← Back

Apple

apple

9,182 CVEs • 198 products

Products (198)

Click to collapse
Toggle
Iphone Os
iphone_os
4,313 CVEs
Mac Os X
mac_os_x
3,210 CVEs
Macos
macos
3,193 CVEs
Ipados
ipados
2,195 CVEs
Tvos
tvos
2,152 CVEs
Watchos
watchos
1,929 CVEs
Safari
safari
1,662 CVEs
Itunes
itunes
922 CVEs
Mac Os X Server
mac_os_x_server
655 CVEs
Visionos
visionos
601 CVEs
Icloud
icloud
449 CVEs
Webkit
webkit
258 CVEs
Quicktime
quicktime
246 CVEs
Xcode
xcode
100 CVEs
Ipad Os
ipad_os
89 CVEs
Cups
cups
56 CVEs
Apple Tv
apple_tv
36 CVEs
Darwin Streaming Server
darwin_streaming_server
27 CVEs
Ipod Touch
ipod_touch
18 CVEs
Quicktime Streaming Server
quicktime_streaming_server
16 CVEs
Os X Server
os_x_server
12 CVEs
Airport Base Station Firmware
airport_base_station_firmware
11 CVEs
Swiftnio
swiftnio
11 CVEs
Iphone
iphone
9 CVEs
Garageband
garageband
9 CVEs
Ichat
ichat
8 CVEs
Imageio
imageio
8 CVEs
Music
music
8 CVEs
Airport Extreme
airport_extreme
7 CVEs
Keynote
keynote
7 CVEs
Pages
pages
7 CVEs
Tv Os
tv_os
7 CVEs
Swiftnio Http/2
swiftnio_http/2
7 CVEs
Apple Remote Desktop
apple_remote_desktop
6 CVEs
Airport Express
airport_express
6 CVEs
Mail
mail
6 CVEs
Iphoto
iphoto
5 CVEs
Cfnetwork
cfnetwork
5 CVEs
Terminal
terminal
4 CVEs
Afp Server
afp_server
4 CVEs
Time Capsule
time_capsule
4 CVEs
Numbers
numbers
4 CVEs
Iwork
iwork
4 CVEs
Swift
swift
4 CVEs
Container
container
4 CVEs
Webobjects
webobjects
3 CVEs
Mac Os Runtime For Java
mac_os_runtime_for_java
3 CVEs
Ical
ical
3 CVEs
Webcore
webcore
3 CVEs
Mdnsresponder
mdnsresponder
3 CVEs
Coregraphics
coregraphics
3 CVEs
Bonjour
bonjour
3 CVEs
Airport Express Base Station Firmware
airport_express_base_station_firmware
3 CVEs
Airport Extreme Base Station Firmware
airport_extreme_base_station_firmware
3 CVEs
Watch Os
watch_os
3 CVEs
Logic Pro X
logic_pro_x
3 CVEs
Mac Os
mac_os
3 CVEs
Appleshare
appleshare
2 CVEs
Personal Web Sharing
personal_web_sharing
2 CVEs
Quicktime Pictureviewer
quicktime_pictureviewer
2 CVEs
Applescript
applescript
2 CVEs
Xsan
xsan
2 CVEs
Remote Desktop
remote_desktop
2 CVEs
Software Update
software_update
2 CVEs
Installer
installer
2 CVEs
Instant Message Framework
instant_message_framework
2 CVEs
Imovie
imovie
2 CVEs
A Ux
a_ux
2 CVEs
Carboncore
carboncore
2 CVEs
Java 1.5
java_1.5
2 CVEs
Java 1.6
java_1.6
2 CVEs
Ipad2
ipad2
2 CVEs
Ichat Server
ichat_server
2 CVEs
Boot Camp
boot_camp
2 CVEs
Apple Support
apple_support
2 CVEs
Shortcuts
shortcuts
2 CVEs
Shazam
shazam
2 CVEs
Swiftnio Ssl
swiftnio_ssl
2 CVEs
Files
files
2 CVEs
Airpods Firmware
airpods_firmware
2 CVEs
Airplay Audio Software Development Kit
airplay_audio_software_development_kit
2 CVEs
Airplay Video Software Development Kit
airplay_video_software_development_kit
2 CVEs
Carplay Communication Plug In
carplay_communication_plug-in
2 CVEs
Swift Crypto
swift-crypto
2 CVEs
Claris Emailer
claris_emailer
1 CVE
Tcp Ip Configuration Utility
tcp_ip_configuration_utility
1 CVE
Quicktime Darwin Mp3 Broadcaster
quicktime_darwin_mp3_broadcaster
1 CVE
802.11n
1 CVE
Apache Mod Digest Apple
apache_mod_digest_apple
1 CVE
Ichat Av
ichat_av
1 CVE
Airport Card
airport_card
1 CVE
Weblog Server
weblog_server
1 CVE
Textedit
textedit
1 CVE
Bomarchivehelper
bomarchivehelper
1 CVE
Preview
preview
1 CVE
Minimal Slp Service Agent
minimal_slp_service_agent
1 CVE
Server Manager
server_manager
1 CVE
Mac Os X Preview.app
mac_os_x_preview.app
1 CVE
Xserve Lights Out Management
xserve_lights-out_management
1 CVE
Pdfkit
pdfkit
1 CVE

CVEs (9,182)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4603
1Apple
1Iphone Os
May 6, 2026
Jul 22, 2016
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
CVE-2016-4602
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596,...Show more
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.Show less
CVE-2016-4601
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
CVE-2016-4600
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596,...Show more
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602.Show less
CVE-2016-4599
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
CVE-2016-4598
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
9.8 CRITICAL· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
CVE-2016-4597
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596,...Show more
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602.Show less
CVE-2016-4596
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597,...Show more
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602.Show less
CVE-2016-4595
1Apple
1Mac Os X
May 6, 2026
Jul 22, 2016
N/A· v4
4.6 MEDIUM· v3
2.1 LOW· v2
Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure.
CVE-2016-4594
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Jul 22, 2016
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
CVE-2016-4593
1Apple
1Iphone Os
May 6, 2026
Jul 22, 2016
N/A· v4
2.4 LOW· v3
2.1 LOW· v2
The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
CVE-2016-4592
2Apple
Webkitgtk
2Webkit
Webkitgtk
May 6, 2026
Jul 22, 2016
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.
CVE-2016-4591
1Apple
1Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
CVE-2016-4590
1Apple
2Safari
Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
5.4 MEDIUM· v3
4.3 MEDIUM· v2
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2016-4589
1Apple
1Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerab...Show more
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.Show less
CVE-2016-4588
1Apple
1Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4587
1Apple
1Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site.
CVE-2016-4586
1Apple
2Safari
Tvos
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4585
1Apple
1Webkit
May 6, 2026
Jul 22, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari.Show less
CVE-2016-4584
1Apple
3Iphone Os
SafariTvos
May 6, 2026
Jul 22, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte...Show more
The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.Show less