← Back

Mac Os X

mac_os_x

Vendor: Apple • 3,210 CVEs

CVEs (3,210)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a...Show more
Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1818.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corr...Show more
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1819.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corr...Show more
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1818 and CVE-2016-1819.Show less
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
May 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cau...Show more
The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.Show less
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memor...Show more
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
5.1 MEDIUM· v3
1.9 LOW· v2
Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecifie...Show more
Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors.Show less
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
1Apple
1Mac Os X
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer derefe...Show more
CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.Show less
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
May 20, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive info...Show more
CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app.Show less
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
May 20, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecif...Show more
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.Show less