ByteOS

Product

Safari

Versions

Affected

From unspecified before 16.6 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 16.6 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 13.5 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 15.7 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Processing web content may lead to arbitrary code execution

Type: N/A

CWE ID: N/A

Description: Processing web content may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213847	N/A
https://support.apple.com/en-us/HT213841	N/A
https://support.apple.com/en-us/HT213843	N/A
https://support.apple.com/en-us/HT213842	N/A
http://www.openwall.com/lists/oss-security/2023/08/02/1	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/	N/A
https://www.debian.org/security/2023/dsa-5468	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/	N/A
https://security.gentoo.org/glsa/202401-04	N/A

Hyperlink: https://support.apple.com/en-us/HT213847

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213841

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213843

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213842

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/08/02/1

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/

Resource: N/A

Hyperlink: https://www.debian.org/security/2023/dsa-5468

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202401-04

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213847	x_transferred
https://support.apple.com/en-us/HT213841	x_transferred
https://support.apple.com/en-us/HT213843	x_transferred
https://support.apple.com/en-us/HT213842	x_transferred
http://www.openwall.com/lists/oss-security/2023/08/02/1	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/	x_transferred
https://www.debian.org/security/2023/dsa-5468	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/	x_transferred
https://security.gentoo.org/glsa/202401-04	x_transferred

Hyperlink: https://support.apple.com/en-us/HT213847

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213841

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213843

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213842

Resource:

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2023/08/02/1

Resource:

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/

Resource:

x_transferred

Hyperlink: https://www.debian.org/security/2023/dsa-5468

Resource:

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/

Resource:

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202401-04

Resource:

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:27 Jul, 2023 | 00:15

Updated At:05 Jan, 2024 | 14:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions before 16.6(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 15.7.8(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 16.0(inclusive) to 16.6(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 15.7.8(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 16.0(inclusive) to 16.6(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.5(exclusive)

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.openwall.com/lists/oss-security/2023/08/02/1	product-security@apple.com	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/	product-security@apple.com	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/	product-security@apple.com	N/A
https://security.gentoo.org/glsa/202401-04	product-security@apple.com	N/A
https://support.apple.com/en-us/HT213841	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213842	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213843	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213847	product-security@apple.com	Release Notes Vendor Advisory
https://www.debian.org/security/2023/dsa-5468	product-security@apple.com	N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/08/02/1

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202401-04

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213841

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213842

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213843

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213847

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://www.debian.org/security/2023/dsa-5468

Source: product-security@apple.com

Resource: N/A

Similar CVEs

750Records found

CVE-2019-8178

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.16%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:17

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-8684

Matching Score-8

Assigner-Apple Inc.

Product-enterprise_linux_server itunes iphone_os watchos tvos safari enterprise_linux_workstation mac_os_x enterprise_linux_desktop icloud iCloud for Windows (Microsoft Store)iTunes for Windows watchOS Safari macOS iCloud for Windows iOS tvOS

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-3.57% / 87.49%

7 Day CHG-0.09%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Red Hat, Inc.Apple Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8179

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.16%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:18

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-8210

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.16%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:25

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-8584

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.95%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8225

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.97% / 88.16%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:28

Updated-04 Aug, 2024 | 21:10

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-8825

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.55% / 67.46%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:51

Updated-04 Aug, 2024 | 21:31

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 10.7, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os icloud mac_os_x macOS iOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8681

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 74.04%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8687

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 74.04%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8013

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-21.74% / 95.62%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:41

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2019-7285

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.28% / 79.32%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:46

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari icloud iTunes for Windows iCloud for Windows Safari iOS tvOS

CWE ID-CWE-416

Use After Free

CVE-2019-8008

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-13.55% / 94.08%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:38

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8014

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-46.20% / 97.57%

7 Day CHG~0.00%

Published-20 Aug, 2019 | 19:43

Updated-04 Aug, 2024 | 21:02

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-4136

Matching Score-8

Matching Score-8

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-35.03% / 96.94%

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Product-chrome_os enterprise_linux_server linux_kernel macos linux_enterprise_desktop windows_8.1 windows_10 flash_player opensuse flash_player_desktop_runtime enterprise_linux_desktop windows_rt_8.1 windows enterprise_linux_workstation linux_enterprise_workstation_extension windows_server_2012 n/a

CVE-2019-5858

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.30% / 52.98%

7 Day CHG~0.00%

Published-25 Nov, 2019 | 14:22

Updated-04 Aug, 2024 | 20:09

Incorrect security UI in MacOS services integration in Google Chrome on OS X prior to 76.0.3809.87 allowed a local attacker to execute arbitrary code via a crafted HTML page.

Vendor-Apple Inc.Google LLC

Product-chrome macos Chrome

CWE ID-CWE-20

Improper Input Validation

CVE-2019-6237

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.81% / 73.95%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 20:16

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-3855

Matching Score-8

Assigner-Red Hat, Inc.

Vendor-libssh2 The libssh2 Project Debian GNU/Linux Fedora Project Oracle Corporation openSUSE Red Hat, Inc.NetApp, Inc.Apple Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-10.01% / 92.91%

7 Day CHG~0.00%

Published-21 Mar, 2019 | 20:13

Updated-17 Dec, 2025 | 21:40

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

Product-enterprise_linux_server peoplesoft_enterprise_peopletools debian_linux enterprise_linux_server_eus ontap_select_deploy_administration_utility enterprise_linux_server_aus enterprise_linux_workstation fedora enterprise_linux xcode libssh2 enterprise_linux_server_tus enterprise_linux_desktop leap libssh2

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-48503

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.05%

7 Day CHG~0.00%

Published-14 Aug, 2023 | 22:40

Updated-23 Oct, 2025 | 18:47

Known KEV||Action Due Date - 2025-11-10||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos watchos ipados macos safari iphone_os Safari iOS and iPadOS tvOS watchOS macOS Multiple Products

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-46700

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.69% / 71.42%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 14:15

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados tvos safari watchos macos iphone_os watchOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-9842

Matching Score-8

Matching Score-8

Vendor-zlib n/a Apple Inc.Oracle Corporation Canonical Ltd.openSUSE Red Hat, Inc.Debian GNU/Linux Node.js (OpenJS Foundation)

CVSS Score-8.8||HIGH

EPSS-13.69% / 94.11%

7 Day CHG~0.00%

Published-23 May, 2017 | 03:56

Updated-04 Dec, 2025 | 17:15

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

CWE ID-CWE-1335

Incorrect Bitwise Shift of Integer

CVE-2022-46699

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.69% / 71.42%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 14:15

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados tvos safari watchos macos iphone_os watchOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-9840

Matching Score-8

Matching Score-8

Vendor-boost zlib n/a Debian GNU/Linux Canonical Ltd.Red Hat, Inc.Oracle Corporation Node.js (OpenJS Foundation)Apple Inc.openSUSE

CVSS Score-8.8||HIGH

EPSS-13.00% / 93.94%

7 Day CHG~0.00%

Published-23 May, 2017 | 03:56

Updated-20 Apr, 2025 | 01:37

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVE-2022-46691

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.41% / 60.76%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 15:15

A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados tvos safari watchos macos iphone_os watchOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-45412

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.21% / 43.52%

7 Day CHG~0.00%

Published-22 Dec, 2022 | 00:00

Updated-15 Apr, 2025 | 15:16

When resolving a symlink such as <code>file:///proc/self/fd/1</code>, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. <br>*This bug only affects Thunderbird on Unix-based operated systems (Android, Linux, MacOS). Windows is unaffected.*. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.

Vendor-Linux Kernel Organization, Inc Google LLC Apple Inc.Mozilla Corporation

Product-firefox_esr macos android thunderbird linux_kernel firefox Thunderbird Firefox ESR Firefox

CWE ID-CWE-59

Improper Link Resolution Before File Access ('Link Following')

CVE-2016-6981

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.04%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6987.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2016-7870

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-1.05% / 77.21%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability in the RegExp class for specific search strategies. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-7875

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-2.83% / 85.93%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2016-6982

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.38%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6992

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.79% / 92.35%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2016-6932

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.75% / 82.28%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, and CVE-2016-6931.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2016-7877

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-5.94% / 90.46%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Message Format serialization (AFM0). Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-416

Use After Free

CVE-2016-6923

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.75% / 82.28%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2016-7873

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-5.09% / 89.61%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDK class related to ad policy functionality method. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6985

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.38%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-7871

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-2.83% / 85.93%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the Worker class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-7880

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-5.94% / 90.46%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting the length property of an array object. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-416

Use After Free

CVE-2016-7892

Matching Score-8

Matching Score-8

Product-mac_os_x flash_player windows linux_kernel windows_10 flash_player_desktop_runtime windows_8.1 chrome_os Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier Flash Player

CVSS Score-8.8||HIGH

EPSS-23.26% / 95.83%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-22 Oct, 2025 | 00:15

Known KEV||Action Due Date - 2022-04-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Apple Inc.Adobe Inc.Linux Kernel Organization, Inc Google LLC Microsoft Corporation

CWE ID-CWE-416

Use After Free

CVE-2022-42856

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.19% / 40.42%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-23 Oct, 2025 | 18:02

Known KEV||Action Due Date - 2023-01-04||Apply updates per vendor instructions.

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

Vendor-Apple Inc.

Product-tvos ipados macos safari iphone_os tvOS iOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-42828

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.18% / 40.13%

7 Day CHG~0.00%

Published-14 Aug, 2023 | 22:40

Updated-09 Oct, 2024 | 13:19

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CVE-2016-7878

Matching Score-8

Matching Score-8

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and earlier

CVSS Score-8.8||HIGH

EPSS-3.79% / 87.85%

7 Day CHG~0.00%

Published-15 Dec, 2016 | 06:31

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's MediaPlayer class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

CWE ID-CWE-416

Use After Free

CVE-2022-42826

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.10% / 26.90%

7 Day CHG~0.00%

Published-27 Feb, 2023 | 00:00

Updated-05 May, 2025 | 14:14

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkitgtk Apple Inc.

Product-macos ipados webkitgtk\+iphone_os safari macOS

CWE ID-CWE-416

Use After Free

CVE-2022-42795

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.84% / 74.48%

7 Day CHG~0.00%

Published-01 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos iphone_os macos watchos watchOS macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6987

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.04%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6925

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.75% / 82.28%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, and CVE-2016-6932.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6931

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.62% / 81.53%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2022-42863

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.02% / 76.88%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 16:15

Vendor-Apple Inc.

Product-ipados tvos safari watchos macos iphone_os watchOS tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6984

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.50% / 87.38%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4273, CVE-2016-6982, CVE-2016-6983, CVE-2016-6985, CVE-2016-6986, CVE-2016-6989, and CVE-2016-6990.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-6924

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.31% / 87.02%

7 Day CHG~0.00%

Published-14 Sep, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, and CVE-2016-6922.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-42867

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-5.72% / 90.26%

7 Day CHG~0.00%

Published-15 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 15:15

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados tvos safari watchos macos iphone_os watchOS tvOS

CWE ID-CWE-416

Use After Free

CVE-2016-7867

Matching Score-8

Matching Score-8