← Back

Apple

apple

8,859 CVEs • 196 products

Products (196)

Click to collapse
Toggle
Iphone Os
iphone_os
Mac Os X
mac_os_x
Macos
macos
Tvos
tvos
Ipados
ipados
Watchos
watchos
Safari
safari
Itunes
itunes
Visionos
visionos
Icloud
icloud
Webkit
webkit
Quicktime
quicktime
Xcode
xcode
Ipad Os
ipad_os
Cups
cups
Apple Tv
apple_tv
Ipod Touch
ipod_touch
Os X Server
os_x_server
Swiftnio
swiftnio
Iphone
iphone
Garageband
garageband
Ichat
ichat
Imageio
imageio
Music
music
Keynote
keynote
Pages
pages
Tv Os
tv_os
Mail
mail
Iphoto
iphoto
Cfnetwork
cfnetwork
Terminal
terminal
Afp Server
afp_server
Time Capsule
time_capsule
Numbers
numbers
Iwork
iwork
Swift
swift
Webobjects
webobjects
Ical
ical
Webcore
webcore
Mdnsresponder
mdnsresponder
Coregraphics
coregraphics
Bonjour
bonjour
Watch Os
watch_os
Logic Pro X
logic_pro_x
Mac Os
mac_os
Appleshare
appleshare
Applescript
applescript
Xsan
xsan
Installer
installer
Imovie
imovie
A Ux
a_ux
Carboncore
carboncore
Java 1.5
java_1.5
Java 1.6
java_1.6
Ipad2
ipad2
Ichat Server
ichat_server
Boot Camp
boot_camp
Apple Support
apple_support
Shortcuts
shortcuts
Shazam
shazam
Files
files
Container
container
Claris Emailer
claris_emailer
802.11n
Ichat Av
ichat_av
Airport Card
airport_card
Weblog Server
weblog_server
Textedit
textedit
Preview
preview
Server Manager
server_manager
Pdfkit
pdfkit

CVEs (8,859)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
8Apple
BrocadeCanonical+5 more
18Cloud Backup
Communications Network Charging And ControlFabric Operating System+15 more
Jun 17, 2026
May 27, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
9Apple
BrocadeCanonical+6 more
19Cloud Backup
Communications Network Charging And ControlDebian Linux+16 more
Jun 17, 2026
May 27, 2020
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
7Apple
CanonicalDebian+4 more
15Communications Cloud Native Core Policy
Communications Network Charging And ControlDebian Linux+12 more
Jun 17, 2026
May 24, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
1Apple
1Nioextras
Jun 17, 2026
May 11, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.
2Apple
Google
4Android
IpadosIphone Os+1 more
Jun 17, 2026
May 8, 2020
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to...Show more
Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).Show less
5Apple
DebianFedoraproject+2 more
5Debian Linux
FedoraJson+++2 more
Jun 17, 2026
Apr 28, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on...Show more
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.Show less
8Apple
BroadcomCanonical+5 more
18Brocade Fabric Operating System
Cloud BackupDebian Linux+15 more
Jun 17, 2026
Apr 28, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
1Apple
3Iphone Os
Mac Os XTvos
Jun 17, 2026
Apr 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.
5Apple
CanonicalDebian+2 more
11Debian Linux
FedoraIcloud+8 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
5Apple
CanonicalDebian+2 more
11Debian Linux
FedoraIcloud+8 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer.
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Jun 17, 2026
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
3Apple
DebianKsh Project
3Debian Linux
KshMac Os X
Jun 17, 2026
Apr 2, 2020
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and appl...Show more
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to provide one of those environment variables could allow them to exploit this issue remotely.Show less
1Apple
1Mac Os X
Jun 17, 2026
Apr 1, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
1Apple
1Mac Os X
Jun 17, 2026
Apr 1, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
1Apple
1Mac Os X
Jun 17, 2026
Apr 1, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.Show less