← Back

Apple

apple

8,695 CVEs • 196 products

Products (196)

Click to collapse
Toggle
Iphone Os
iphone_os
4,053 CVEs
Mac Os X
mac_os_x
3,210 CVEs
Macos
macos
2,755 CVEs
Tvos
tvos
2,005 CVEs
Ipados
ipados
1,936 CVEs
Watchos
watchos
1,779 CVEs
Safari
safari
1,629 CVEs
Itunes
itunes
922 CVEs
Mac Os X Server
mac_os_x_server
655 CVEs
Icloud
icloud
449 CVEs
Visionos
visionos
434 CVEs
Webkit
webkit
258 CVEs
Quicktime
quicktime
246 CVEs
Xcode
xcode
95 CVEs
Ipad Os
ipad_os
89 CVEs
Cups
cups
56 CVEs
Apple Tv
apple_tv
36 CVEs
Darwin Streaming Server
darwin_streaming_server
27 CVEs
Ipod Touch
ipod_touch
18 CVEs
Quicktime Streaming Server
quicktime_streaming_server
16 CVEs
Airport Base Station Firmware
airport_base_station_firmware
11 CVEs
Os X Server
os_x_server
11 CVEs
Swiftnio
swiftnio
10 CVEs
Iphone
iphone
9 CVEs
Garageband
garageband
9 CVEs
Ichat
ichat
8 CVEs
Imageio
imageio
8 CVEs
Music
music
8 CVEs
Airport Extreme
airport_extreme
7 CVEs
Keynote
keynote
7 CVEs
Pages
pages
7 CVEs
Tv Os
tv_os
7 CVEs
Apple Remote Desktop
apple_remote_desktop
6 CVEs
Airport Express
airport_express
6 CVEs
Mail
mail
6 CVEs
Swiftnio Http/2
swiftnio_http/2
6 CVEs
Iphoto
iphoto
5 CVEs
Cfnetwork
cfnetwork
5 CVEs
Terminal
terminal
4 CVEs
Afp Server
afp_server
4 CVEs
Time Capsule
time_capsule
4 CVEs
Numbers
numbers
4 CVEs
Iwork
iwork
4 CVEs
Swift
swift
4 CVEs
Webobjects
webobjects
3 CVEs
Mac Os Runtime For Java
mac_os_runtime_for_java
3 CVEs
Ical
ical
3 CVEs
Webcore
webcore
3 CVEs
Mdnsresponder
mdnsresponder
3 CVEs
Coregraphics
coregraphics
3 CVEs
Bonjour
bonjour
3 CVEs
Airport Express Base Station Firmware
airport_express_base_station_firmware
3 CVEs
Airport Extreme Base Station Firmware
airport_extreme_base_station_firmware
3 CVEs
Watch Os
watch_os
3 CVEs
Logic Pro X
logic_pro_x
3 CVEs
Mac Os
mac_os
3 CVEs
Appleshare
appleshare
2 CVEs
Personal Web Sharing
personal_web_sharing
2 CVEs
Quicktime Pictureviewer
quicktime_pictureviewer
2 CVEs
Applescript
applescript
2 CVEs
Xsan
xsan
2 CVEs
Remote Desktop
remote_desktop
2 CVEs
Software Update
software_update
2 CVEs
Installer
installer
2 CVEs
Instant Message Framework
instant_message_framework
2 CVEs
Imovie
imovie
2 CVEs
A Ux
a_ux
2 CVEs
Carboncore
carboncore
2 CVEs
Java 1.5
java_1.5
2 CVEs
Java 1.6
java_1.6
2 CVEs
Ipad2
ipad2
2 CVEs
Ichat Server
ichat_server
2 CVEs
Boot Camp
boot_camp
2 CVEs
Apple Support
apple_support
2 CVEs
Shortcuts
shortcuts
2 CVEs
Shazam
shazam
2 CVEs
Files
files
2 CVEs
Airpods Firmware
airpods_firmware
2 CVEs
Airplay Audio Software Development Kit
airplay_audio_software_development_kit
2 CVEs
Airplay Video Software Development Kit
airplay_video_software_development_kit
2 CVEs
Carplay Communication Plug In
carplay_communication_plug-in
2 CVEs
Container
container
2 CVEs
Claris Emailer
claris_emailer
1 CVE
Tcp Ip Configuration Utility
tcp_ip_configuration_utility
1 CVE
Quicktime Darwin Mp3 Broadcaster
quicktime_darwin_mp3_broadcaster
1 CVE
802.11n
1 CVE
Apache Mod Digest Apple
apache_mod_digest_apple
1 CVE
Ichat Av
ichat_av
1 CVE
Airport Card
airport_card
1 CVE
Weblog Server
weblog_server
1 CVE
Textedit
textedit
1 CVE
Bomarchivehelper
bomarchivehelper
1 CVE
Preview
preview
1 CVE
Minimal Slp Service Agent
minimal_slp_service_agent
1 CVE
Server Manager
server_manager
1 CVE
Mac Os X Preview.app
mac_os_x_preview.app
1 CVE
Xserve Lights Out Management
xserve_lights-out_management
1 CVE
Pdfkit
pdfkit
1 CVE
Quartz Composer
quartz_composer
1 CVE
Core Audio Technologies
core_audio_technologies
1 CVE

CVEs (8,695)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1015
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a crafted movie.
CVE-2008-1014
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain sensitive information.
CVE-2008-1013
1Apple
1Quicktime
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.
CVE-2008-1374
1Apple
1Cups
Apr 23, 2026
Apr 4, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an i...Show more
Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.Show less
CVE-2008-1012
1Apple
1Apple Airport Extreme Base Station
Apr 23, 2026
Mar 20, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service (file sharing hang) via a crafted AFP request, related to "input validation."
CVE-2008-0063
7Apple
CanonicalDebian+4 more
11Debian Linux
FedoraKerberos 5+8 more
Apr 23, 2026
Mar 19, 2008
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "...Show more
The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error message, which might allow remote attackers to obtain sensitive information, aka "Uninitialized stack values."Show less
CVE-2008-1011
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via a frame that calls a method instance in another frame.
CVE-2008-1010
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.
CVE-2008-1009
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object.
CVE-2008-1008
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.
CVE-2008-1007
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
CVE-2008-1006
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of...Show more
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.Show less
CVE-2008-1005
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
2.1 LOW· v2
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
CVE-2008-1004
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.
CVE-2008-1003
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain pr...Show more
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain.Show less
CVE-2008-1002
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.
CVE-2008-1001
1Apple
1Safari
Apr 23, 2026
Mar 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in t...Show more
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page.Show less
CVE-2008-1000
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Mar 18, 2008
N/A· v4
N/A· v3
8.5 HIGH· v2
Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via ".." sequences in file attachments.
CVE-2008-0999
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Mar 18, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference.
CVE-2008-0998
1Apple
2Mac Os X
Mac Os X Server
Apr 23, 2026
Mar 18, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to bypass authorization and execute arbitrary code via crafted distributed objects.