← Back

Apple

apple

8,851 CVEs • 196 products

Products (196)

Click to collapse
Toggle
Iphone Os
iphone_os
4,135 CVEs
Mac Os X
mac_os_x
3,210 CVEs
Macos
macos
2,906 CVEs
Tvos
tvos
2,070 CVEs
Ipados
ipados
2,018 CVEs
Watchos
watchos
1,842 CVEs
Safari
safari
1,638 CVEs
Itunes
itunes
922 CVEs
Mac Os X Server
mac_os_x_server
655 CVEs
Visionos
visionos
499 CVEs
Icloud
icloud
449 CVEs
Webkit
webkit
258 CVEs
Quicktime
quicktime
246 CVEs
Xcode
xcode
95 CVEs
Ipad Os
ipad_os
89 CVEs
Cups
cups
56 CVEs
Apple Tv
apple_tv
36 CVEs
Darwin Streaming Server
darwin_streaming_server
27 CVEs
Ipod Touch
ipod_touch
18 CVEs
Quicktime Streaming Server
quicktime_streaming_server
16 CVEs
Airport Base Station Firmware
airport_base_station_firmware
11 CVEs
Os X Server
os_x_server
11 CVEs
Swiftnio
swiftnio
10 CVEs
Iphone
iphone
9 CVEs
Garageband
garageband
9 CVEs
Ichat
ichat
8 CVEs
Imageio
imageio
8 CVEs
Music
music
8 CVEs
Airport Extreme
airport_extreme
7 CVEs
Keynote
keynote
7 CVEs
Pages
pages
7 CVEs
Tv Os
tv_os
7 CVEs
Apple Remote Desktop
apple_remote_desktop
6 CVEs
Airport Express
airport_express
6 CVEs
Mail
mail
6 CVEs
Swiftnio Http/2
swiftnio_http/2
6 CVEs
Iphoto
iphoto
5 CVEs
Cfnetwork
cfnetwork
5 CVEs
Terminal
terminal
4 CVEs
Afp Server
afp_server
4 CVEs
Time Capsule
time_capsule
4 CVEs
Numbers
numbers
4 CVEs
Iwork
iwork
4 CVEs
Swift
swift
4 CVEs
Webobjects
webobjects
3 CVEs
Mac Os Runtime For Java
mac_os_runtime_for_java
3 CVEs
Ical
ical
3 CVEs
Webcore
webcore
3 CVEs
Mdnsresponder
mdnsresponder
3 CVEs
Coregraphics
coregraphics
3 CVEs
Bonjour
bonjour
3 CVEs
Airport Express Base Station Firmware
airport_express_base_station_firmware
3 CVEs
Airport Extreme Base Station Firmware
airport_extreme_base_station_firmware
3 CVEs
Watch Os
watch_os
3 CVEs
Logic Pro X
logic_pro_x
3 CVEs
Mac Os
mac_os
3 CVEs
Appleshare
appleshare
2 CVEs
Personal Web Sharing
personal_web_sharing
2 CVEs
Quicktime Pictureviewer
quicktime_pictureviewer
2 CVEs
Applescript
applescript
2 CVEs
Xsan
xsan
2 CVEs
Remote Desktop
remote_desktop
2 CVEs
Software Update
software_update
2 CVEs
Installer
installer
2 CVEs
Instant Message Framework
instant_message_framework
2 CVEs
Imovie
imovie
2 CVEs
A Ux
a_ux
2 CVEs
Carboncore
carboncore
2 CVEs
Java 1.5
java_1.5
2 CVEs
Java 1.6
java_1.6
2 CVEs
Ipad2
ipad2
2 CVEs
Ichat Server
ichat_server
2 CVEs
Boot Camp
boot_camp
2 CVEs
Apple Support
apple_support
2 CVEs
Shortcuts
shortcuts
2 CVEs
Shazam
shazam
2 CVEs
Files
files
2 CVEs
Airpods Firmware
airpods_firmware
2 CVEs
Airplay Audio Software Development Kit
airplay_audio_software_development_kit
2 CVEs
Airplay Video Software Development Kit
airplay_video_software_development_kit
2 CVEs
Carplay Communication Plug In
carplay_communication_plug-in
2 CVEs
Container
container
2 CVEs
Claris Emailer
claris_emailer
1 CVE
Tcp Ip Configuration Utility
tcp_ip_configuration_utility
1 CVE
Quicktime Darwin Mp3 Broadcaster
quicktime_darwin_mp3_broadcaster
1 CVE
802.11n
1 CVE
Apache Mod Digest Apple
apache_mod_digest_apple
1 CVE
Ichat Av
ichat_av
1 CVE
Airport Card
airport_card
1 CVE
Weblog Server
weblog_server
1 CVE
Textedit
textedit
1 CVE
Bomarchivehelper
bomarchivehelper
1 CVE
Preview
preview
1 CVE
Minimal Slp Service Agent
minimal_slp_service_agent
1 CVE
Server Manager
server_manager
1 CVE
Mac Os X Preview.app
mac_os_x_preview.app
1 CVE
Xserve Lights Out Management
xserve_lights-out_management
1 CVE
Pdfkit
pdfkit
1 CVE
Quartz Composer
quartz_composer
1 CVE
Core Audio Technologies
core_audio_technologies
1 CVE

CVEs (8,851)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5799
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5798
1Apple
2Itunes
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-3.Show less
CVE-2015-5797
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5796
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5795
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5794
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5793
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web s...Show more
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5792
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5791
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web s...Show more
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5790
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5789
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5788
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
CVE-2015-5767
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765.
CVE-2015-5765
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767.
CVE-2015-5764
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767.
CVE-2015-3801
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors.
CVE-2014-8611
2Apple
Freebsd
3Freebsd
Iphone OsMac Os X
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.9 MEDIUM· v2
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or...Show more
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.Show less
CVE-2015-6908
2Apple
Openldap
2Mac Os X
Openldap
May 6, 2026
Sep 11, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by...Show more
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.Show less
CVE-2015-5986
2Apple
Isc
2Bind
Mac Os X Server
May 6, 2026
Sep 5, 2015
N/A· v4
N/A· v3
7.1 HIGH· v2
openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
CVE-2015-5722
2Apple
Isc
2Bind
Mac Os X Server
May 6, 2026
Sep 5, 2015
N/A· v4
N/A· v3
7.8 HIGH· v2
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key...Show more
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.Show less