ByteOS

Product

iOS

Versions

Affected

From unspecified before iOS 12.2 (custom)

Vendor

Product

tvOS

Versions

Affected

From unspecified before tvOS 12.2 (custom)

Vendor

Product

watchOS

Versions

Affected

From unspecified before watchOS 5.2 (custom)

Vendor

Product

Safari

Versions

Affected

From unspecified before Safari 12.1 (custom)

Vendor

Product

iTunes for Windows

Versions

Affected

From unspecified before iTunes 12.9.4 for Windows (custom)

Vendor

Product

iCloud for Windows

Versions

Affected

From unspecified before iCloud for Windows 7.11 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Processing maliciously crafted web content may lead to arbitrary code execution

Type: text

CWE ID: N/A

Description: Processing maliciously crafted web content may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/HT209599	x_refsource_MISC
https://support.apple.com/HT209601	x_refsource_MISC
https://support.apple.com/HT209603	x_refsource_MISC
https://support.apple.com/HT209604	x_refsource_MISC
https://support.apple.com/HT209605	x_refsource_MISC
https://support.apple.com/HT209602	x_refsource_MISC

Hyperlink: https://support.apple.com/HT209599

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT209601

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT209603

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT209604

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT209605

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT209602

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/HT209599	x_refsource_MISC x_transferred
https://support.apple.com/HT209601	x_refsource_MISC x_transferred
https://support.apple.com/HT209603	x_refsource_MISC x_transferred
https://support.apple.com/HT209604	x_refsource_MISC x_transferred
https://support.apple.com/HT209605	x_refsource_MISC x_transferred
https://support.apple.com/HT209602	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/HT209599

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT209601

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT209603

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT209604

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT209605

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT209602

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:18 Dec, 2019 | 18:15

Updated At:24 Aug, 2020 | 17:37

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*

>>icloud>>Versions before 7.11(exclusive)

cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*

>>itunes>>Versions before 12.9.4(exclusive)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions before 12.1(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 12.2(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 12.2(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 5.2(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/HT209599	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT209601	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT209602	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT209603	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT209604	product-security@apple.com	Vendor Advisory
https://support.apple.com/HT209605	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.apple.com/HT209599

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT209601

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT209602

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT209603

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT209604

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/HT209605

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

5488Records found

CVE-2019-8183

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.13% / 87.00%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:18

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8014

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-46.20% / 97.68%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:43

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8518

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-41.80% / 97.47%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:17

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8170

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.07% / 90.84%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:15

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7983

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 96.13%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:35

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7980

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 96.13%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:31

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6225

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-64.52% / 98.47%

7 Day CHG-3.94%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.

Vendor-Apple Inc.

Product-iphone_os mac_os_x tvos tvOS macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6201

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.75% / 73.27%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6233

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.08%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-itunes iphone_os tvos safari windows icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6234

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.08%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Vendor-webkitgtk Apple Inc.Microsoft Corporation

Product-itunes iphone_os tvos safari windows webkitgtk\+icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6212

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.51% / 66.74%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Canonical Ltd.Apple Inc.Microsoft Corporation

Product-itunes iphone_os ubuntu_linux tvos safari windows icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6216

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.60% / 69.83%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6227

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.09%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6205

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-8.73% / 92.58%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

Vendor-Apple Inc.

Product-iphone_os mac_os_x tvos tvOS macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6226

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.00%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6217

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.09%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4187

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4182

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.70%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4234

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-28847

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-5.42% / 90.25%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 19:27

Updated-23 Apr, 2025 | 18:12

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-7902

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.08% / 23.64%

7 Day CHG+0.01%

Published-06 May, 2026 | 18:12

Updated-10 May, 2026 | 14:16

Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation

Product-chrome windows linux_kernel macos Chrome

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4153

Matching Score-10

Matching Score-10

Product-windows_10 linux_enterprise_desktop mac_os_x enterprise_linux_workstation enterprise_linux_server windows_8.1 linux_enterprise_workstation_extension enterprise_linux_desktop windows flash_player linux_kernel flash_player_desktop_runtime chrome_os opensuse n/a

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.90%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-13520

Matching Score-10

Assigner-Talos

Matching Score-10

Assigner-Talos

CVSS Score-8.8||HIGH

EPSS-0.90% / 75.91%

7 Day CHG~0.00%

Published-11 Dec, 2020 | 03:25

Updated-04 Aug, 2024 | 12:18

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.

Vendor-pixar n/a Apple Inc.

Product-macos openusd Pixar

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-3855

Matching Score-10

Assigner-Red Hat, Inc.

Vendor-libssh2 The libssh2 Project Debian GNU/Linux Fedora Project Oracle Corporation openSUSE Red Hat, Inc.NetApp, Inc.Apple Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-16.24% / 94.89%

7 Day CHG~0.00%

Published-21 Mar, 2019 | 20:13

Updated-17 Dec, 2025 | 21:40

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Product-enterprise_linux_server peoplesoft_enterprise_peopletools debian_linux enterprise_linux_server_eus ontap_select_deploy_administration_utility enterprise_linux_server_aus enterprise_linux_workstation fedora enterprise_linux xcode libssh2 enterprise_linux_server_tus enterprise_linux_desktop leap libssh2

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1032

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0968

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-4.59% / 89.35%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0971

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-64.53% / 98.47%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air_sdk_\&_compiler windows flash_player iphone_os air_sdk android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-8820

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-8.56% / 92.48%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8658.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 air air_sdk_\&_compiler windows flash_player windows_8 air_sdk iphone_os android air_desktop_runtime linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-28848

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-5.42% / 90.25%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 19:28

Updated-23 Apr, 2025 | 18:12

Adobe Bridge PCX Out-of-bounds Write Remote Code Execution Vulnerability

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-3953

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-90.51% / 99.62%

7 Day CHG~0.00%

Published-13 Jan, 2010 | 19:00

Updated-21 Apr, 2026 | 21:12

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Vendor-n/a Apple Inc.openSUSE Microsoft Corporation Adobe Inc.SUSE

Product-acrobat mac_os_x linux_enterprise linux_enterprise_debuginfo windows opensuse n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26748

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.69% / 72.06%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:10

Updated-03 Aug, 2024 | 05:11

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x Security Update - Catalina macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-14174

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.31% / 54.20%

7 Day CHG-0.04%

Published-12 Dec, 2025 | 19:20

Updated-26 Feb, 2026 | 16:07

Known KEV||Action Due Date - 2026-01-02||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-tvos macos safari visionos iphone_os ipados linux_kernel edge_chromium watchos windows chrome Chrome Chromium

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-4450

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.04% / 14.10%

7 Day CHG~0.00%

Published-20 Mar, 2026 | 01:34

Updated-21 Mar, 2026 | 04:01

Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-28846

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-5.42% / 90.25%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 19:31

Updated-23 Apr, 2025 | 18:12

Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-4439

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.03% / 9.92%

7 Day CHG~0.00%

Published-20 Mar, 2026 | 01:34

Updated-21 Mar, 2026 | 04:01

Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26730

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.75% / 73.27%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 15:15

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2014-8129

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-8.8||HIGH

EPSS-1.46% / 81.06%

7 Day CHG~0.00%

Published-12 Mar, 2018 | 02:00

Updated-06 Aug, 2024 | 13:10

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.

Vendor-n/a LibTIFF Red Hat, Inc.Debian GNU/Linux Apple Inc.

Product-enterprise_linux_server iphone_os debian_linux enterprise_linux_server_eus libtiff enterprise_linux_server_aus mac_os_x enterprise_linux_server_tus n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-3931

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.09% / 24.75%

7 Day CHG~0.00%

Published-11 Mar, 2026 | 22:04

Updated-13 Mar, 2026 | 15:41

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-3920

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-10

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.09% / 24.85%

7 Day CHG~0.00%

Published-11 Mar, 2026 | 22:04

Updated-13 Mar, 2026 | 15:43

Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-3537

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.10% / 27.76%

7 Day CHG+0.01%

Published-04 Mar, 2026 | 19:24

Updated-11 Mar, 2026 | 16:16

Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Vendor-Linux Kernel Organization, Inc Microsoft Corporation Apple Inc.Google LLC

Product-macos windows chrome linux_kernel Chrome

CWE ID-CWE-1091

Use of Object without Invoking Destructor Method

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26751

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.63% / 70.42%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:12

Updated-03 Aug, 2024 | 05:11

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados mac_os_x macos Security Update - Catalina macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8766

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.71% / 72.51%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-icloud watchos watchOS iCloud for Windows

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8676

Matching Score-10

Assigner-Apple Inc.

Product-enterprise_linux_server itunes iphone_os watchos tvos safari enterprise_linux_workstation mac_os_x enterprise_linux_desktop icloud iCloud for Windows (Microsoft Store)iTunes for Windows watchOS Safari macOS iCloud for Windows iOS tvOS

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-3.29% / 87.35%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Red Hat, Inc.Apple Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-13042

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.11% / 29.40%

7 Day CHG~0.00%

Published-12 Nov, 2025 | 16:48

Updated-26 Feb, 2026 | 16:57

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Linux Kernel Organization, Inc Google LLC Microsoft Corporation

Product-chrome macos windows linux_kernel Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2026-3909

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.39% / 60.43%

7 Day CHG~0.00%

Published-12 Mar, 2026 | 21:30

Updated-25 Mar, 2026 | 14:05

Known KEV||Action Due Date - 2026-03-27||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-linux_kernel chrome windows macos Chrome Skia

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8683

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.83% / 74.65%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows watchOS Safari macOS iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26716

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.18% / 38.72%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 15:15

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-watchos tvos macos ipados safari iphone_os macOS watchOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8816

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.52% / 66.95%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Red Hat, Inc.Apple Inc.

Product-enterprise_linux_server itunes iphone_os ipados tvos watchos safari enterprise_linux_workstation enterprise_linux_desktop icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8686

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 74.52%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-26719

Matching Score-10

Assigner-Apple Inc.