Skip to contentApple Mac Os vulnerabilities
- apache http server, apple mac os x +1 moreThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...CVE-2014-0117Fix availableEPSS 35.7%4.3 Medium
- apple mac os xThunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API...CVE-2014-138110.0 High
- apple mac os xThe Security - Keychain component in Apple OS X before 10.9.4 does not properly implement...CVE-2014-13802.6 Low
- apple mac os xGraphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a...CVE-2014-137910.0 High
- apple mac os xIOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection...CVE-2014-13782.1 Low
- apple mac os xArray index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute...CVE-2014-137710.0 High
- apple mac os xIntel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API...CVE-2014-137610.0 High
- apple mac os xIntel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR...CVE-2014-13752.1 Low
- apple mac os xIntel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified...CVE-2014-137310.0 High
- apple mac os xGraphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during...CVE-2014-13724.9 Medium
- apple mac os x, mac os x server +1 moreArray index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code...CVE-2014-13717.5 High
- apple mac os x, mac os x server +1 moreThe byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers...CVE-2014-13706.8 Medium
- apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2...CVE-2014-13615.0 Medium
- apple iphone os, mac os x, tvos +2 moreInteger underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135910.0 High
- apple iphone os, mac os x, tvos +2 moreInteger overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV...CVE-2014-135810.0 High
- apple iphone os, mac os x, tvos +2 moreHeap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and...CVE-2014-135710.0 High
- apple iphone os, mac os x, tvos +2 moreHeap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and...CVE-2014-135610.0 High
- apple iphone os, mac os x, tvos +2 moreThe IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and...CVE-2014-13554.9 Medium
- apple mac os xiBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which...CVE-2014-13172.1 Low
- python, apple mac os x +1 morePython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which...CVE-2013-70404.3 Medium
- apple mac os xThe kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure...CVE-2014-1322Public exploit4.9 Medium
- apple mac os xPower Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to...CVE-2014-13213.3 Low
- apple iphone os, mac os x, tvos +2 moreIOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places...CVE-2014-13204.9 Medium
- apple mac os xBuffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute...CVE-2014-13196.8 Medium
- apple mac os xThe Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain...CVE-2014-131810.0 High
- apple mac os xHeimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of...CVE-2014-13165.0 Medium
- apple mac os xFormat string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows...CVE-2014-13156.8 Medium
- apple mac os xWindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed...CVE-2014-131410.0 High
- apple iphone os, mac os x, mac os x server +1 more +3 moreCFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does...CVE-2014-12964.3 Medium
- apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and...CVE-2014-12956.8 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 moreThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...CVE-2015-3153Fix available5.0 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...CVE-2015-3148Fix availableEPSS 14.1%5.0 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 morecURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...CVE-2015-3143Fix availableEPSS 11.1%5.0 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- python, apple mac os x +1 morePython before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and...CVE-2013-7338Fix available7.1 High
- todd miller sudo, apple mac os x +1 moreSudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment...CVE-2014-0106Fix available6.6 Medium
- apple mac os xA certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent ...CVE-2014-22346.4 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12706.8 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12696.8 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12686.8 Medium
- apple mac os x, mac os x server +1 moreThe systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local...CVE-2014-12654.6 Medium
- apple mac os xFinder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL...CVE-2014-12643.3 Low
- apple mac os xcurl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used...CVE-2014-12634.3 Medium
- apple mac os xApple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox...CVE-2014-12627.5 High
- apple mac os xInteger signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to...CVE-2014-12617.5 High
- apple mac os xQuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause...CVE-2014-12606.8 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute...CVE-2014-12596.8 Medium
- apple mac os xHeap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers...CVE-2014-12586.8 Medium
- apple mac os xCFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action...CVE-2014-12573.6 Low
- apple mac os x, mac os x server +1 moreBuffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to...CVE-2014-12567.5 High
- Show moreLoading…