← Back

Mac Os X

mac_os_x

Vendor: Apple • 3,210 CVEs

CVEs (3,210)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
6.3 MEDIUM· v3
3.3 LOW· v2
CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service (out-of-bounds read), via unspecified vectors...Show more
CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service (out-of-bounds read), via unspecified vectors.Show less
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.3 HIGH· v3
9.3 HIGH· v2
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BM...Show more
CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BMP image.Show less
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
5.3 MEDIUM· v3
3.5 LOW· v2
FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vect...Show more
FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors.Show less
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Jul 22, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF fi...Show more
ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file.Show less
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted xStride and yStride values in an EXR image.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vector...Show more
IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.Show less
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.