← Back

Apple

apple

8,851 CVEs • 196 products

Products (196)

Click to collapse
Toggle
Iphone Os
iphone_os
4,135 CVEs
Mac Os X
mac_os_x
3,210 CVEs
Macos
macos
2,906 CVEs
Tvos
tvos
2,070 CVEs
Ipados
ipados
2,018 CVEs
Watchos
watchos
1,842 CVEs
Safari
safari
1,638 CVEs
Itunes
itunes
922 CVEs
Mac Os X Server
mac_os_x_server
655 CVEs
Visionos
visionos
499 CVEs
Icloud
icloud
449 CVEs
Webkit
webkit
258 CVEs
Quicktime
quicktime
246 CVEs
Xcode
xcode
95 CVEs
Ipad Os
ipad_os
89 CVEs
Cups
cups
56 CVEs
Apple Tv
apple_tv
36 CVEs
Darwin Streaming Server
darwin_streaming_server
27 CVEs
Ipod Touch
ipod_touch
18 CVEs
Quicktime Streaming Server
quicktime_streaming_server
16 CVEs
Airport Base Station Firmware
airport_base_station_firmware
11 CVEs
Os X Server
os_x_server
11 CVEs
Swiftnio
swiftnio
10 CVEs
Iphone
iphone
9 CVEs
Garageband
garageband
9 CVEs
Ichat
ichat
8 CVEs
Imageio
imageio
8 CVEs
Music
music
8 CVEs
Airport Extreme
airport_extreme
7 CVEs
Keynote
keynote
7 CVEs
Pages
pages
7 CVEs
Tv Os
tv_os
7 CVEs
Apple Remote Desktop
apple_remote_desktop
6 CVEs
Airport Express
airport_express
6 CVEs
Mail
mail
6 CVEs
Swiftnio Http/2
swiftnio_http/2
6 CVEs
Iphoto
iphoto
5 CVEs
Cfnetwork
cfnetwork
5 CVEs
Terminal
terminal
4 CVEs
Afp Server
afp_server
4 CVEs
Time Capsule
time_capsule
4 CVEs
Numbers
numbers
4 CVEs
Iwork
iwork
4 CVEs
Swift
swift
4 CVEs
Webobjects
webobjects
3 CVEs
Mac Os Runtime For Java
mac_os_runtime_for_java
3 CVEs
Ical
ical
3 CVEs
Webcore
webcore
3 CVEs
Mdnsresponder
mdnsresponder
3 CVEs
Coregraphics
coregraphics
3 CVEs
Bonjour
bonjour
3 CVEs
Airport Express Base Station Firmware
airport_express_base_station_firmware
3 CVEs
Airport Extreme Base Station Firmware
airport_extreme_base_station_firmware
3 CVEs
Watch Os
watch_os
3 CVEs
Logic Pro X
logic_pro_x
3 CVEs
Mac Os
mac_os
3 CVEs
Appleshare
appleshare
2 CVEs
Personal Web Sharing
personal_web_sharing
2 CVEs
Quicktime Pictureviewer
quicktime_pictureviewer
2 CVEs
Applescript
applescript
2 CVEs
Xsan
xsan
2 CVEs
Remote Desktop
remote_desktop
2 CVEs
Software Update
software_update
2 CVEs
Installer
installer
2 CVEs
Instant Message Framework
instant_message_framework
2 CVEs
Imovie
imovie
2 CVEs
A Ux
a_ux
2 CVEs
Carboncore
carboncore
2 CVEs
Java 1.5
java_1.5
2 CVEs
Java 1.6
java_1.6
2 CVEs
Ipad2
ipad2
2 CVEs
Ichat Server
ichat_server
2 CVEs
Boot Camp
boot_camp
2 CVEs
Apple Support
apple_support
2 CVEs
Shortcuts
shortcuts
2 CVEs
Shazam
shazam
2 CVEs
Files
files
2 CVEs
Airpods Firmware
airpods_firmware
2 CVEs
Airplay Audio Software Development Kit
airplay_audio_software_development_kit
2 CVEs
Airplay Video Software Development Kit
airplay_video_software_development_kit
2 CVEs
Carplay Communication Plug In
carplay_communication_plug-in
2 CVEs
Container
container
2 CVEs
Claris Emailer
claris_emailer
1 CVE
Tcp Ip Configuration Utility
tcp_ip_configuration_utility
1 CVE
Quicktime Darwin Mp3 Broadcaster
quicktime_darwin_mp3_broadcaster
1 CVE
802.11n
1 CVE
Apache Mod Digest Apple
apache_mod_digest_apple
1 CVE
Ichat Av
ichat_av
1 CVE
Airport Card
airport_card
1 CVE
Weblog Server
weblog_server
1 CVE
Textedit
textedit
1 CVE
Bomarchivehelper
bomarchivehelper
1 CVE
Preview
preview
1 CVE
Minimal Slp Service Agent
minimal_slp_service_agent
1 CVE
Server Manager
server_manager
1 CVE
Mac Os X Preview.app
mac_os_x_preview.app
1 CVE
Xserve Lights Out Management
xserve_lights-out_management
1 CVE
Pdfkit
pdfkit
1 CVE
Quartz Composer
quartz_composer
1 CVE
Core Audio Technologies
core_audio_technologies
1 CVE

CVEs (8,851)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-1773
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors.
CVE-2016-1772
1Apple
1Safari
May 6, 2026
Mar 24, 2016
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.
CVE-2016-1771
1Apple
1Safari
May 6, 2026
Mar 24, 2016
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site.
CVE-2016-1770
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL.
CVE-2016-1769
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
CVE-2016-1768
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1767.
CVE-2016-1767
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.
CVE-2016-1766
1Apple
1Iphone Os
May 6, 2026
Mar 24, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.
CVE-2016-1765
1Apple
1Xcode
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVE-2016-1764
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL.
CVE-2016-1763
1Apple
1Iphone Os
May 6, 2026
Mar 24, 2016
N/A· v4
3.5 LOW· v3
3.5 LOW· v2
Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL an...Show more
Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread.Show less
CVE-2016-1762
6Apple
CanonicalDebian+3 more
15Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+12 more
May 6, 2026
Mar 24, 2016
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVE-2016-1761
1Apple
3Iphone Os
Mac Os XWatchos
May 6, 2026
Mar 24, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
CVE-2016-1759
1Apple
1Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1758
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app.
CVE-2016-1757
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.0 HIGH· v3
9.3 HIGH· v2
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1756
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1755
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a c...Show more
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1754.Show less
CVE-2016-1754
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a c...Show more
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.Show less
CVE-2016-1753
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Mar 24, 2016
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app.