MO
Product
Mac OS X
On CISA KEVExploited in the wildRansomware-linked
3,208
CVEs
24
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 140High 357Medium 3Low 0
Watch
Add Mac OS X to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 10.2.6 |
| CVE-2002-1347 | 9.8 | Dec 18 | Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs… Affected: before 10.3.8 |
| CVE-2022-32847 | 9.1 | Sep 23 | This issue was addressed with improved checks Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-22721 | 9.1 | Mar 14 | If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes Affected: 10.15 before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +7 more |
| CVE-2020-9920 | 9.1 | Oct 22 | A path handling issue was addressed with improved validation Affected: before 10.15.6 |
| CVE-2020-9906 | 9.1 | Oct 22 | A memory corruption issue was addressed with improved input validation Affected: 10.13 before 10.13.6; 10.14 before 10.14.6; 10.15 before 10.15.6; 10.13.6; 10.13.6; 10.13.6; +20 more |
| CVE-2020-9868 | 9.1 | Oct 22 | A certificate validation issue existed when processing administrator added certificates Affected: before 10.15.6 |
| CVE-2019-8527 | 9.1 | Dec 18 | A buffer overflow was addressed with improved size validation Affected: before 10.14.4 |
| CVE-2018-18313 | 9.1 | Dec 7 | Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory Affected: before 10.14.4 |
| CVE-2017-9788 | 9.1 | Jul 13 | In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between… Affected: before 10.13.1 |
| CVE-2016-4694 | 9.1 | Sep 25 | The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of… Affected: through 10.11.6 |
| CVE-2022-32787 | 8.8 | Sep 23 | An out-of-bounds write issue was addressed with improved bounds checking Affected: 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2022-26748 | 8.8 | May 26 | An out-of-bounds write issue was addressed with improved input validation Affected: before 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +8 more |
| CVE-2021-39537 | 8.8 | Sep 20 | An issue was discovered in ncurses through v6.2-1 Affected: 10.12.6 |
| CVE-2021-30688 | 8.8 | Sep 8 | A malicious application may be able to break out of its sandbox Affected: 10.15 through 10.15.6; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +3 more |
| CVE-2021-30677 | 8.8 | Sep 8 | This issue was addressed with improved environment sanitization Affected: 10.14 through 10.14.5; 10.15 through 10.15.6; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +25 more |
| CVE-2021-1876 | 8.8 | Sep 8 | A use after free issue was addressed with improved memory management Affected: 10.14 through 10.14.5; 10.15 through 10.15.5; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +23 more |
| CVE-2021-1851 | 8.8 | Sep 8 | A logic issue was addressed with improved state management Affected: 10.14; 10.14.0; 10.14.1; 10.14.2; 10.14.3; 10.14.4; +34 more |
| CVE-2021-30799 | 8.8 | Sep 8 | Multiple memory corruption issues were addressed with improved memory handling Affected: 10.14 through 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +23 more |
| CVE-2021-30737 | 8.8 | Sep 8 | A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code Affected: 10.14.0 through 10.14.5; 10.15 through 10.15.5; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +25 more |
| CVE-2021-30935 | 8.8 | Aug 24 | A logic issue was addressed with improved validation Affected: through 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more |
| CVE-2021-1792 | 8.8 | Apr 2 | An out-of-bounds read was addressed with improved bounds checking Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +12 more |
| CVE-2021-1788 | 8.8 | Apr 2 | A use after free issue was addressed with improved memory management Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +12 more |
| CVE-2020-29633 | 8.8 | Apr 2 | An authentication issue was addressed with improved state management Affected: 10.14 before 10.14.6; 10.15 before 10.15.7; 10.14.6; 10.14.6; 10.14.6; 10.14.6; +10 more |
| CVE-2020-27920 | 8.8 | Apr 2 | A use after free issue was addressed with improved memory management Affected: before 11.0.1; before 11.1.0 |
| CVE-2019-8830 | 8.8 | Oct 27 | An out-of-bounds read was addressed with improved input validation Affected: before 10.15.2 |
| CVE-2019-8826 | 8.8 | Oct 27 | A memory corruption issue was addressed with improved state management Affected: before 10.15 |
| CVE-2019-8825 | 8.8 | Oct 27 | A memory corruption issue was addressed with improved state management Affected: before 10.15.1 |
| CVE-2019-8696 | 8.8 | Oct 27 | A buffer overflow issue was addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8675 | 8.8 | Oct 27 | A buffer overflow issue was addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2020-9870 | 8.8 | Oct 16 | A logic issue was addressed with improved validation Affected: before 10.15.6 |
| CVE-2020-9800 | 8.8 | Jun 9 | A type confusion issue was addressed with improved memory handling Affected: before 10.15.5 |
| CVE-2020-9790 | 8.8 | Jun 9 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 10.15.5 |
| CVE-2020-9789 | 8.8 | Jun 9 | An out-of-bounds write issue was addressed with improved bounds checking Affected: before 10.15.5 |
| CVE-2020-3883 | 8.8 | Apr 1 | This issue was addressed with improved checks Affected: before 10.15.4 |
| CVE-2020-3846 | 8.8 | Feb 27 | A buffer overflow was addressed with improved size validation Affected: before 10.15.3 |
| CVE-2019-8745 | 8.8 | Dec 18 | A buffer overflow was addressed with improved bounds checking Affected: before 10.15 |
| CVE-2019-8689 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8688 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8687 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8686 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8685 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8684 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8683 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8681 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8680 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8679 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8678 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8677 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
| CVE-2019-8676 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: before 10.14.6 |
The 500 most important CVEs for this product (exploited first, then by severity)