ByteOS

Product

tvOS

Versions

Affected

From unspecified before 14.0 (custom)

Vendor

Product

watchOS

Versions

Affected

From unspecified before 7.0 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 14.0 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 11.0 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	An application may be able to execute arbitrary code with kernel privileges

Type: text

CWE ID: N/A

Description: An application may be able to execute arbitrary code with kernel privileges

References

Hyperlink	Resource
https://support.apple.com/en-us/HT211843	x_refsource_MISC
https://support.apple.com/en-us/HT211850	x_refsource_MISC
https://support.apple.com/en-us/HT211844	x_refsource_MISC
https://support.apple.com/en-us/HT211931	x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list x_refsource_FULLDISC

Hyperlink: https://support.apple.com/en-us/HT211843

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT211850

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT211844

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT211931

Resource:

x_refsource_MISC

Hyperlink: http://seclists.org/fulldisclosure/2020/Dec/32

Resource:

mailing-list

x_refsource_FULLDISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT211843	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT211850	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT211844	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT211931	x_refsource_MISC x_transferred
http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list x_refsource_FULLDISC x_transferred

Hyperlink: https://support.apple.com/en-us/HT211843

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT211850

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT211844

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT211931

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2020/Dec/32

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:08 Dec, 2020 | 20:15

Updated At:11 Mar, 2021 | 17:23

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 14.0(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 14.0(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions before 11.0.1(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 14.0(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 7.0(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://seclists.org/fulldisclosure/2020/Dec/32	product-security@apple.com	Mailing List Third Party Advisory
https://support.apple.com/en-us/HT211843	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT211844	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT211850	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT211931	product-security@apple.com	Release Notes Vendor Advisory

Hyperlink: http://seclists.org/fulldisclosure/2020/Dec/32

Source: product-security@apple.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://support.apple.com/en-us/HT211843

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT211844

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT211850

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT211931

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Similar CVEs

4582Records found

CVE-2011-0599

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-12.48% / 93.66%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-0999

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-46.40% / 97.57%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-1000.

CWE ID-CWE-416

Use After Free

CVE-2011-0591

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.42% / 88.60%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a different vulnerability than CVE-2011-0590, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0250

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.06%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file.

Product-windows_7 quicktime windows_xp windows_vista mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0215

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.34% / 84.23%

7 Day CHG-0.69%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.

Product-windows_7 imageio windows_xp windows_vista safari n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0257

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-84.51% / 99.28%

7 Day CHG-0.24%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2011-0216

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.31% / 78.97%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.

Product-windows_7 windows_xp safari windows_vista n/a

CVE-2011-0620

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0246

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.25% / 88.36%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0223

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.02% / 83.04%

7 Day CHG-0.60%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0170

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.70% / 92.13%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0609

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.40% / 99.72%

7 Day CHG~0.00%

Published-15 Mar, 2011 | 17:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

CVE-2016-0960

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.78% / 92.17%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-19720

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.09% / 91.81%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 17:00

Updated-05 Aug, 2024 | 11:44

Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc n/a

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2010-4091

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.24% / 96.33%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4387

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.65% / 85.18%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4397

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.62% / 85.11%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2016-0979

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0973

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.10%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CWE ID-CWE-416

Use After Free

CVE-2010-4009

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.33% / 86.78%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2020-9871

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 61.33%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:54

Updated-04 Aug, 2024 | 10:43

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-34225

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-0.99% / 76.00%

7 Day CHG~0.00%

Published-15 Jul, 2022 | 15:34

Updated-23 Apr, 2025 | 18:01

Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution Vulnerability

Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2010-4379

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 78.94%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.55%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4384

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.95% / 82.71%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-0976

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4377

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.19%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4155

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.13% / 88.19%

7 Day CHG+1.03%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3822

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.20% / 83.76%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0986

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3811

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-10.43% / 92.93%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3803

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.93% / 93.79%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3805

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-12.02% / 93.53%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2010-3809

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.35% / 84.27%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2021-21067

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-2.83% / 85.66%

7 Day CHG~0.00%

Published-12 Mar, 2021 | 18:14

Updated-23 Apr, 2025 | 19:43

Adobe Photoshop CoolType arbitrary stack manipulation in Type 1/Multiple Master

Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-photoshop_2020 windows macos Photoshop

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-21039

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-13.79% / 94.03%

7 Day CHG~0.00%

Published-11 Feb, 2021 | 19:42

Updated-16 Sep, 2024 | 18:34

Acrobat Reader DC Use-After-Free Vulnerability Could Lead To Arbitrary Code Execution

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2010-3652

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3646

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3648

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3643

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2021-21099

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.01% / 82.98%

7 Day CHG~0.00%

Published-28 Jun, 2021 | 13:42

Updated-23 Apr, 2025 | 19:41

Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code execution

Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows indesign macos InDesign

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3641

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.91%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-2941

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-27.68% / 96.26%

7 Day CHG~0.00%

Published-05 Nov, 2010 | 16:28

Updated-11 Apr, 2025 | 00:51

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

CWE ID-CWE-416

Use After Free

CVE-2010-3821

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.39% / 84.41%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3818

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-10.43% / 92.93%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CVE-2015-8655

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.75% / 81.79%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8821, and CVE-2015-8822.

CWE ID-CWE-416

Use After Free

CVE-2010-3802

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.00% / 91.75%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2010-3817

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.22% / 83.84%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.