Skip to contentApple Mac Os X vulnerabilities
- apple mac os xThe "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous...CVE-2014-44585.0 Medium
- apple iphone os, mac os x +1 moreApple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a...CVE-2014-44535.0 Medium
- netbsd, apple mac os x +1 moreThe fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2...CVE-2014-8517Public exploitFix availableEPSS 69.1%7.5 High
- haxx libcurl, apple mac os x, canonical ubuntu linux +3 more +5 moreThe curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the...CVE-2014-3707Fix available4.3 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 High
- php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 Medium
- php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 High
- php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- apple mac os xSecurityAgent in Apple OS X before 10.10 does not ensure that a Kerberos ticket is in the cache...CVE-2014-44444.4 Medium
- apple mac os xApple OS X before 10.10 allows remote attackers to cause a denial of service (NULL pointer...CVE-2014-44437.8 High
- apple mac os xThe kernel in Apple OS X before 10.10 allows local users to cause a denial of service (panic) via...CVE-2014-44424.7 Medium
- apple mac os xNetFS Client Framework in Apple OS X before 10.10 does not ensure that the disabling of File...CVE-2014-44416.8 Medium
- apple mac os xThe MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy...CVE-2014-44402.6 Low
- apple mac os xMail in Apple OS X before 10.10 does not properly recognize the removal of a recipient address...CVE-2014-44394.3 Medium
- apple mac os xRace condition in LoginWindow in Apple OS X before 10.10 allows physically proximate attackers to...CVE-2014-44386.9 Medium
- apple mac os xLaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox...CVE-2014-44376.8 Medium
- apple mac os xIOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service (out-of-bounds...CVE-2014-44364.3 Medium
- apple mac os xThe "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate...CVE-2014-44354.4 Medium
- apple mac os xThe kernel in Apple OS X before 10.10 allows physically proximate attackers to cause a denial of...CVE-2014-44344.9 Medium
- apple mac os xHeap-based buffer overflow in the kernel in Apple OS X before 10.10 allows physically proximate...CVE-2014-44337.2 High
- apple mac os xfdesetup in Apple OS X before 10.10 does not properly display the encryption status in between a...CVE-2014-44324.7 Medium
- apple mac os xDock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows...CVE-2014-44312.1 Low
- apple mac os xCoreStorage in Apple OS X before 10.10 retains a volume's encryption keys upon an eject action in...CVE-2014-44304.7 Medium
- apple mac os xBluetooth in Apple OS X before 10.10 does not require encryption for HID Low Energy devices,...CVE-2014-44285.4 Medium
- apple mac os xApp Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism...CVE-2014-44277.5 High
- apple mac os xAFP File Server in Apple OS X before 10.10 allows remote attackers to discover the network...CVE-2014-44264.3 Medium
- apple mac os xCFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after...CVE-2014-44254.6 Medium
- apple mac os xSafari in Apple OS X before 10.10 allows remote attackers to cause a denial of service (universal...CVE-2014-44175.0 Medium
- apple mac os xThe Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource...CVE-2014-43916.8 Medium
- apple mac os xBuffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execute...CVE-2014-43516.8 Medium
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- python, apple mac os x +1 moreInteger overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...CVE-2014-7185Fix available6.4 Medium
- apple mac os xThe IOHIDSecurePromptClient function in Apple OS X does not properly validate pointer values,...CVE-2014-78619.3 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-44166.9 Medium
- apple mac os xThe kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information...CVE-2014-44032.1 Low
- apple mac os xAn unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds...CVE-2014-44029.3 High
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-44016.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-44006.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-43996.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-43986.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-43976.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-43966.9 Medium
- apple mac os xAn unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple...CVE-2014-43956.9 Medium
- Show moreLoading…