ByteOS

Product

macOS

Versions

Affected

From unspecified before 11.4 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 2021 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 2021 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	An attacker in a privileged network position may be able to execute arbitrary code

Type: text

CWE ID: N/A

Description: An attacker in a privileged network position may be able to execute arbitrary code

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212529	x_refsource_MISC
https://support.apple.com/en-us/HT212530	x_refsource_MISC
https://support.apple.com/en-us/HT212531	x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212529

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212530

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212531

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212529	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212530	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212531	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/en-us/HT212529

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212530

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212531

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:08 Sep, 2021 | 15:15

Updated At:16 Sep, 2021 | 15:30

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>mac_os_x>>Versions from 10.14(inclusive) to 10.14.5(inclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>mac_os_x>>Versions from 10.15(inclusive) to 10.15.6(inclusive)

cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*

>>mac_os_x>>10.14.6

cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 11.0(inclusive) to 11.4(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT212529	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212530	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212531	product-security@apple.com	Release Notes Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212529

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212530

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212531

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Similar CVEs

4668Records found

CVE-2019-8706

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.34%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:43

Updated-04 Aug, 2024 | 21:24

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos tvos mac_os_x tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8681

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8707

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.14% / 77.55%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes icloud tvos tvOS iTunes for Windows iCloud for Windows iCloud for Windows (Legacy)

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8683

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.83% / 73.54%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows watchOS Safari macOS iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8765

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-18.15% / 94.94%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-watchos watchOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8808

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.38%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari iTunes for Windows watchOS Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8733

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.14% / 77.55%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes icloud tvos tvOS iTunes for Windows iCloud for Windows iCloud for Windows (Legacy)

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8671

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-28.15% / 96.32%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8819

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.52% / 65.78%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-5198

Matching Score-10

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac Chromium V8

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-69.40% / 98.59%

7 Day CHG~0.00%

Published-19 Jan, 2017 | 05:43

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Microsoft Corporation Apple Inc.Google LLC Red Hat, Inc.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-8806

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 56.25%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

A memory corruption issue was addressed with improved validation. This issue is fixed in Xcode 11.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-xcode Xcode

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8594

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.30%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8595

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.30%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8571

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.30%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8773

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.59% / 68.18%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:48

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os ipad_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8739

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.99%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-xcode Xcode

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8524

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.84% / 73.74%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:17

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8619

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8553

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.43%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos tvOS watchOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8821

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.01% / 76.15%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Vendor-Apple Inc.

Product-itunes iphone_os ipados tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8766

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.55% / 66.85%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-icloud watchos watchOS iCloud for Windows

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8820

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.92% / 89.21%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8673

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8559

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos safari icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8680

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8008

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-13.55% / 93.97%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:38

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8191

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.16% / 86.42%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:19

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7986

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:40

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2013-1032

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.02% / 83.03%

7 Day CHG~0.00%

Published-16 Sep, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.

Vendor-n/a Apple Inc.

Product-mac_os_x quicktime n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7980

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:31

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8170

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-6.07% / 90.39%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:15

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7988

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:43

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8165

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.16% / 86.42%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:13

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7985

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-33.76% / 96.81%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:39

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-7978

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-33.76% / 96.81%

7 Day CHG~0.00%

Published-26 Aug, 2019 | 18:29

Updated-04 Aug, 2024 | 21:02

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-windows photoshop_cc macos Adobe Photoshop CC

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6217

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.65% / 69.95%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6226

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.65% / 69.84%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Vendor-Apple Inc.Microsoft Corporation

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6234

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.65% / 69.94%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkitgtk Apple Inc.Microsoft Corporation

Product-itunes iphone_os tvos safari windows webkitgtk\+icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2012-0754

Matching Score-10

Matching Score-10

Vendor-n/a Linux Kernel Organization, Inc Microsoft Corporation Google LLC Adobe Inc.Apple Inc.Oracle Corporation

CVSS Score-8.1||HIGH

EPSS-93.10% / 99.78%

7 Day CHG~0.00%

Published-16 Feb, 2012 | 19:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30761

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.73% / 71.82%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 13:45

Updated-30 Jul, 2025 | 01:38

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-iphone_os iOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30792

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.50% / 64.81%

7 Day CHG+0.02%

Published-08 Sep, 2021 | 13:49

Updated-03 Aug, 2024 | 22:40

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2011-0210

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.06% / 83.17%

7 Day CHG~0.00%

Published-24 Jun, 2011 | 20:00

Updated-11 Apr, 2025 | 00:51

QuickTime in Apple Mac OS X before 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted sample tables in a movie file.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x mac_os_x_server n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2498

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.65% / 85.19%

7 Day CHG~0.00%

Published-19 Aug, 2010 | 17:43

Updated-11 Apr, 2025 | 00:51

The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.

Vendor-freetype n/a Canonical Ltd.Apple Inc.Debian GNU/Linux

Product-ubuntu_linux debian_linux mac_os_x freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2519

Matching Score-10

Assigner-Red Hat, Inc.

Matching Score-10

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-4.52% / 88.72%

7 Day CHG~0.00%

Published-19 Aug, 2010 | 17:43

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.

Vendor-freetype n/a Canonical Ltd.Apple Inc.Debian GNU/Linux

Product-ubuntu_linux debian_linux mac_os_x freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30814

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.63% / 69.47%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 18:17

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30928

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.56% / 67.38%

7 Day CHG~0.00%

Published-24 Aug, 2021 | 18:50

Updated-03 Aug, 2024 | 22:48

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, watchOS 8, tvOS 15, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos icloud tvOS macOS watchOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4946

Matching Score-10

Matching Score-10

Product-windows photoshop_cc macos Adobe Photoshop CC 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier versions

CVSS Score-8.8||HIGH

EPSS-9.76% / 92.64%

7 Day CHG~0.00%

Published-09 Jul, 2018 | 19:00

Updated-05 Aug, 2024 | 05:18

Adobe Photoshop CC versions 19.1.3 and earlier, 18.1.3 and earlier, and 18.1.2 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-5045

Matching Score-10

Matching Score-10