CVE-2019-8800 | ByteOS Network

Vulnerability Details :

CVE-2019-8800

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-18 Dec, 2019 | 17:33

Updated At-04 Aug, 2024 | 21:31

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:18 Dec, 2019 | 17:33

Updated At:04 Aug, 2024 | 21:31

▼CVE Numbering Authority (CNA)

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Affected Products

Vendor

Product

Versions

Affected

From unspecified before Xcode 11.2 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Processing a maliciously crafted file may lead to arbitrary code execution

Type: text

CWE ID: N/A

Description: Processing a maliciously crafted file may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/HT210729	x_refsource_MISC

Hyperlink: https://support.apple.com/HT210729

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/HT210729	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/HT210729

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@apple.com

Published At:18 Dec, 2019 | 18:15

Updated At:21 Jul, 2021 | 11:39

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

>>xcode>>Versions before 11.2(exclusive)

cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/HT210729	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.apple.com/HT210729

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

6701Records found

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.18% / 38.59%

||

7 Day CHG~0.00%

Published-19 Sep, 2022 | 15:47

Updated-23 Apr, 2025 | 16:58

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.18% / 38.59%

||

7 Day CHG~0.00%

Published-19 Sep, 2022 | 15:47

Updated-23 Apr, 2025 | 16:57

Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.09% / 25.00%

||

7 Day CHG~0.00%

Published-19 Sep, 2022 | 15:47

Updated-23 Apr, 2025 | 16:58

Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows bridge macos Bridge

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.85%

||

7 Day CHG~0.00%

Published-11 Aug, 2022 | 14:44

Updated-23 Apr, 2025 | 17:52

Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.56% / 68.38%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:25

Updated-23 Oct, 2025 | 14:55

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-tvos watchos ipados macos iphone_os macOS Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.46% / 64.34%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:32

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.47% / 64.88%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:49

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados tvos tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.67%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:51

Updated-03 Aug, 2024 | 22:48

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 49.21%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.58% / 68.96%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.77% / 73.69%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:49

Updated-03 Aug, 2024 | 22:48

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos tvOS Safari watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 62.31%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:44

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.29% / 52.63%

||

7 Day CHG~0.00%

Published-28 Oct, 2021 | 18:17

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.35% / 57.67%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:25

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.39% / 59.91%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.86% / 75.20%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:44

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os macos ipados tvos macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.51% / 66.52%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:45

Updated-23 Oct, 2025 | 18:04

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-iphone_os iOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.60% / 69.66%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 56.72%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos watchOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 61.18%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:41

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.43% / 62.34%

||

7 Day CHG+0.06%

Published-24 Aug, 2021 | 18:49

Updated-23 Oct, 2025 | 18:02

Known KEV||Action Due Date - 2022-06-13||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-tvos watchos ipados macos iphone_os iOS and iPadOS macOS Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 61.78%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados mac_os_x macos watchOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 65.29%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-23 Oct, 2025 | 18:02

Known KEV||Action Due Date - 2023-04-20||Apply updates per vendor instructions.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-ipados iphone_os macos iOS and iPadOS iOS, iPadOS, and macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.29% / 52.63%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:41

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 49.02%

||

7 Day CHG~0.00%

Published-19 Oct, 2021 | 13:11

Updated-03 Aug, 2024 | 22:48

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari macos iTunes for Windows watchOS Safari tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.98%

||

7 Day CHG~0.00%

Published-19 Oct, 2021 | 13:11

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos tvOS Safari watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.55% / 67.99%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:46

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x Security Update - Catalina macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.55% / 67.99%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:46

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x Security Update - Catalina macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.39% / 60.34%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:48

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges.

Vendor-Apple Inc.

Product-iphone_os watchos tvos mac_os_x macos Security Update - Catalina macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.50% / 65.99%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:49

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 61.33%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:26

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate privileges.

Vendor-Apple Inc.

Product-boot_camp Boot Camp

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 61.18%

||

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.29% / 52.63%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:41

Updated-03 Aug, 2024 | 22:40

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An out-of-bounds write issue was addressed with improved bounds checking.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.26% / 79.61%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:44

Updated-03 Aug, 2024 | 22:40

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.08% / 78.07%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:42

Updated-03 Aug, 2024 | 22:40

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-21.03% / 95.72%

||

7 Day CHG-1.50%

Published-19 Oct, 2021 | 13:12

Updated-23 Oct, 2025 | 18:02

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Vendor-Apple Inc.

Product-ipados iphone_os macos watchos macOS Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.80% / 74.19%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:46

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos mac_os_x macos Security Update - Catalina macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 50.00%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:51

Updated-03 Aug, 2024 | 22:48

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 50.00%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.32% / 54.79%

||

7 Day CHG~0.00%

Published-19 Oct, 2021 | 13:11

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-iphone_os macos safari ipados Safari iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.40% / 60.80%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:43

Updated-03 Aug, 2024 | 22:40

A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, iOS 12.5.4, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted certificate may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 50.54%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:44

Updated-03 Aug, 2024 | 22:40

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An out-of-bounds write issue was addressed with improved bounds checking.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.1||HIGH

EPSS-0.89% / 75.67%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:27

Updated-03 Aug, 2024 | 22:40

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to execute arbitrary code.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 41.08%

||

7 Day CHG~0.00%

Published-19 Oct, 2021 | 13:11

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 61.74%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, watchOS 8, tvOS 15, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos icloud tvOS macOS watchOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.63% / 70.58%

||

7 Day CHG~0.00%

Published-28 Oct, 2021 | 18:17

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-30.08% / 96.73%

||

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos watchOS macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.05% / 77.74%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:45

Updated-03 Aug, 2024 | 22:40

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos Security Update - Catalina macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-7.8||HIGH

EPSS-92.25% / 99.73%

||

7 Day CHG-0.10%

Published-14 Feb, 2013 | 01:00

Updated-21 Apr, 2026 | 21:01

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc SUSE Adobe Inc.openSUSE Red Hat, Inc.Apple Inc.

Product-acrobat acrobat_reader linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows enterprise_linux_server_aus enterprise_linux_eus linux_kernel opensuse n/a Reader and Acrobat

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.04% / 77.64%

||

7 Day CHG~0.00%

Published-16 Sep, 2013 | 01:00

Updated-29 Apr, 2026 | 01:13

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x n/a

CWE ID-CWE-787

Out-of-bounds Write