MO
Product
Mac OS X
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 140High 357Medium 3Low 0
Watch
Add Mac OS X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7000 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2014-8129 | 8.8 | Mar 12 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by… Affected: 10.8.5; 10.9.5; 10.10.0; 10.10.1; 10.10.2; 10.10.3 |
| CVE-2017-7068 | 8.8 | Jul 20 | An issue was discovered in certain Apple products Affected: through 10.12.5 |
| CVE-2017-7047 | 8.8 | Jul 20 | An issue was discovered in certain Apple products Affected: before 10.12.6 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 10.0.0 before 10.13.0 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 10.0.0 before 10.13.0 |
| CVE-2017-6991 | 8.8 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2017-6983 | 8.8 | May 22 | An issue was discovered in certain Apple products Affected: through 10.12.4 |
| CVE-2017-2521 | 8.8 | May 22 | An issue was discovered in certain Apple products Affected: before 10.12.5 |
| CVE-2017-2485 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2415 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2403 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-2381 | 8.8 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.12.3 |
| CVE-2017-6458 | 8.8 | Mar 27 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable Affected: 10.8.0 before 10.13 |
| CVE-2016-7659 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7658 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7596 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7595 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7594 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7588 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-7582 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.11.6 |
| CVE-2016-4691 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.1 |
| CVE-2016-4688 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.12.1 |
| CVE-2016-4667 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.12.0 |
| CVE-2016-4617 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.11.6 |
| CVE-2016-4738 | 8.8 | Sep 25 | libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 10.12.0 |
| CVE-2016-4736 | 8.8 | Sep 25 | libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted file Affected: through 10.11.6 |
| CVE-2016-5131 | 8.8 | Jul 23 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have… Affected: before 10.12 |
| CVE-2016-4637 | 8.8 | Jul 22 | CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 10.11.6 |
| CVE-2016-4631 | 8.8 | Jul 22 | ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.11.6 |
| CVE-2016-4630 | 8.8 | Jul 22 | ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44… Affected: through 10.11.5 |
| CVE-2016-4602 | 8.8 | Jul 22 | QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a… Affected: through 10.11.5 |
| CVE-2016-4601 | 8.8 | Jul 22 | QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image Affected: through 10.11.5 |
| CVE-2016-4600 | 8.8 | Jul 22 | QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a… Affected: through 10.11.5 |
| CVE-2016-4597 | 8.8 | Jul 22 | QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a… Affected: through 10.11.5 |
| CVE-2016-4596 | 8.8 | Jul 22 | QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a… Affected: through 10.11.5 |
| CVE-2016-1847 | 8.8 | May 20 | OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 10.11.5 |
| CVE-2016-1841 | 8.8 | May 20 | libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial… Affected: before 10.11.5 |
| CVE-2016-1835 | 8.8 | May 20 | Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to… Affected: through 10.11.4 |
| CVE-2016-1800 | 8.8 | May 20 | Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified… Affected: through 10.11.4 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: through 10.11.3 |
| CVE-2016-0802 | 8.8 | Feb 7 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause… Affected: through 10.11.3 |
| CVE-2015-0973 | 8.8 | Jan 18 | Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via… Affected: through 10.11.3 |
| CVE-2014-9495 | 8.8 | Jan 10 | Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers… Affected: through 10.11.3 |
| CVE-2010-0037 | 8.8 | Jan 20 | Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted… Affected: 10.5.8; 10.6.2 |
| CVE-2008-3637 | 8.8 | Sep 26 | The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to… Affected: 10.4.11; 10.5.4; 10.5.5 |
| CVE-2008-2934 | 8.8 | Jul 18 | Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that… Affected: All versions, or not specified |
| CVE-2021-30975 | 8.6 | Aug 24 | This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +5 more |
| CVE-2020-9865 | 8.6 | Oct 16 | A memory corruption issue was addressed by removing the vulnerable code Affected: before 10.15.6 |
| CVE-2020-9847 | 8.6 | Jun 9 | An out-of-bounds read was addressed with improved bounds checking Affected: before 10.15.5 |
The 500 most important CVEs for this product (exploited first, then by severity)