← Back

Apple

apple

9,182 CVEs • 198 products

Products (198)

Click to collapse
Toggle
Iphone Os
iphone_os
4,313 CVEs
Mac Os X
mac_os_x
3,210 CVEs
Macos
macos
3,193 CVEs
Ipados
ipados
2,195 CVEs
Tvos
tvos
2,152 CVEs
Watchos
watchos
1,929 CVEs
Safari
safari
1,662 CVEs
Itunes
itunes
922 CVEs
Mac Os X Server
mac_os_x_server
655 CVEs
Visionos
visionos
601 CVEs
Icloud
icloud
449 CVEs
Webkit
webkit
258 CVEs
Quicktime
quicktime
246 CVEs
Xcode
xcode
100 CVEs
Ipad Os
ipad_os
89 CVEs
Cups
cups
56 CVEs
Apple Tv
apple_tv
36 CVEs
Darwin Streaming Server
darwin_streaming_server
27 CVEs
Ipod Touch
ipod_touch
18 CVEs
Quicktime Streaming Server
quicktime_streaming_server
16 CVEs
Os X Server
os_x_server
12 CVEs
Airport Base Station Firmware
airport_base_station_firmware
11 CVEs
Swiftnio
swiftnio
11 CVEs
Iphone
iphone
9 CVEs
Garageband
garageband
9 CVEs
Ichat
ichat
8 CVEs
Imageio
imageio
8 CVEs
Music
music
8 CVEs
Airport Extreme
airport_extreme
7 CVEs
Keynote
keynote
7 CVEs
Pages
pages
7 CVEs
Tv Os
tv_os
7 CVEs
Swiftnio Http/2
swiftnio_http/2
7 CVEs
Apple Remote Desktop
apple_remote_desktop
6 CVEs
Airport Express
airport_express
6 CVEs
Mail
mail
6 CVEs
Iphoto
iphoto
5 CVEs
Cfnetwork
cfnetwork
5 CVEs
Terminal
terminal
4 CVEs
Afp Server
afp_server
4 CVEs
Time Capsule
time_capsule
4 CVEs
Numbers
numbers
4 CVEs
Iwork
iwork
4 CVEs
Swift
swift
4 CVEs
Container
container
4 CVEs
Webobjects
webobjects
3 CVEs
Mac Os Runtime For Java
mac_os_runtime_for_java
3 CVEs
Ical
ical
3 CVEs
Webcore
webcore
3 CVEs
Mdnsresponder
mdnsresponder
3 CVEs
Coregraphics
coregraphics
3 CVEs
Bonjour
bonjour
3 CVEs
Airport Express Base Station Firmware
airport_express_base_station_firmware
3 CVEs
Airport Extreme Base Station Firmware
airport_extreme_base_station_firmware
3 CVEs
Watch Os
watch_os
3 CVEs
Logic Pro X
logic_pro_x
3 CVEs
Mac Os
mac_os
3 CVEs
Appleshare
appleshare
2 CVEs
Personal Web Sharing
personal_web_sharing
2 CVEs
Quicktime Pictureviewer
quicktime_pictureviewer
2 CVEs
Applescript
applescript
2 CVEs
Xsan
xsan
2 CVEs
Remote Desktop
remote_desktop
2 CVEs
Software Update
software_update
2 CVEs
Installer
installer
2 CVEs
Instant Message Framework
instant_message_framework
2 CVEs
Imovie
imovie
2 CVEs
A Ux
a_ux
2 CVEs
Carboncore
carboncore
2 CVEs
Java 1.5
java_1.5
2 CVEs
Java 1.6
java_1.6
2 CVEs
Ipad2
ipad2
2 CVEs
Ichat Server
ichat_server
2 CVEs
Boot Camp
boot_camp
2 CVEs
Apple Support
apple_support
2 CVEs
Shortcuts
shortcuts
2 CVEs
Shazam
shazam
2 CVEs
Swiftnio Ssl
swiftnio_ssl
2 CVEs
Files
files
2 CVEs
Airpods Firmware
airpods_firmware
2 CVEs
Airplay Audio Software Development Kit
airplay_audio_software_development_kit
2 CVEs
Airplay Video Software Development Kit
airplay_video_software_development_kit
2 CVEs
Carplay Communication Plug In
carplay_communication_plug-in
2 CVEs
Swift Crypto
swift-crypto
2 CVEs
Claris Emailer
claris_emailer
1 CVE
Tcp Ip Configuration Utility
tcp_ip_configuration_utility
1 CVE
Quicktime Darwin Mp3 Broadcaster
quicktime_darwin_mp3_broadcaster
1 CVE
802.11n
1 CVE
Apache Mod Digest Apple
apache_mod_digest_apple
1 CVE
Ichat Av
ichat_av
1 CVE
Airport Card
airport_card
1 CVE
Weblog Server
weblog_server
1 CVE
Textedit
textedit
1 CVE
Bomarchivehelper
bomarchivehelper
1 CVE
Preview
preview
1 CVE
Minimal Slp Service Agent
minimal_slp_service_agent
1 CVE
Server Manager
server_manager
1 CVE
Mac Os X Preview.app
mac_os_x_preview.app
1 CVE
Xserve Lights Out Management
xserve_lights-out_management
1 CVE
Pdfkit
pdfkit
1 CVE

CVEs (9,182)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5789
1Apple
3Iphone Os
ItunesSafari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different v...Show more
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.Show less
CVE-2015-5788
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.
CVE-2015-5767
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765.
CVE-2015-5765
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767.
CVE-2015-5764
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767.
CVE-2015-3801
1Apple
2Iphone Os
Safari
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors.
CVE-2014-8611
2Apple
Freebsd
3Freebsd
Iphone OsMac Os X
May 6, 2026
Sep 18, 2015
N/A· v4
N/A· v3
6.9 MEDIUM· v2
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or...Show more
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.Show less
CVE-2015-6908
2Apple
Openldap
2Mac Os X
Openldap
May 6, 2026
Sep 11, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by...Show more
The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd.Show less
CVE-2015-5986
2Apple
Isc
2Bind
Mac Os X Server
May 6, 2026
Sep 5, 2015
N/A· v4
N/A· v3
7.1 HIGH· v2
openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
CVE-2015-5722
2Apple
Isc
2Bind
Mac Os X Server
May 6, 2026
Sep 5, 2015
N/A· v4
N/A· v3
7.8 HIGH· v2
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key...Show more
buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) by creating a zone containing a malformed DNSSEC key and issuing a query for a name in that zone.Show less
CVE-2015-5786
1Apple
1Quicktime
May 6, 2026
Aug 25, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5785.
CVE-2015-5785
1Apple
1Quicktime
May 6, 2026
Aug 25, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-5786.
CVE-2015-6563
2Apple
Openbsd
2Mac Os X
Openssh
May 27, 2026
Aug 24, 2015
N/A· v4
6.4 MEDIUM· v3
1.9 LOW· v2
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging...Show more
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.Show less
CVE-2015-5784
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted...Show more
runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.Show less
CVE-2015-5783
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770.
CVE-2015-5782
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF i...Show more
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image.Show less
CVE-2015-5781
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted PNG im...Show more
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted PNG image.Show less
CVE-2015-5779
1Apple
1Quicktime
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-201...Show more
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5751, and CVE-2015-5753.Show less
CVE-2015-5778
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a di...Show more
CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-5777.Show less
CVE-2015-5777
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a di...Show more
CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerability than CVE-2015-5778.Show less