← Back

Apple

apple

9,182 CVEs • 198 products

Products (198)

Click to collapse
Toggle
Iphone Os
iphone_os
Mac Os X
mac_os_x
Macos
macos
Ipados
ipados
Tvos
tvos
Watchos
watchos
Safari
safari
Itunes
itunes
Visionos
visionos
Icloud
icloud
Webkit
webkit
Quicktime
quicktime
Xcode
xcode
Ipad Os
ipad_os
Cups
cups
Apple Tv
apple_tv
Ipod Touch
ipod_touch
Os X Server
os_x_server
Swiftnio
swiftnio
Iphone
iphone
Garageband
garageband
Ichat
ichat
Imageio
imageio
Music
music
Keynote
keynote
Pages
pages
Tv Os
tv_os
Mail
mail
Iphoto
iphoto
Cfnetwork
cfnetwork
Terminal
terminal
Afp Server
afp_server
Time Capsule
time_capsule
Numbers
numbers
Iwork
iwork
Swift
swift
Container
container
Webobjects
webobjects
Ical
ical
Webcore
webcore
Mdnsresponder
mdnsresponder
Coregraphics
coregraphics
Bonjour
bonjour
Watch Os
watch_os
Logic Pro X
logic_pro_x
Mac Os
mac_os
Appleshare
appleshare
Applescript
applescript
Xsan
xsan
Installer
installer
Imovie
imovie
A Ux
a_ux
Carboncore
carboncore
Java 1.5
java_1.5
Java 1.6
java_1.6
Ipad2
ipad2
Ichat Server
ichat_server
Boot Camp
boot_camp
Apple Support
apple_support
Shortcuts
shortcuts
Shazam
shazam
Swiftnio Ssl
swiftnio_ssl
Files
files
Swift Crypto
swift-crypto
Claris Emailer
claris_emailer
802.11n
Ichat Av
ichat_av
Airport Card
airport_card
Weblog Server
weblog_server
Textedit
textedit
Preview
preview
Server Manager
server_manager
Pdfkit
pdfkit

CVEs (9,182)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
1Quicktime
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-201...Show more
QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file, a different vulnerability than CVE-2015-3765, CVE-2015-3779, CVE-2015-3788, CVE-2015-3789, CVE-2015-3790, CVE-2015-3791, CVE-2015-3792, CVE-2015-5753, and CVE-2015-5779.Show less
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted series of Unicode characters.
1Apple
1Iphone Os
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The Sandbox_profiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app.
1Apple
3Iphone Os
Mac Os XSafari
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local users to cause a denial of service via a crafted volume.
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.9 MEDIUM· v2
The fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a denial of service (resource consumption) via unspecified vectors.
1Apple
1Iphone Os
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling.
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted XML document.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different v...Show more
FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-5756 and CVE-2015-5775.Show less
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
The Apple ID OD plug-in in Apple OS X before 10.10.5 allows attackers to change arbitrary user passwords via a crafted app.
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted...Show more
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3797.Show less
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted...Show more
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3798.Show less
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted...Show more
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3797 and CVE-2015-3798.Show less
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app that sends a malformed XPC me...Show more
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app that sends a malformed XPC message.Show less
1Apple
1Mac Os X
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Unicode s...Show more
The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Unicode string.Show less
1Apple
1Iphone Os
May 6, 2026
Aug 17, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app.