ByteOS

Product

Firefox

Versions

Affected

From unspecified before 94 (custom)

Vendor

Product

Thunderbird

Versions

Affected

From unspecified before 91.3 (custom)

Vendor

Product

Firefox ESR

Versions

Affected

From unspecified before 91.3 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Download Protections were bypassed by .inetloc files on Mac OS

Type: text

CWE ID: N/A

Description: Download Protections were bypassed by .inetloc files on Mac OS

References

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2021-49/	x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2021-50/	x_refsource_MISC
https://www.mozilla.org/security/advisories/mfsa2021-48/	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=1731779	x_refsource_MISC

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-49/

Resource:

x_refsource_MISC

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-50/

Resource:

x_refsource_MISC

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-48/

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1731779

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.mozilla.org/security/advisories/mfsa2021-49/	x_refsource_MISC x_transferred
https://www.mozilla.org/security/advisories/mfsa2021-50/	x_refsource_MISC x_transferred
https://www.mozilla.org/security/advisories/mfsa2021-48/	x_refsource_MISC x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1731779	x_refsource_MISC x_transferred

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-49/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-50/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-48/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1731779

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@mozilla.org

Published At:08 Dec, 2021 | 22:15

Updated At:12 Jul, 2022 | 17:42

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

>>firefox>>Versions before 94.0(exclusive)

cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*

>>firefox_esr>>Versions before 91.3.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

>>thunderbird>>Versions before 91.3.0(exclusive)

Apple Inc.

>>macos>>-

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1731779	security@mozilla.org	Issue Tracking Permissions Required Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-48/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-49/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2021-50/	security@mozilla.org	Vendor Advisory

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1731779

Source: security@mozilla.org

Resource:

Issue Tracking

Permissions Required

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-48/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-49/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2021-50/

Source: security@mozilla.org

Resource:

Vendor Advisory

Similar CVEs

3049Records found

CVE-2019-6212

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.51% / 66.74%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Canonical Ltd.Apple Inc.Microsoft Corporation

Product-itunes iphone_os ubuntu_linux tvos safari windows icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4630

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.11% / 78.33%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-6238

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.34% / 57.04%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:22

Updated-04 Aug, 2024 | 20:16

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. Processing a maliciously crafted package may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-20

Improper Input Validation

CVE-2006-1733

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-24.27% / 96.15%

7 Day CHG~0.00%

Published-14 Apr, 2006 | 10:00

Updated-16 Apr, 2026 | 00:27

Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly protect the compilation scope of privileged built-in XBL bindings, which allows remote attackers to execute arbitrary code via the (1) valueOf.call or (2) valueOf.apply methods of an XBL binding, or (3) "by inserting an XBL method into the DOM's document.body prototype chain."

Product-firefox mozilla_suite thunderbird seamonkey n/a

CVE-2015-3740

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.00% / 77.16%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-06 May, 2026 | 22:30

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

Vendor-n/a Apple Inc.

Product-itunes iphone_os safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3689

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.90% / 83.42%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3688

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.63% / 85.87%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Apple Inc.

Product-itunes iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-6216

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.60% / 69.83%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4677

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.45% / 81.00%

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-13 May, 2026 | 00:24

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-tvos iphone_os safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3659

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.12% / 78.40%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-mac_os_x iphone_os safari n/a

CVE-2015-3749

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.78% / 73.89%

7 Day CHG~0.00%

Published-16 Aug, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Vendor-n/a Canonical Ltd.Apple Inc.

Product-itunes ubuntu_linux iphone_os safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-4511

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-6.8||MEDIUM

EPSS-3.96% / 88.49%

7 Day CHG~0.00%

Published-24 Sep, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Heap-based buffer overflow in the nestegg_track_codec_data function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allows remote attackers to execute arbitrary code via a crafted header in a WebM video.

Product-firefox n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-6215

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-32.32% / 96.89%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Canonical Ltd.Apple Inc.Microsoft Corporation

Product-itunes iphone_os ubuntu_linux watchos tvos safari windows icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2016-4681

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.51% / 66.56%

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-13 May, 2026 | 00:24

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3667

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-3.24% / 87.25%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668.

Vendor-n/a Apple Inc.

Product-quicktime mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3684

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.8||MEDIUM

EPSS-1.79% / 82.94%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted credentials in a URL.

Vendor-n/a Apple Inc.

Product-iphone_os mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-6224

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-28.28% / 96.55%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tv_os tvOS macOS watchOS iOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-6227

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.09%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-2810

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.65% / 82.21%

7 Day CHG~0.00%

Published-10 Nov, 2009 | 19:00

Updated-23 Apr, 2026 | 00:35

Launch Services in Apple Mac OS X 10.6.x before 10.6.2 recursively clears quarantine information upon opening a quarantined folder, which allows user-assisted remote attackers to execute arbitrary code via a quarantined application that does not trigger a "potentially unsafe" warning message.

Vendor-n/a Apple Inc.

CVE-2009-2816

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.15% / 84.44%

7 Day CHG~0.00%

Published-13 Nov, 2009 | 15:00

Updated-23 Apr, 2026 | 00:35

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.

Vendor-n/a Apple Inc.openSUSE Google LLC Fedora Project

Product-iphone_os safari fedora chrome opensuse n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2009-2826

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.89% / 83.40%

7 Day CHG~0.00%

Published-10 Nov, 2009 | 19:00

Updated-23 Apr, 2026 | 00:35

Multiple integer overflows in CoreGraphics in Apple Mac OS X 10.5.8 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers a heap-based buffer overflow.

Vendor-n/a Apple Inc.

CVE-2015-2717

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.42% / 85.30%

7 Day CHG~0.00%

Published-14 May, 2015 | 10:00

Updated-06 May, 2026 | 22:30

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and out-of-bounds read) via an MP4 video file containing invalid metadata.

Vendor-n/a Mozilla Corporation openSUSE

Product-firefox opensuse n/a

CVE-2009-2837

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.78% / 86.22%

7 Day CHG~0.00%

Published-10 Nov, 2009 | 19:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.

Vendor-n/a Apple Inc.

Product-mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-2809

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.41% / 85.27%

7 Day CHG~0.00%

Published-14 Sep, 2009 | 16:00

Updated-23 Apr, 2026 | 00:35

ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PixarFilm encoded TIFF image, related to "multiple memory corruption issues."

Vendor-n/a Apple Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2019-7041

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.03% / 77.56%

7 Day CHG~0.00%

Published-24 May, 2019 | 18:14

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CVE-2026-7359

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.03% / 7.32%

7 Day CHG~0.00%

Published-28 Apr, 2026 | 22:35

Updated-30 Apr, 2026 | 16:37

Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-chrome windows linux_kernel macos Chrome

CWE ID-CWE-416

Use After Free

CVE-2009-2065

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.30% / 53.39%

7 Day CHG~0.00%

Published-15 Jun, 2009 | 19:00

Updated-23 Apr, 2026 | 00:35

Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."

Product-firefox n/a

CWE ID-CWE-287

Improper Authentication

CVE-2016-4594

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.24%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.

Vendor-n/a Apple Inc.

Product-tvos iphone_os mac_os_x watchos n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2026-7921

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.08% / 23.64%

7 Day CHG+0.01%

Published-06 May, 2026 | 18:12

Updated-07 May, 2026 | 03:56

Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-chrome windows linux_kernel macos Chrome

CWE ID-CWE-416

Use After Free

CVE-2009-2205

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.84% / 74.85%

7 Day CHG~0.00%

Published-09 Sep, 2009 | 22:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Vendor-n/a Apple Inc.

Product-java_1.4 mac_os_x java_1.5 java_1.6 mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-7143

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-11.72% / 93.76%

7 Day CHG~0.00%

Published-22 May, 2019 | 13:05

Updated-04 Aug, 2024 | 20:38

Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-mac_os_x acrobat_dc windows acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-6230

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.6||HIGH

EPSS-0.33% / 56.17%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tvos tvOS macOS watchOS iOS

CWE ID-CWE-665

Improper Initialization

CVE-2019-6214

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.6||HIGH

EPSS-8.42% / 92.41%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tv_os tvOS macOS watchOS iOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2006-1249

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-27.21% / 96.45%

7 Day CHG~0.00%

Published-19 Mar, 2006 | 01:00

Updated-16 Apr, 2026 | 00:27

Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.

Vendor-n/a Apple Inc.

Product-quicktime itunes n/a

CVE-2019-6205

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-8.73% / 92.58%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

Vendor-Apple Inc.

Product-iphone_os mac_os_x tvos tvOS macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4225

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.39% / 90.22%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2016-4223 and CVE-2016-4224.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2026-7926

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.08% / 23.64%

7 Day CHG+0.01%

Published-06 May, 2026 | 18:12

Updated-07 May, 2026 | 03:56

Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Vendor-Apple Inc.Microsoft Corporation Google LLC Linux Kernel Organization, Inc

Product-chrome windows linux_kernel macos Chrome

CWE ID-CWE-416

Use After Free

CVE-2022-30648

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-22.45% / 95.90%

7 Day CHG~0.00%

Published-15 Jun, 2022 | 20:23

Updated-23 Apr, 2025 | 18:12

Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows macos illustrator Illustrator

CWE ID-CWE-416

Use After Free

CVE-2019-6226

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.00%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-6217

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.61% / 70.09%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

Product-itunes iphone_os watchos tvos safari windows icloud iTunes for Windows watchOS Safari iCloud for Windows iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4187

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.74%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4182

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.70%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2009-1721

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-25.35% / 96.27%

7 Day CHG~0.00%

Published-31 Jul, 2009 | 18:29

Updated-23 Apr, 2026 | 00:35

The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.

Vendor-openexr n/a Canonical Ltd.Apple Inc.openSUSE Debian GNU/Linux Fedora Project

Product-debian_linux ubuntu_linux mac_os_x openexr fedora opensuse n/a

CWE ID-CWE-824

Access of Uninitialized Pointer

CVE-2019-6202

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 47.72%

7 Day CHG~0.00%

Published-05 Mar, 2019 | 16:00

Updated-04 Aug, 2024 | 20:16

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos watchOS macOS iOS

CWE ID-CWE-125

Out-of-bounds Read

CVE-2016-4141

Matching Score-8

Matching Score-8

Product-linux_enterprise_desktop windows_8.1 enterprise_linux_desktop macos flash_player_desktop_runtime linux_kernel linux_enterprise_workstation_extension windows_server_2012 chrome_os windows_10 enterprise_linux_workstation enterprise_linux_server windows flash_player windows_rt_8.1 opensuse n/a

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.56%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Apple Inc.openSUSE Google LLC Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CVE-2016-4234

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.40%

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-06 May, 2026 | 22:30

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-3206

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-8.1||HIGH

EPSS-1.35% / 80.27%

7 Day CHG~0.00%

Published-25 Aug, 2017 | 18:00

Updated-13 May, 2026 | 00:24

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.

Vendor-n/a Apple Inc.

Product-pykerberos n/a

CWE ID-CWE-287

Improper Authentication

CVE-2009-0944

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-2.89% / 86.47%

7 Day CHG~0.00%

Published-13 May, 2009 | 15:14

Updated-23 Apr, 2026 | 00:35

The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption.

Vendor-n/a Apple Inc.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-0942

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-4.15% / 88.78%

7 Day CHG~0.00%

Published-13 May, 2009 | 15:14

Updated-23 Apr, 2026 | 00:35

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.

Vendor-n/a Apple Inc.

CWE ID-CWE-20

Improper Input Validation

CVE-2015-2706

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-6.8||MEDIUM

EPSS-1.13% / 78.55%

7 Day CHG~0.00%

Published-24 Apr, 2015 | 23:00

Updated-06 May, 2026 | 22:30

Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted plugin that does not properly complete initialization.