Skip to contentApple Mac Os X vulnerabilities
- apple mac os xiBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which...CVE-2014-13172.1 Low
- python, apple mac os x +1 morePython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which...CVE-2013-70404.3 Medium
- apple mac os xThe kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure...CVE-2014-1322Public exploit4.9 Medium
- apple mac os xPower Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to...CVE-2014-13213.3 Low
- apple iphone os, mac os x, tvos +2 moreIOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places...CVE-2014-13204.9 Medium
- apple mac os xBuffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute...CVE-2014-13196.8 Medium
- apple mac os xThe Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain...CVE-2014-131810.0 High
- apple mac os xHeimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of...CVE-2014-13165.0 Medium
- apple mac os xFormat string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows...CVE-2014-13156.8 Medium
- apple mac os xWindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed...CVE-2014-131410.0 High
- apple iphone os, mac os x, mac os x server +1 more +3 moreCFNetwork in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 does...CVE-2014-12964.3 Medium
- apple iphone os, mac os x, tvos +2 moreSecure Transport in Apple iOS before 7.1.1, Apple OS X 10.8.x and 10.9.x through 10.9.2, and...CVE-2014-12956.8 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 moreThe default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both...CVE-2015-3153Fix available5.0 Medium
- haxx curl, libcurl, apple mac os x +5 more +7 morecURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections...CVE-2015-3148Fix availableEPSS 14.1%5.0 Medium
- haxx curl, libcurl, apple mac os x +3 more +5 morecURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows...CVE-2015-3143Fix availableEPSS 11.1%5.0 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- python, apple mac os x +1 morePython before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and...CVE-2013-7338Fix available7.1 High
- todd miller sudo, apple mac os x +1 moreSudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment...CVE-2014-0106Fix available6.6 Medium
- apple mac os xA certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent ...CVE-2014-22346.4 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12706.8 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12696.8 Medium
- apple safari, webkit, mac os x +1 more +3 moreWebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to...CVE-2014-12686.8 Medium
- apple mac os x, mac os x server +1 moreThe systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local...CVE-2014-12654.6 Medium
- apple mac os xFinder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL...CVE-2014-12643.3 Low
- apple mac os xcurl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used...CVE-2014-12634.3 Medium
- apple mac os xApple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox...CVE-2014-12627.5 High
- apple mac os xInteger signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to...CVE-2014-12617.5 High
- apple mac os xQuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause...CVE-2014-12606.8 Medium
- apple mac os x, mac os x server +1 moreBuffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute...CVE-2014-12596.8 Medium
- apple mac os xHeap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers...CVE-2014-12586.8 Medium
- apple mac os xCFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action...CVE-2014-12573.6 Low
- apple mac os x, mac os x server +1 moreBuffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to...CVE-2014-12567.5 High
- apple mac os xApple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the...CVE-2014-12557.5 High
- apple mac os xApple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute...CVE-2014-12546.8 Medium
- apple iphone os, mac os x, tvos +2 moreThe SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the...CVE-2014-1266Public exploit7.4 High
- postgresql, apple mac os x, mac os x server +2 moreThe "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly...CVE-2014-0067Fix available4.6 Medium
- python, apple mac os x +1 moreBuffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5...CVE-2014-1912Public exploitFix availableEPSS 27.2%7.5 High
- apple pages, iphone os, mac os x +2 moreDouble free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote...CVE-2014-12527.5 High
- apple mac os x, nvidia gpu driver +1 moreUnspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows...CVE-2013-5987Fix available7.2 High
- apple mac os x, safari +1 moreApple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession...CVE-2013-71272.1 Low
- net-snmp, apple mac os x, canonical ubuntu linux +2 moreNet-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT...CVE-2012-6151Public exploitFix available4.3 Medium
- php, apple mac os x, opensuse +2 moreThe asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4...CVE-2013-6420Public exploitFix availableEPSS 35.4%7.5 High
- php, apple mac os x, canonical ubuntu linux +2 more +4 moreThe scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly...CVE-2013-67125.0 Medium
- apple mac os xApple Mac OS X 10.9 allows local users to cause a denial of service (memory corruption or panic)...CVE-2013-6799Public exploit4.7 Medium
- apple mac os xThe USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of...CVE-2013-51924.9 Medium
- apple mac os xThe syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive...CVE-2013-51912.1 Low
- apple mac os xSmart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate...CVE-2013-51904.3 Medium
- apple mac os xApple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting...CVE-2013-51895.8 Medium
- apple mac os xThe Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are...CVE-2013-51884.0 Medium
- apple mac os xThe Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain...CVE-2013-51871.9 Low
- Show moreLoading…