Macos

macos

Vendor: Apple • 2,755 CVEs

CVEs (2,755)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-4192 4Apple DebianFedoraproject+1 more 5Debian Linux FedoraMac Os X+2 more Jun 17, 2026 Dec 31, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-4187 3Apple FedoraprojectVim 4Fedora Mac Os XMacos+1 more Jun 17, 2026 Dec 29, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-4173 3Apple FedoraprojectVim 4Fedora Mac Os XMacos+1 more Jun 17, 2026 Dec 27, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Use After Free
CVE-2021-4166 7Apple DebianFedoraproject+4 more 8Debian Linux Enterprise LinuxFactory+5 more Jun 17, 2026 Dec 25, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 vim is vulnerable to Out-of-bounds Read
CVE-2021-30767 1Apple 5Ipados Iphone OsMac Os X+2 more Jun 17, 2026 Dec 23, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local user may be...Show more A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local user may be able to modify protected parts of the file system.Show less
CVE-2017-13905 1Apple 5Iphone Os Mac Os XMacos+2 more Nov 21, 2024 Dec 23, 2021 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An...Show more A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges.Show less
CVE-2017-13892 1Apple 2Mac Os X Macos Nov 21, 2024 Dec 23, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Up...Show more An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.Show less
CVE-2021-44790 7Apache AppleDebian+4 more 14Cloud Backup Communications Element ManagerCommunications Operations Monitor+11 more Jun 17, 2026 Dec 20, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might...Show more A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.Show less
CVE-2021-44224 6Apache AppleDebian+3 more 12Communications Element Manager Communications Operations MonitorCommunications Session Report Manager+9 more Jun 17, 2026 Dec 20, 2021 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be...Show more A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).Show less
CVE-2021-4136 3Apple FedoraprojectVim 4Fedora Mac Os XMacos+1 more Jun 17, 2026 Dec 19, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-30840 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Oct 28, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted dfont file may lead to arbitrary code execution.
CVE-2021-30836 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Oct 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose rest...Show more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.Show less
CVE-2021-30834 1Apple 6Ipados Iphone OsMac Os X+3 more Jun 17, 2026 Oct 28, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file...Show more A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution.Show less
CVE-2021-30833 1Apple 2Mac Os X Macos Jun 17, 2026 Oct 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
CVE-2021-30831 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 Oct 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2021-30824 1Apple 2Mac Os X Macos Jun 17, 2026 Oct 28, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execut...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2021-30823 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Oct 28, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to b...Show more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.Show less
CVE-2021-30821 1Apple 2Mac Os X Macos Jun 17, 2026 Oct 28, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute...Show more A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2021-30818 1Apple 6Ipados Iphone OsMacos+3 more Jun 17, 2026 Oct 28, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead...Show more A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2021-30817 1Apple 1Macos Jun 17, 2026 Oct 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with.

Previous 1...112113114...138 Next