← Back

Apple

apple

8,695 CVEs • 196 products

Products (196)

Click to collapse
Toggle
Iphone Os
iphone_os
Mac Os X
mac_os_x
Macos
macos
Tvos
tvos
Ipados
ipados
Watchos
watchos
Safari
safari
Itunes
itunes
Icloud
icloud
Visionos
visionos
Webkit
webkit
Quicktime
quicktime
Xcode
xcode
Ipad Os
ipad_os
Cups
cups
Apple Tv
apple_tv
Ipod Touch
ipod_touch
Os X Server
os_x_server
Swiftnio
swiftnio
Iphone
iphone
Garageband
garageband
Ichat
ichat
Imageio
imageio
Music
music
Keynote
keynote
Pages
pages
Tv Os
tv_os
Mail
mail
Iphoto
iphoto
Cfnetwork
cfnetwork
Terminal
terminal
Afp Server
afp_server
Time Capsule
time_capsule
Numbers
numbers
Iwork
iwork
Swift
swift
Webobjects
webobjects
Ical
ical
Webcore
webcore
Mdnsresponder
mdnsresponder
Coregraphics
coregraphics
Bonjour
bonjour
Watch Os
watch_os
Logic Pro X
logic_pro_x
Mac Os
mac_os
Appleshare
appleshare
Applescript
applescript
Xsan
xsan
Installer
installer
Imovie
imovie
A Ux
a_ux
Carboncore
carboncore
Java 1.5
java_1.5
Java 1.6
java_1.6
Ipad2
ipad2
Ichat Server
ichat_server
Boot Camp
boot_camp
Apple Support
apple_support
Shortcuts
shortcuts
Shazam
shazam
Files
files
Container
container
Claris Emailer
claris_emailer
802.11n
Ichat Av
ichat_av
Airport Card
airport_card
Weblog Server
weblog_server
Textedit
textedit
Preview
preview
Server Manager
server_manager
Pdfkit
pdfkit

CVEs (8,695)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Apple
3Mac Os X
Mac Os X ServerXsan
Apr 16, 2026
Aug 21, 2006
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name."
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 5, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file...Show more
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has alre...Show more
WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloadi...Show more
The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocat...Show more
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Integer overflow in ImageIO for Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Radiance image.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
7.2 HIGH· v2
The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path v...Show more
The dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
2.1 LOW· v2
The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error (stderr) by privileged applications.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
4.0 MEDIUM· v2
OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 3, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon RAW image.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to execute arbitrary code via a crafted BOOTP request.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary cod...Show more
Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Zip archive.Show less
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invalid AFP request that triggers an unchecked error condition.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
2.1 LOW· v2
AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Aug 2, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results.
1Apple
2Mac Os X
Safari
Apr 16, 2026
Jul 31, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebK...Show more
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.Show less
1Apple
1Safari
Apr 16, 2026
Jul 6, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which triggers a null dereference.
1Apple
2Mac Os X
Mac Os X Server
Apr 16, 2026
Jul 6, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly trigger...Show more
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469.Show less