Browse CVEs

HIGH 10.0 CVE-2014-4393EPSS 6% Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrar… Mac Os X Mitigation only Fix from $1,9502014-09-19 HIGH 9.3 CVE-2014-4390 Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context … Mac Os X Mitigation only Fix from $1,9502014-09-19 HIGH 9.3 CVE-2014-4402 An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to ex… Mac Os X Mitigation only Fix from $1,9502014-09-19 MEDIUM 6.9 CVE-2014-4394 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4395 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4396 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4397 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4398 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4399 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4400 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.9 CVE-2014-4401 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.8 CVE-2014-1391 QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Mac Os X Mitigation only Fix from $1,6002014-09-19 MEDIUM 6.8 CVE-2014-4350 Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (ap… Mac Os X Mitigation only Fix from $1,6002014-09-19 HIGH 10.0 CVE-2014-1381 Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary cod… Mac Os X Mitigation only Fix from $1,9502014-07-01 MEDIUM 6.8 CVE-2014-1315 Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a d… Mac Os X Mitigation only Fix from $1,6002014-04-23 MEDIUM 6.8 CVE-2014-1319 Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (applic… Mac Os X Mitigation only Fix from $1,6002014-04-23 HIGH 10.0 CVE-2014-1300EPSS 6% Unspecified vulnerability in Apple Safari 7.0.2 on OS X allows remote attackers to execute arbitrary code with root privileges via unknown vectors, a… Safari No fix yet Fix from $1,9502014-03-26 HIGH 10.0 CVE-2014-1303EPSS 35% Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unsp… Safari Mitigation only Fix from $1,9502014-03-26 MEDIUM 5.0 CVE-2013-6114 Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service (application cra… Motion No fix yet Fix from $1,6002013-11-04 MEDIUM 6.2 CVE-2013-3955 The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an Apple… Iphone Os No fix yet Fix from $1,6002013-06-05 MEDIUM 5.0 CVE-2013-3950 Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for atta… Iphone Os No fix yet Fix from $1,6002013-06-05 MEDIUM 6.8 CVE-2013-0971 Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service… Mac Os X Mitigation only Fix from $1,6002013-03-15 MEDIUM 6.8 CVE-2013-0973 Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle at… Mac Os X Mitigation only Fix from $1,6002013-03-15 MEDIUM 6.4 CVE-2013-0966 The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, whic… Mac Os X Mitigation only Fix from $1,6002013-03-15 HIGH 7.2 CVE-2012-5519 CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cups/certs/0… Cups No fix yet Fix from $1,9502012-11-20 HIGH 7.5 CVE-2012-3716EPSS 6% CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write o… Mac Os X Mitigation only Fix from $1,9502012-09-20 MEDIUM 5.8 CVE-2012-4672 Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains vi… Ichat Server Mitigation only Fix from $1,6002012-08-25 MEDIUM 6.8 CVE-2012-0661 Use-after-free vulnerability in QuickTime in Apple Mac OS X 10.7.x before 10.7.4 allows remote attackers to execute arbitrary code or cause a denial … Mac Os X Mitigation only Fix from $1,6002012-05-11 MEDIUM 6.9 CVE-2012-0656 Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers t… Mac Os X Mitigation only Fix from $1,6002012-05-11 MEDIUM 5.0 CVE-2012-0651 The directory server in Directory Service in Apple Mac OS X 10.6.8 allows remote attackers to obtain sensitive information from process memory via a … Mac Os X Mitigation only Fix from $1,6002012-05-11