ByteOS

Product

iphone_os

CPEs

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 17.5 (custom)

Vendor

Product

mac_os

CPEs

cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 14.5 (custom)

Vendor

Product

visionos

CPEs

cpe:2.3:a:apple:visionos:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 1.2 (custom)

Vendor

Product

watchos

CPEs

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 10.5 (custom)

Vendor

Product

safari

CPEs

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 17.5 (custom)

Vendor

Product

tvos

CPEs

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 17.5 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-119	CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Type: CWE

CWE ID: CWE-119

Description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT214101	x_transferred
https://support.apple.com/en-us/HT214106	x_transferred
https://support.apple.com/en-us/HT214108	x_transferred
https://support.apple.com/en-us/HT214104	x_transferred
https://support.apple.com/en-us/HT214103	x_transferred
https://support.apple.com/en-us/HT214102	x_transferred
http://seclists.org/fulldisclosure/2024/Jun/5	x_transferred

Hyperlink: https://support.apple.com/en-us/HT214101

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214106

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214108

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214104

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214103

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT214102

Resource:

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2024/Jun/5

Resource:

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:10 Jun, 2024 | 21:15

Updated At:03 Jul, 2024 | 16:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions before 17.5(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 17.5(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 17.5(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 14.0(inclusive) to 14.5(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

>>tvos>>Versions before 17.5(exclusive)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

>>visionos>>Versions before 1.2(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 10.5(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-119	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-119

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://seclists.org/fulldisclosure/2024/Jun/5	product-security@apple.com	Mailing List Third Party Advisory
https://support.apple.com/en-us/HT214101	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT214102	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT214103	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT214104	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT214106	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT214108	product-security@apple.com	Vendor Advisory

Hyperlink: http://seclists.org/fulldisclosure/2024/Jun/5

Source: product-security@apple.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://support.apple.com/en-us/HT214101

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT214102

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT214103

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT214104

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT214106

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT214108

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

3099Records found

CVE-2010-0037

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-4.73% / 88.98%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.

Vendor-n/a Apple Inc.

Product-mac_os_x mac_os_x_server n/a mac_os_x_server

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-23517

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.24% / 47.21%

7 Day CHG~0.00%

Published-27 Feb, 2023 | 00:00

Updated-11 Mar, 2025 | 16:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos macos iphone_os safari ipados watchos Safari watchOS macOS tvOS iOS and iPadOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-27820

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.41% / 60.66%

7 Day CHG~0.00%

Published-10 Jun, 2024 | 20:56

Updated-13 Feb, 2025 | 17:46

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari visionos macos visionOS iOS and iPadOS tvOS macOS Safari watchOS safari tvos iphone_os visionos watchos ipad_os mac_os

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-23213

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.36% / 57.57%

7 Day CHG-0.03%

Published-23 Jan, 2024 | 00:25

Updated-20 Jun, 2025 | 20:15

The issue was addressed with improved memory handling. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos safari tvos ipados watchos tvOS macOS watchOS Safari iOS and iPadOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4764

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.97% / 75.71%

7 Day CHG~0.00%

Published-20 Feb, 2017 | 08:35

Updated-20 Apr, 2025 | 01:37

An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Apple Inc.

Product-iphone_os itunes tvos safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0992

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-15.25% / 94.35%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0986

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0962, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1002

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-53.03% / 97.87%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0961

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0962

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.38% / 91.34%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0960, CVE-2016-0961, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0989

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-7.07% / 91.14%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0960

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-8.78% / 92.15%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-0973

Matching Score-10

Assigner-CERT/CC

Matching Score-10

Assigner-CERT/CC

CVSS Score-8.8||HIGH

EPSS-2.01% / 82.95%

7 Day CHG+1.21%

Published-18 Jan, 2015 | 18:00

Updated-09 Jun, 2025 | 16:15

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

Vendor-libpng n/a Oracle Corporation Apple Inc.

Product-mac_os_x solaris libpng n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2017-5114

Matching Score-10

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.48% / 80.23%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac, and 61.0.3163.81 for Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-8439

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-31.48% / 96.62%

7 Day CHG~0.00%

Published-25 Nov, 2014 | 23:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-15||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.

Vendor-n/a Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-air flash_player linux_kernel macos air_sdk air_sdk_\&_compiler windows mac_os_x n/a Flash Player

CWE ID-CWE-416

Use After Free

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-9495

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-2.53% / 84.85%

7 Day CHG~0.00%

Published-10 Jan, 2015 | 19:00

Updated-09 Jun, 2025 | 16:15

Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a "very wide interlaced" PNG image.

Vendor-libpng n/a Apple Inc.

Product-mac_os_x libpng n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-122

Heap-based Buffer Overflow

CVE-2023-4073

Matching Score-10

Assigner-Chrome

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.59% / 68.25%

7 Day CHG~0.00%

Published-03 Aug, 2023 | 00:27

Updated-13 Feb, 2025 | 17:08

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Debian GNU/Linux Fedora Project Apple Inc.Google LLC

Product-chrome debian_linux macos fedora Chrome

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3774

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-25 Mar, 2020 | 20:33

Updated-04 Aug, 2024 | 07:44

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-photoshop_2020 windows photoshop_cc macos Adobe Photoshop

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-31273

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.05% / 13.52%

7 Day CHG~0.00%

Published-29 Jul, 2025 | 23:29

Updated-31 Jul, 2025 | 20:59

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-ipados iphone_os watchos tvos visionos macos safari visionOS Safari iOS and iPadOS macOS watchOS tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-31277

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.05% / 13.52%

7 Day CHG~0.00%

Published-29 Jul, 2025 | 23:29

Updated-31 Jul, 2025 | 21:00

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-ipados iphone_os watchos tvos visionos macos safari visionOS Safari iOS and iPadOS macOS watchOS tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-31204

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.06% / 17.83%

7 Day CHG~0.00%

Published-12 May, 2025 | 21:42

Updated-27 May, 2025 | 13:57

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-safari macos iphone_os ipados watchos visionos tvos macOS visionOS tvOS watchOS Safari iOS and iPadOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-31278

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.05% / 13.52%

7 Day CHG~0.00%

Published-29 Jul, 2025 | 23:35

Updated-31 Jul, 2025 | 20:55

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iPadOS 17.7.9, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-ipados iphone_os watchos tvos visionos macos safari visionOS Safari iOS and iPadOS macOS iPadOS watchOS tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-40447

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.29% / 52.34%

7 Day CHG~0.00%

Published-25 Oct, 2023 | 18:31

Updated-13 Feb, 2025 | 17:08

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos iOS and iPadOS tvOS macOS Safari watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-8174

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-3.98% / 87.94%

7 Day CHG~0.00%

Published-17 Oct, 2019 | 20:16

Updated-04 Aug, 2024 | 21:10

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Product-acrobat_dc windows macos acrobat_reader_dc Adobe Acrobat and Reader

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-8745

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.09% / 77.02%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:31

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes icloud mac_os_x tvos iTunes for Windows iCloud for Windows macOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-2034

Matching Score-10

Matching Score-10

CVSS Score-7.5||HIGH

EPSS-25.63% / 96.02%

7 Day CHG~0.00%

Published-09 Jun, 2012 | 00:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-04-18||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-24189

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.03% / 6.79%

7 Day CHG-0.00%

Published-19 May, 2025 | 16:00

Updated-28 May, 2025 | 14:19

The issue was addressed with improved checks. This issue is fixed in Safari 18.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing maliciously crafted web content may lead to memory corruption.

Vendor-Apple Inc.

Product-tvos ipados safari watchos iphone_os visionos macos iOS and iPadOS macOS watchOS visionOS Safari tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-4233

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-89.14% / 99.51%

7 Day CHG~0.00%

Published-08 Jun, 2018 | 18:00

Updated-05 Aug, 2024 | 05:11

An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vendor-n/a Canonical Ltd.Apple Inc.Microsoft Corporation

Product-itunes iphone_os ubuntu_linux watchos tvos safari windows icloud n/a itunes iphone_os ubuntu_linux watchos tvos safari icloud

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-5052

Matching Score-10

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 57.0.2987.133 for Mac, Windows and Linux, and 57.0.2987.132 for Android

Matching Score-10

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.54% / 66.73%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-2997

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-1.53% / 80.58%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-30666

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.90% / 74.73%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:25

Updated-30 Jul, 2025 | 01:38

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor-Apple Inc.

Product-iphone_os iOS iOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3846

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.77% / 72.59%

7 Day CHG~0.00%

Published-27 Feb, 2020 | 20:45

Updated-04 Aug, 2024 | 07:44

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS iCloud for Windows (Legacy)tvOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2020-3772

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-25 Mar, 2020 | 20:32

Updated-04 Aug, 2024 | 07:44

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-photoshop_2020 windows photoshop_cc macos Adobe Photoshop

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3776

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-25 Mar, 2020 | 20:36

Updated-04 Aug, 2024 | 07:44

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Product-photoshop_2020 windows photoshop_cc macos Adobe Photoshop

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0611

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-93.70% / 99.84%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 14:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-22629

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-17.04% / 94.72%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 19:02

Updated-22 May, 2025 | 15:15

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos ipados macos iphone_os safari watchos itunes watchOS Safari tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22610

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.39% / 58.89%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:58

Updated-22 May, 2025 | 19:15

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-ipad_os tvos macos iphone_os safari watchos watchOS Safari tvOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22628

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.12% / 31.17%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:58

Updated-22 May, 2025 | 16:15

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipad_os tvos macos iphone_os safari watchos watchOS Safari tvOS

CWE ID-CWE-416

Use After Free

CVE-2023-28205

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.06% / 17.05%

7 Day CHG~0.00%

Published-10 Apr, 2023 | 00:00

Updated-30 Jul, 2025 | 01:37

Known KEV||Action Due Date - 2023-05-01||Apply updates per vendor instructions.

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Vendor-Apple Inc.

Product-iphone_os ipados macos safari Safari iOS and iPadOS macOS Multiple Products

CWE ID-CWE-416

Use After Free

CVE-2022-22590

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.33% / 55.49%

7 Day CHG+0.04%

Published-18 Mar, 2022 | 17:59

Updated-09 Oct, 2024 | 13:40

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-webkitgtk Apple Inc.

Product-iphone_os watchos ipados tvos safari webkitgtk macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-416

Use After Free

CVE-2010-1822

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-2.97% / 85.97%

7 Day CHG~0.00%

Published-04 Oct, 2010 | 20:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG element in a non-SVG document.

Vendor-n/a openSUSE Apple Inc.Google LLC

Product-opensuse safari chrome n/a

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2010-1280

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-37.16% / 97.04%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0986

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-9.79% / 92.65%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly process asset entries, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted Shockwave file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0987

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-11.73% / 93.43%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1283

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.61% / 92.05%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 does not properly parse 3D objects in .dir (aka Director) files, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a modified field in a 0xFFFFFF49 record.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1281

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-12.84% / 93.77%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0050

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-45.13% / 97.51%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Vendor-n/a Canonical Ltd.Fedora Project openSUSE Apple Inc.

Product-ubuntu_linux fedora opensuse iphone_os safari n/a

CWE ID-CWE-416

Use After Free

CVE-2010-0129

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-11.55% / 93.35%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2010-0130

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-8.8||HIGH

EPSS-12.11% / 93.54%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2010-0048

Matching Score-8

Assigner-Apple Inc.