← Back

Mac Os X

mac_os_x

Vendor: Apple • 3,210 CVEs

CVEs (3,210)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-7987
1Apple
5Airport Base Station Firmware
Iphone OsMac Os X+2 more
May 6, 2026
Jun 26, 2016
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_...Show more
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.Show less
CVE-2016-1862
1Apple
1Mac Os X
May 6, 2026
Jun 19, 2016
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1860.
CVE-2016-1861
1Apple
1Mac Os X
May 6, 2026
Jun 19, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulner...Show more
The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.Show less
CVE-2016-1860
1Apple
1Mac Os X
May 6, 2026
Jun 19, 2016
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1862.
CVE-2016-4448
8Apple
HpMcafee+5 more
19Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Server Aus+16 more
May 6, 2026
Jun 9, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
CVE-2016-4447
7Apple
CanonicalDebian+4 more
11Debian Linux
Icewall Federation AgentIphone Os+8 more
May 6, 2026
Jun 9, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlPa...Show more
The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.Show less
CVE-2016-0718
9Apple
CanonicalDebian+6 more
14Debian Linux
FirefoxLeap+11 more
May 6, 2026
May 26, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVE-2016-4073
2Apple
Php
2Mac Os X
Php
May 6, 2026
May 20, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (applicat...Show more
Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.Show less
CVE-2016-4072
2Apple
Php
2Mac Os X
Php
May 6, 2026
May 20, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_ana...Show more
The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.Show less
CVE-2016-4071
2Apple
Php
2Mac Os X
Php
May 6, 2026
May 20, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers...Show more
Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call.Show less
CVE-2016-1853
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support.
CVE-2016-1851
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors.
CVE-2016-1850
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-1848
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-1847
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte...Show more
OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.Show less
CVE-2016-1846
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointe...Show more
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.Show less
CVE-2016-1844
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.
CVE-2016-1843
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-1842
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
May 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
CVE-2016-1841
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft...Show more
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.Show less