmwareprime_h110m-p_firmwarez170-p_d3_firmwareq270-srog_strix_b250i_gamingq170m-cz170-proh110m-ab150-pro_firmwareb150m-a_firmwarerog_strix_z370-i_gamingsimatic_ipc547e_firmwareprime_b250m-kb150m-plus_d3_firmwareh110m-a_firmwaresimatic_ipc847cex-b250-v7rog_maximus_ix_formulaz170-deluxe_firmwareprime_z370-p_firmwareh110i-plush110m-d\/exper\/si_firmwarerog_strix_z370-f_gamingrog_strix_z270g_gamingsimatic_ipc647d_firmwareprime_b250m-c_firmwaresimatic_ipc677c_firmwareh110m-drog_strix_z270h_gaming\/k1prime_b250m-jb150m-f_plusex-b250m-vprime_z270-ksimatic_ipc647c_firmwarez170m-plus\/brsimatic_itp1000_firmwaresimatic_field_pg_m4_firmwareprime_z270-p_firmwarerog_maximus_ix_code_firmwareex-b150m-v5_firmwareh170_pro_gamingh110m-plus_firmwareh110m-a\/m.2pio-b150mh110t_firmwareh110m-c2\/tfsimatic_ipc627d_firmwareb150i_pro_gaming\/wifi\/aura_firmwareb150m-a\/m.2prime_z270-aActive Management Technology
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2017-5711
Matching Score-6
Assigner-Intel Corporation
ShareView Details
Matching Score-6
Assigner-Intel Corporation
CVSS Score-7.8||HIGH
EPSS-0.57% / 43.35%
||
7 Day CHG~0.00%
Published-21 Nov, 2017 | 14:00
Updated-13 May, 2026 | 00:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.

Action-Not Available
Vendor-Intel CorporationASUS (ASUSTeK Computer Inc.)Siemens AG
Product-z170-arz170_pro_gamingprime_b250m-aex-b250m-v3z170m-plusb250_mining_expert_firmwaresimatic_field_pg_m5_firmwareprime_z370-aprime_b250-ab150m_pro_gaming_firmwarerog_maximus_viii_formulasimatic_ipc827dprime_b250m-d_firmwarerog_maximus_ix_extremeb150m-a_d3_firmwareprime_b250m-j_firmwareb250-mrh110i-plus_firmwarerog_maximus_viii_hero_alphasimotion_p320-4sz170_pro_gaming\/aurah110m-c_firmwarerog_maximus_x_codeh110m-k_xsimatic_ipc677cex-b250-v7_firmwarez170-kb150m-k_d3rog_strix_z370-e_gaming_firmwarerog_maximus_viii_geneh170-plus_d3b150m_pro_gamingh110m-d_firmwareh170-pro_firmwarerog_maximus_viii_rangerh110m-p\/dvi_firmwareh110m-c\/psz170-premiumsinumerik_pcu50.5-c_firmwareb150_pro_gaming_d3h110m-p\/dvirog_strix_z370-i_gaming_firmwareh110m-c\/ps_firmwareh170-prob150m-k_d3_firmwarerog_maximus_x_formula_firmwareq170m-cm-bz170-e_firmwarerog_maximus_x_formulah170i-proz170-ph110-plus_firmwareh110m-k_d3_firmwarez170m-plus\/br_firmwareb150-prob250m-c_pro_firmwarerog_strix_h270f_gamingprime_h270-proex-b150-v7rog_maximus_viii_hero_alpha_firmwareh110s2_firmwaresimatic_ipc677db250_mining_expertb150m-plus_d3rog_maximus_ix_formula_firmwareb150m-plus_firmwareb150i_pro_gaming\/wifi\/aurab150-a_firmwareprime_z270-a_firmwareb150m-c_d3b150m-v_plus_firmwareh110m-ksrog_strix_z370-h_gamingex-b150-v7_firmwareh110m-k_firmwarerog_strix_z270i_gaming_firmwareh170-plus_d3_firmwarerog_strix_z270g_gaming_firmwareprime_h270m-plus_firmwarerog_strix_b250g_gamingrog_strix_z270h_gamingex-b150m-v_firmwareprime_h110m2z170_pro_gaming_firmwareh110m-cprime_q270m-cb150-pro_d3b150_pro_gamingsimatic_ipc477ez170-deluxesimatic_ipc547db150i_pro_gaming\/auraz170-k_firmwareh170m-plus_firmwareactive_management_technology_firmwareh110m-c2_firmwareex-b250m-v3_firmwarerog_strix_b250h_gamingsimatic_ipc477d_pro_firmwarez170m-e_d3_firmwareh110tq270m-cm-ah110m-a\/m.2_firmwareprime_b250m-plus_firmwareb150m-plusprime_q270m-c_firmwareh110t-a_firmwareh110m-r_firmwareb250-sq170s1h170-pro\/usb_3.1z170-eprime_b250m-plusq170m2\/cdm\/siex-b150m-v3sinumerik_pcu50.5-p_firmwareh170m-plusprime_b250m-k_firmwareex-b250m-v5_firmwareb150m-c_d3_firmwareprime_z270m-plus_firmwareb150-ab150-plussimatic_ipc627c_firmwareh110m-a_d3_firmwarerog_strix_b250g_gaming_firmwaresimatic_field_pg_m3rog_strix_z370-g_gaming_firmwareh170m-e_d3_firmwareb150m-c\/brprime_z270-psimatic_ipc647dz170i_pro_gaming_firmwareh110m-tsz170m-plus_firmwareex-h110m-v3_firmwareh110m-e_firmwareh110t-ah110m-e\/m.2h110m-k_d3h110m-cs\/brrog_strix_z370-f_gaming_firmwarerog_strix_z370-e_gamingh110s1z170m-e_d3simatic_field_pg_m3_firmwarerog_maximus_viii_herob150m-c\/br_firmwarerog_maximus_viii_formula_firmwareh110m-c2rog_maximus_viii_impactb150m-aq170th110m-ez170-premium_firmwarez170-pro_firmwarerog_maximus_ix_herosabertooth_z170_mark_1_firmwarepio-b150m_firmwaretrooper_h110_d3_firmwareprime_z370-pz170_pro_gaming\/aura_firmwareh110m-a_d3rog_strix_z370-g_gamingtuf_z270_mark_1_firmwareprime_b250-plus_firmwareprime_z370-a_firmwarerog_strix_b250h_gaming_firmwareprime_b250m-a_firmwarerog_strix_b250f_gaming_firmwarerog_strix_h270i_gaming_firmwaresimatic_ipc427d_firmwareprime_h270m-plussimatic_field_pg_m4b150_pro_gaming\/aura_firmwarerog_maximus_ix_coderog_strix_h270f_gaming_firmwaretuf_z270_mark_1simatic_field_pg_m5h110m-cs\/br_firmwareb150_pro_gaming\/auraprime_b250-pro_firmwarez170-ar_firmwaresimatic_ipc827csimatic_ipc427dz170i_pro_gamingrog_maximus_x_code_firmwareq170t_firmwareh110m-cssimatic_ipc427e_firmwarez170-p_firmwarerog_strix_z270e_gaming_firmwaresimatic_ipc477d_proprime_z270-arrog_strix_z270h_gaming_firmwareprime_h270-pro_firmwareq170m2\/cdm\/si_firmwareb150m-k_firmwareprime_b250m-plus\/br_firmwareb150_pro_gaming_firmwareh170m-plus\/brb150m-a\/m.2_firmwareh110m-d\/exper\/sib250-mr_firmwarez170-p_d3prime_h110m2_firmwareh170m-e_d3h110m-fh110m-cs_x_firmwareh110m-e\/m.2_firmwarerog_strix_z270f_gamingex-h110m-v_firmwaresimatic_itp1000prime_h110m2\/fpt_firmwaresimatic_ipc627db150m-d_firmwarerog_maximus_x_herotuf_z370-plus_gamingb150m-f_plus_firmwareb250-s_firmwaresinumerik_pcu50.5-crog_strix_z270e_gamingrog_strix_z270h_gaming\/k1_firmwareprime_z270-ar_firmwaresimatic_ipc627csinumerik_pcu50.5-pex-h110m-v3prime_z270m-plush170m-plus\/br_firmwaretuf_z270_mark_2_firmwareb250m-f_plustuf_z370-plus_gaming_firmwareprime_b250m-dq170m-c_firmwaretuf_z370-pro_gaming_firmwarerog_strix_b250i_gaming_firmwareprime_b250-a_firmwareh110m-ks_firmwareh110s2h110m-c2\/tf_firmwareh110m-c\/br_firmwareh110m-cs_firmwareq270m-cm-a_firmwarerog_maximus_viii_hero_firmwareh170_pro_gaming_firmwaresimatic_ipc847d_firmwareh110m-ks_r1_firmwareh110m-rprime_b250-plush110s1_firmwaresimatic_ipc847c_firmwarez170-arog_maximus_viii_extreme_firmwareprime_h110m2\/fptprime_j3355i-c_firmwarerog_strix_z270i_gamingq170m-cm-b_firmwaresabertooth_z170_s_firmwaresimatic_ipc847dtrooper_b150_d3q170t_v2_firmwarerog_strix_b250f_gamingb250m-c_proz170-a_firmwarerog_maximus_viii_gene_firmwareex-b150m-v3_firmwareq170s1_firmwareex-b250m-v5b150-plus_firmwareb150_pro_gaming_d3_firmwareb150m-v_plush170i-pro_firmwareb150-pro_d3_firmwareb150i_pro_gaming\/aura_firmwaretrooper_b150_d3_firmwareh110m-c\/hdmi_firmwareh110m-f_firmwarerog_maximus_viii_extremeh110m-ks_r1rog_maximus_ix_hero_firmwareb150m-drog_maximus_x_apexb150m-kh170-pro\/usb_3.1_firmwareh110m-a\/dp_firmwareprime_b250m-plus\/brsimotion_p320-4s_firmwareh110m-cs_xsimatic_ipc827c_firmwarerog_maximus_ix_apex_firmwareh110m-a\/dpb150m-cex-h110m-vsimatic_ipc477e_firmwaresabertooth_z170_sprime_j3355i-csimatic_ipc477dprime_h270-plussabertooth_z170_mark_1h110m-c\/hdmirog_maximus_ix_extreme_firmwaresimatic_ipc677d_firmwaresimatic_ipc547erog_maximus_x_apex_firmwareex-b150m-vh110-pluspio-b250i_firmwareprime_h270-plus_firmwareprime_b250m-ch110m-ktuf_z270_mark_2b150m-c_firmwareprime_h110m-psimatic_ipc477d_firmwareex-b150m-v5manageability_engine_firmwaresimatic_ipc647ctuf_z370-pro_gamingq170t_v2rog_strix_z270f_gaming_firmwaresimatic_ipc427eq170m2_firmwarerog_strix_h270i_gamingq270-s_firmwareb150m-a_d3h110m-ts_firmwarepio-b250ih110m-k_x_firmwaresimatic_ipc547d_firmwarerog_maximus_viii_impact_firmwareex-b250m-v_firmwareq170m2b250m-f_plus_firmwareh110m-plusrog_maximus_x_hero_firmwarerog_maximus_viii_ranger_firmwareprime_z270m-plus\/brprime_b250-proprime_z270m-plus\/br_firmwarerog_strix_z370-h_gaming_firmwaretrooper_h110_d3rog_maximus_ix_apexprime_z270-k_firmwareh110m-c\/brsimatic_ipc827d_firmwareprime_h110m-p_firmwarez170-p_d3_firmwareq270-srog_strix_b250i_gamingq170m-cz170-proh110m-ab150-pro_firmwareb150m-a_firmwarerog_strix_z370-i_gamingsimatic_ipc547e_firmwareprime_b250m-kb150m-plus_d3_firmwareh110m-a_firmwaresimatic_ipc847cex-b250-v7rog_maximus_ix_formulaz170-deluxe_firmwareprime_z370-p_firmwareh110i-plush110m-d\/exper\/si_firmwarerog_strix_z370-f_gamingrog_strix_z270g_gamingsimatic_ipc647d_firmwareprime_b250m-c_firmwaresimatic_ipc677c_firmwareh110m-drog_strix_z270h_gaming\/k1prime_b250m-jb150m-f_plusex-b250m-vprime_z270-ksimatic_ipc647c_firmwarez170m-plus\/brsimatic_itp1000_firmwaresimatic_field_pg_m4_firmwareprime_z270-p_firmwarerog_maximus_ix_code_firmwareex-b150m-v5_firmwareh170_pro_gamingh110m-plus_firmwareh110m-a\/m.2pio-b150mh110t_firmwareh110m-c2\/tfsimatic_ipc627d_firmwareb150i_pro_gaming\/wifi\/aura_firmwareb150m-a\/m.2prime_z270-aActive Management Technology
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2008-1491
Matching Score-6
Assigner-MITRE Corporation
ShareView Details
Matching Score-6
Assigner-MITRE Corporation
CVSS Score-10||HIGH
EPSS-70.13% / 99.31%
||
7 Day CHG~0.00%
Published-25 Mar, 2008 | 19:00
Updated-23 Apr, 2026 | 00:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.

Action-Not Available
Vendor-n/aASUS (ASUSTeK Computer Inc.)
Product-remote_consolen/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-38105
Matching Score-6
Assigner-Talos
ShareView Details
Matching Score-6
Assigner-Talos
CVSS Score-7.5||HIGH
EPSS-1.08% / 61.47%
||
7 Day CHG~0.00%
Published-10 Jan, 2023 | 20:44
Updated-14 Jan, 2023 | 04:35
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.

Action-Not Available
Vendor-ASUS (ASUSTeK Computer Inc.)
Product-rt-ax82urt-ax82u_firmwareRT-AX82U
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2021-41289
Matching Score-6
Assigner-TWCERT/CC
ShareView Details
Matching Score-6
Assigner-TWCERT/CC
CVSS Score-6.3||MEDIUM
EPSS-0.20% / 9.80%
||
7 Day CHG~0.00%
Published-15 Nov, 2021 | 09:30
Updated-17 Sep, 2024 | 00:36
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer

ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attackers can modify the BIOS by replacing or filling in the content of the designated Memory DataBuffer, which causing a failure of integrity verification and further resulting in a failure to boot.

Action-Not Available
Vendor-ASUS (ASUSTeK Computer Inc.)
Product-p453ujp453uj_biosP453UJ BIOS
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1759
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.29% / 67.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1783
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-8.8||HIGH
EPSS-3.13% / 86.45%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Action-Not Available
Vendor-webkitgtkn/aApple Inc.
Product-webkitgtk\+tvosiphone_ossafarin/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1812
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.54% / 72.25%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1792
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.33% / 67.96%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1747
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.66% / 74.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1746.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE ID-CWE-20
Improper Input Validation
CVE-2016-1727
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-8.8||HIGH
EPSS-4.45% / 90.38%
||
7 Day CHG~0.00%
Published-01 Feb, 2016 | 11:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1724.

Action-Not Available
Vendor-webkitgtkn/aApple Inc.
Product-webkitgtk\+iphone_ossafaritvoswatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1755
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-5.14% / 91.48%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1754.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2011-4052
Matching Score-4
Assigner-CERT/CC
ShareView Details
Matching Score-4
Assigner-CERT/CC
CVSS Score-9.3||HIGH
EPSS-5.70% / 92.15%
||
7 Day CHG-0.25%
Published-05 Dec, 2011 | 11:00
Updated-29 Apr, 2026 | 01:13
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name.

Action-Not Available
Vendor-indusoftn/a
Product-web_studion/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1799
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.33% / 67.96%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1754
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.49% / 71.17%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1804
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.71% / 74.89%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1723
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-8.8||HIGH
EPSS-4.50% / 90.46%
||
7 Day CHG~0.00%
Published-01 Feb, 2016 | 11:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726.

Action-Not Available
Vendor-n/aApple Inc.
Product-iphone_ossafariwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1645
Matching Score-4
Assigner-Chrome
ShareView Details
Matching Score-4
Assigner-Chrome
CVSS Score-8.8||HIGH
EPSS-1.98% / 78.35%
||
7 Day CHG~0.00%
Published-13 Mar, 2016 | 22:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.

Action-Not Available
Vendor-n/aDebian GNU/LinuxopenSUSEGoogle LLC
Product-debian_linuxsuse_linux_enterprise_serverleapchromeopensusen/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1822
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.43% / 70.08%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1808
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.61% / 73.29%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1827
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-5.60% / 92.05%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1824
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.65% / 73.99%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1823.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1815
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.66% / 74.02%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1733
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.29% / 67.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE ID-CWE-20
Improper Input Validation
CVE-2016-1736
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.29% / 67.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1735
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.29% / 67.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1736.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1746
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.66% / 74.02%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE ID-CWE-20
Improper Input Validation
CVE-2016-1743
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-5.46% / 91.86%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1744.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1744
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-4.16% / 89.76%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1810
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.33% / 67.96%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1818
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-2.17% / 80.29%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1819.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1817
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-2.02% / 78.82%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1818 and CVE-2016-1819.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1775
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-4.00% / 89.40%
||
7 Day CHG~0.00%
Published-24 Mar, 2016 | 01:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1725
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-8.8||HIGH
EPSS-4.46% / 90.40%
||
7 Day CHG~0.00%
Published-01 Feb, 2016 | 11:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1726.

Action-Not Available
Vendor-n/aApple Inc.
Product-iphone_ossafariwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1829
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.62% / 73.41%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1830.

Action-Not Available
Vendor-n/aApple Inc.
Product-tvosiphone_osmac_os_xwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1726
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-8.8||HIGH
EPSS-4.46% / 90.40%
||
7 Day CHG~0.00%
Published-01 Feb, 2016 | 11:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1725.

Action-Not Available
Vendor-n/aApple Inc.
Product-iphone_ossafariwatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1834
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-4.62% / 90.68%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

Action-Not Available
Vendor-n/aCanonical Ltd.Apple Inc.McAfee, LLClibxml2 (XMLSoft)Red Hat, Inc.Debian GNU/Linux
Product-libxml2debian_linuxubuntu_linuxmac_os_xenterprise_linux_serverenterprise_linux_workstationenterprise_linux_server_tusenterprise_linux_desktopweb_gatewayenterprise_linux_server_eusiphone_osenterprise_linux_server_austvoswatchosn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE ID-CWE-122
Heap-based Buffer Overflow
CVE-2016-1825
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-5.64% / 92.09%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1935
Matching Score-4
Assigner-Mozilla Corporation
ShareView Details
Matching Score-4
Assigner-Mozilla Corporation
CVSS Score-8.8||HIGH
EPSS-5.15% / 91.50%
||
7 Day CHG~0.00%
Published-31 Jan, 2016 | 18:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.

Action-Not Available
Vendor-n/aopenSUSEMozilla CorporationOracle Corporation
Product-leapfirefoxlinuxopensusen/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1795
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-1.33% / 67.96%
||
7 Day CHG~0.00%
Published-20 May, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1861
Matching Score-4
Assigner-Apple Inc.
ShareView Details
Matching Score-4
Assigner-Apple Inc.
CVSS Score-7.8||HIGH
EPSS-4.39% / 90.25%
||
7 Day CHG~0.00%
Published-19 Jun, 2016 | 20:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.

Action-Not Available
Vendor-n/aApple Inc.
Product-mac_os_xn/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2016-1649
Matching Score-4
Assigner-Chrome
ShareView Details
Matching Score-4
Assigner-Chrome
CVSS Score-8.8||HIGH
EPSS-2.88% / 85.29%
||
7 Day CHG~0.00%
Published-29 Mar, 2016 | 10:00
Updated-06 May, 2026 | 22:30
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.

Action-Not Available
Vendor-n/aCanonical Ltd.openSUSEGoogle LLCDebian GNU/Linux
Product-chromedebian_linuxubuntu_linuxopensusen/a
CWE ID-CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
  • Previous
  • 1
  • 2
  • 3
  • ...
  • 53
  • 54
  • Next
Details not found