apple mac os x Schwachstellen (CVE)

8.8Hoch

CVE-2022-2294 KEV In Ransomware genutzt vor 4 Jahren

WebRTC Heap Buffer Overflow Vulnerability

Google Chrome

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

71%EPSS

5.5Mittel

CVE-2022-22674 KEV vor 4 Jahren

Apple macOS Out-of-Bounds Read Vulnerability

Apple macOS

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able…

1.1%EPSS

5.5Mittel

CVE-2021-30657 KEV vor 5 Jahren

Apple macOS Unspecified Vulnerability

Apple macOS

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively e…

69%EPSS

7.8Hoch

CVE-2021-30713 KEV vor 5 Jahren

Apple macOS Unspecified Vulnerability

Apple macOS

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

7.0%EPSS

7.5Hoch

CVE-2021-31010 KEV vor 5 Jahren

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Apple macOS; Apple watchOS

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restric…

3.7%EPSS

7.8Hoch

CVE-2021-30869 KEV vor 5 Jahren

Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Apple iOS and iPadOS; Apple macOS

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malici…

4.2%EPSS

7.8Hoch

CVE-2021-30860 KEV vor 5 Jahren

Apple Multiple Products Integer Overflow Vulnerability

Apple macOS; Apple watchOS; Apple iOS

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution.…

76%EPSS

9.8Kritisch

CVE-2021-1871 KEV vor 5 Jahren

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple iOS and iPadOS; Apple macOS

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. A…

7.0%EPSS

9.8Kritisch

CVE-2021-1870 KEV vor 5 Jahren

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple iOS and iPadOS; Apple macOS

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. A…

7.7%EPSS

8.8Hoch

CVE-2021-1789 KEV vor 5 Jahren

Apple Multiple Products Type Confusion Vulnerability

Apple iOS and iPadOS; Apple macOS

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing malic…

14%EPSS

7.0Hoch

CVE-2021-1782 KEV vor 5 Jahren

Apple Multiple Products Race Condition Vulnerability

Apple iOS and iPadOS; Apple macOS

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to eleva…

2.2%EPSS

7.8Hoch

CVE-2020-27930 KEV vor 5 Jahren

Apple Multiple Products Memory Corruption Vulnerability

Apple watchOS; Apple iOS and iPadOS; Apple macOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watch…

22%EPSS

7.8Hoch

CVE-2020-27932 KEV vor 5 Jahren

Apple Multiple Products Type Confusion Vulnerability

Apple watchOS; Apple iOS and iPadOS; Apple macOS

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.…

10%EPSS

5.5Mittel

CVE-2020-9934 KEV vor 6 Jahren

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple iOS; Apple macOS

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.

3.2%EPSS

7.8Hoch

CVE-2020-9859 KEV vor 6 Jahren

Apple Multiple Products Code Execution Vulnerability

Apple iOS; Apple macOS; Apple tvOS; Apple watchOS

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kern…

7.8Hoch

CVE-2020-3837 KEV vor 6 Jahren

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS; Apple macOS; Apple tvOS; Apple watchOS

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

15%EPSS

7.8Hoch

CVE-2019-8605 KEV vor 6 Jahren

Apple Multiple Products Use-After-Free Vulnerability

Apple iOS; Apple macOS; Apple tvOS; Apple watchOS

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

18%EPSS

7.8Hoch

CVE-2019-8526 KEV vor 6 Jahren

Apple macOS Use-After-Free Vulnerability

Apple macOS

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

7.8Hoch

CVE-2019-7286 KEV vor 6 Jahren

Apple Multiple Products Memory Corruption Vulnerability

Apple iOS; Apple macOS

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

16%EPSS

7.8Hoch

CVE-2018-4344 KEV vor 7 Jahren

Apple Multiple Products Memory Corruption Vulnerability

iOS, macOS, tvOS, watchOS

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

2.4%EPSS

7.5Hoch

CVE-2019-6223 KEV vor 7 Jahren

Apple iOS and macOS Group Facetime Vulnerability

Apple iOS; Apple macOS

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the…

2.6%EPSS

7.8Hoch

CVE-2015-1130 KEV vor 11 Jahren

Apple OS X Authentication Bypass Vulnerability

apple mac os x

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

10%EPSS

9.8Kritisch

CVE-2014-7169 KEV vor 12 Jahren

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as…

100%EPSS

9.8Kritisch

CVE-2014-6271 KEV vor 12 Jahren

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature…

100%EPSS

7.8Hoch

CVE-2014-4404 KEV vor 12 Jahren

Apple OS X Heap-Based Buffer Overflow Vulnerability

apple iphone os; apple mac os x; apple tvos

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

49%EPSS