apple
8,698 tracked vulnerabilities.
CVE-2016-4644
MEDIUM
Apple tvOS < 9.2.2, iOS < 9.3.3, macOS 10.11.0-10.11.5 - Keychain Credential Exposure via HTTP Auth Downgrade
Jan 11, 2019
CVSS 6.5
EPSS 0.01
CVE-2016-4643
MEDIUM
Apple tvOS < 9.2.2, iOS < 9.3.3, and macOS 10.11.0-10.11.5 - Unauthorized Information Exposure via 407 Response Parsing
Jan 11, 2019
CVSS 6.5
EPSS 0.01
CVE-2016-4642
MEDIUM
Apple tvOS < 9.2.2, iOS < 9.3.3, and macOS 10.11.0-10.11.5 - Proxy Authentication Credential Exposure
Jan 11, 2019
CVSS 5.9
EPSS 0.01
CVE-2016-9843
CRITICAL
zlib 1.2.0-1.2.8 - Unspecified Impact via Big-Endian CRC Calculation
May 23, 2017
CVSS 9.8
EPSS 0.06
CVE-2016-9842
HIGH
zlib 1.2.3.4-1.2.8 - Integer Overflow via Left Shift of Negative Integer
May 23, 2017
CVSS 8.8
EPSS 0.05
CVE-2016-9841
CRITICAL
zlib 1.2.0-1.2.8 - Use-After-Free in inffast.c
May 23, 2017
CVSS 9.8
EPSS 0.08
CVE-2016-9840
HIGH
zlib <1.2.8 - Info Disclosure
May 23, 2017
CVSS 8.8
EPSS 0.05
CVE-2016-4650
HIGH
iPhone OS < 9.3.2, macOS < 10.11.5, tvOS < 9.2.1 - Remote Code Execution via IOHIDFamily Heap Overflow
Apr 20, 2017
CVSS 7.8
EPSS 0.02
CVE-2016-10226
HIGH
Safari Technology Preview Release 18 - Denial of Service via JavaScript Operator String Handling
Apr 03, 2017
CVSS 7.5
EPSS 0.02
CVE-2016-10222
HIGH
Safari - Denial of Service via JSON.stringify Type Confusion
Apr 03, 2017
CVSS 7.5
EPSS 0.02
CVE-2016-7585
MEDIUM
macOS < 10.12.4 - Unprotected FileVault 2 Password Exposure via Thunderbolt DMA
Apr 02, 2017
CVSS 6.8
EPSS 0.00
CVE-2016-7765
LOW
iPhone OS < 10.2 - Unauthorized Clipboard Information Exposure in Lockscreen State
Feb 20, 2017
CVSS 2.4
EPSS 0.00
CVE-2016-7762
MEDIUM
iPhone OS < 10.2 - Cross-Site Scripting in WebKit
Feb 20, 2017
CVSS 6.1
EPSS 0.01
CVE-2016-7761
MEDIUM
macOS < 10.12.2 - Unauthorized Sensitive Network-Configuration Information Exposure via WiFi Global Storage
Feb 20, 2017
CVSS 5.5
EPSS 0.00
CVE-2016-7759
MEDIUM
iPhone OS < 9.3.5 - Unauthorized Sensitive Information Exposure via Task Switcher Snapshots
Feb 20, 2017
CVSS 4.3
EPSS 0.00
CVE-2016-7742
HIGH
macOS < 10.12.2 - Remote Code Execution in xar Component via Crafted Archive
Feb 20, 2017
CVSS 7.8
EPSS 0.01
CVE-2016-7714
LOW
iPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Unauthorized Kernel Memory Exposure via IOKit
Feb 20, 2017
CVSS 3.3
EPSS 0.00
CVE-2016-7667
HIGH
Apple Iphone OS < 10.1.1 - Improper Input Validation
Feb 20, 2017
CVSS 7.5
EPSS 0.01
CVE-2016-7666
MEDIUM
Transporter < 1.9.1 - Exposure of Sensitive Information via Crafted EPUB
Feb 20, 2017
CVSS 5.5
EPSS 0.01
CVE-2016-7665
MEDIUM
iPhone OS < 10.2 - Denial of Service via Crafted Video in Graphics Driver
Feb 20, 2017
CVSS 5.5
EPSS 0.01
CVE-2016-7664
LOW
iPhone OS < 10.2 - Unauthorized Sensitive Information Exposure via Lockscreen Accessibility Options
Feb 20, 2017
CVSS 2.4
EPSS 0.00
CVE-2016-7663
CRITICAL
iPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Remote Code Execution via Crafted String
Feb 20, 2017
CVSS 9.8
EPSS 0.03
CVE-2016-7662
HIGH
iPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Certificate Spoofing via Improper Validation
Feb 20, 2017
CVSS 7.5
EPSS 0.01
CVE-2016-7661
HIGH
iPhone OS < 10.2 and macOS < 10.12.2 - Local Privilege Escalation via Power Management Mach Port Name References
Feb 20, 2017
CVSS 7.8
EPSS 0.01
CVE-2016-7660
HIGH
iPhone OS < 10.2, macOS < 10.12.2, watchOS < 3.1.3 - Local Privilege Escalation via Syslog Mach Port Name References
Feb 20, 2017
CVSS 7.8
EPSS 0.01
Products
iphone_os 4,053
mac_os_x 3,210
macos 2,755
tvos 2,005
ipados 1,936
watchos 1,779
safari 1,629
macOS 1,352
itunes 922
iOS and iPadOS 800
mac_os_x_server 655
visionOS 456
icloud 449
visionos 434
watchOS 434
tvOS 402
webkit 258
quicktime 246
Safari 211
iPadOS 131
xcode 95
ipad_os 89
cups 56
apple_tv 36
darwin_streaming_server 27
ipod_touch 18
Xcode 16
quicktime_streaming_server 16
airport_base_station_firmware 11
os_x_server 11
Quick Filters