Priority CRITICAL 97KEV
A type confusion issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.16159 · Published 2019-12-18 · Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-843
Priority CRITICAL 93KEV
A type confusion issue was addressed with improved state handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.10337 · Published 2020-12-08 · Fixed in 7.1, 14.2 +6 CWE-843
Priority HIGH 81
A logic issue was addressed with improved restrictions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.77398 · Published 2020-06-09 · Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5
Priority HIGH 73
An issue was discovered in certain Apple products.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.53816 · Published 2018-06-08 · No fix listed CWE-119
Priority HIGH 71
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.43382 · Published 2010-06-30 · Fixed CWE-120
Priority HIGH 70
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.69005 · Published 2005-01-19 · No fix listed
Priority HIGH 65
An issue was discovered in certain Apple products.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.37844 · Published 2018-04-03 · No fix listed CWE-119
Priority MEDIUM 64
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.35444 · Published 2019-04-03 · No fix listed CWE-119
Priority MEDIUM 63
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.28815 · Published 2009-06-02 · No fix listed CWE-119
Priority MEDIUM 61
A memory corruption issue was addressed with improved input validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.20324 · Published 2019-12-18 · Fixed in iOS 12.3, macOS Mojave 10.14.5 +4 CWE-787
Priority MEDIUM 56
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.1559 · Published 2012-06-12 · No fix listed CWE-119
Priority MEDIUM 54
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.24739 · Published 2015-05-25 · Will not fix CWE-119
Priority MEDIUM 54
Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web pa…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11621 · Published 2008-09-17 · No fix listed CWE-119
Priority MEDIUM 53
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.13642 · Published 2019-12-18 · Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787
Priority MEDIUM 53
An issue was discovered in certain Apple products.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.13099 · Published 2018-04-03 · Partial fix CWE-119
Priority MEDIUM 53
WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06918 · Published 2010-06-18 · No fix listed
Priority MEDIUM 52
A memory corruption issue was addressed with improved memory handling.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.12706 · Published 2019-04-03 · No fix listed CWE-119
Priority MEDIUM 52
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07039 · Published 2016-06-09 · Partial fix CWE-134
Priority MEDIUM 52
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08948 · Published 2009-09-24 · No fix listed CWE-119
Priority MEDIUM 52
Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a MOV file with "long argum…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09734 · Published 2008-12-09 · No fix listed CWE-119
Priority MEDIUM 51
A logic issue was addressed with improved restrictions.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08273 · Published 2020-06-09 · Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5
Priority MEDIUM 51
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11113 · Published 2019-12-18 · Partial fix · iOS 12.4, macOS Mojave 10.14.6 +6 CWE-787
Priority MEDIUM 51
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.11189 · Published 2019-12-18 · Partial fix · iOS 12.2, tvOS 12.2 +4 CWE-787
Priority MEDIUM 51
A use after free issue was addressed with improved memory management.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.10299 · Published 2019-04-03 · No fix listed CWE-416
Priority MEDIUM 51
An issue was discovered in certain Apple products.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.10704 · Published 2018-06-08 · No fix listed CWE-125
Load more