Skip to contentApple Mac Os vulnerabilities
- apple mac os x, iphone os +1 moreBuffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute...CVE-2013-10266.8 Medium
- apple mac os x, iphone os +1 moreBuffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to...CVE-2013-10256.8 Medium
- gnu glibc, apple mac os x, debian linux +14 more +16 moreHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...CVE-2015-0235Public exploitFix availableEPSS 94.6%10.0 High
- apple mac os x, iphone os +1 moreThe posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate...CVE-2013-39546.9 Medium
- apple mac os x, iphone os +1 moreThe mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X...CVE-2013-39534.9 Medium
- apple mac os xThe fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x...CVE-2013-39522.1 Low
- apple mac os x, iphone os, watchos +2 moresys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and Mac OS X 10.8.x does not properly...CVE-2013-39514.6 Medium
- apple mac os xThe posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not prevent use of...CVE-2013-39492.1 Low
- apple mac os x, mac os x server +1 moreCoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the...CVE-2013-10246.8 Medium
- apple mac os x, mac os x server +1 moreSMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated...CVE-2013-09904.9 Medium
- apple mac os xDisk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to...CVE-2013-09852.1 Low
- apple mac os x, mac os x server +1 moreDirectory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary...CVE-2013-0984Public exploitEPSS 14.4%9.3 High
- apple mac os xStack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote...CVE-2013-09836.8 Medium
- apple mac os x, mac os x server +1 moreThe Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent...CVE-2013-09821.7 Low
- apple mac os x, mac os x server +1 moreBuffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to...CVE-2013-09756.8 Medium
- apple quicktime, mac os x +1 moreBuffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code...CVE-2013-09869.3 High
- apple mac os xIOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary...CVE-2013-09766.8 Medium
- apple mac os x, mac os x server +1 moreSoftware Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the...CVE-2013-09736.8 Medium
- apple mac os x, mac os x server +1 moreUse-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to...CVE-2013-09716.8 Medium
- apple mac os xMessages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call...CVE-2013-09704.3 Medium
- apple mac os xLogin Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the...CVE-2013-09694.9 Medium
- apple mac os x, mac os x server +1 moreCoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types,...CVE-2013-09674.3 Medium
- apple mac os x, mac os x server +1 moreThe Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does...CVE-2013-09666.4 Medium
- todd miller sudo, apple mac os x +1 moresudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not...CVE-2013-2777Fix available4.4 Medium
- todd miller sudo, apple mac os x +1 moresudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or...CVE-2013-2776Fix available4.4 Medium
- todd miller sudo, apple mac os x +1 moresudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does...CVE-2013-1776Fix available4.4 Medium
- php, apple mac os x, redhat enterprise linux +2 moreThe SOAP parser in PHP before 5.3.22 and 5.4.x before 5.4.12 allows remote attackers to read...CVE-2013-18244.3 Medium
- todd miller sudo, apple mac os x +1 moresudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically...CVE-2013-1775Public exploitFix available6.9 Medium
- apple mac os x, google chrome +1 moreGoogle Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for...CVE-2013-08867.5 High
- apple mac os x, mac os x server +1 moreApple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor...CVE-2012-37234.6 Medium
- apple mac os x, iphone os, mac os x server +2 moreThe Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6...CVE-2012-37226.8 Medium
- apple mac os xProfile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the...CVE-2012-37215.0 Medium
- apple mac os xMobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes...CVE-2012-37204.3 Medium
- apple mac os x, mac os x server +1 moreMail in Apple Mac OS X before 10.7.5 does not properly handle embedded web plugins, which allows...CVE-2012-37196.8 Medium
- apple mac os x, mac os x server +1 moreApple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords...CVE-2012-37182.1 Low
- apple mac os x, mac os x server +1 moreCoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code...CVE-2012-3716Public exploit7.5 High
- apple mac os x, mac os x server +1 moreBuffer overflow in the DirectoryService Proxy in DirectoryService in Apple Mac OS X through 10.6...CVE-2012-06507.5 High
- apple iphone os, mac os x, safari +21 more +23 moreThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...CVE-2015-4000Public exploitFix availableEPSS 99.9%3.7 Low
- openssl, apple mac os x, debian linux +17 more +19 moreThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 Low
- postgresql, apple mac os x server, canonical ubuntu linux +6 more +8 moreThe xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3...CVE-2012-34896.5 Medium
- apple mac os x, libexpat project libexpat +1 morereadfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of...CVE-2012-11474.3 Medium
- apple mac os x, libexpat project libexpat +1 moreMemory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context...CVE-2012-1148Fix available5.0 Medium
- apple mac os x, mac os x server +1 moreTime Machine in Apple Mac OS X before 10.7.4 does not require continued use of SRP-based...CVE-2012-06754.3 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in the Security Framework in Apple Mac OS X before 10.7.4 allows remote...CVE-2012-06627.5 High
- apple mac os x, mac os x server +1 moreUse-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote...CVE-2012-06616.8 Medium
- apple mac os x, mac os x server +1 moreBuffer underflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...CVE-2012-06606.8 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...CVE-2012-06596.8 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in QuickTime in Apple Mac OS X before 10.7.4 allows remote attackers to execute...CVE-2012-06586.8 Medium
- apple mac os x, mac os x server +1 moreQuartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled,...CVE-2012-06572.1 Low
- apple mac os xRace condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account...CVE-2012-06566.9 Medium
- Show moreLoading…