Apple vulnerabilities
9,008 vulnerabilities
Known vulnerabilities in Apple products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 198 products.
Products
50 of 198- Iphone Os4,311 vulnerabilities
- Macos3,712 vulnerabilities
- Mac Os X3,148 vulnerabilities
- Tvos2,242 vulnerabilities
- Ipados2,196 vulnerabilities
- Watchos2,052 vulnerabilities
- Ios And Ipados1,849 vulnerabilities
- Safari1,640 vulnerabilities
- Itunes922 vulnerabilities
- Visionos692 vulnerabilities
- Mac Os X Server655 vulnerabilities
- Ios479 vulnerabilities
- Icloud449 vulnerabilities
- Quicktime235 vulnerabilities
- Itunes For Windows192 vulnerabilities
- Icloud For Windows181 vulnerabilities
- Xcode96 vulnerabilities
- Ipad Os89 vulnerabilities
- Icloud For Windows (Legacy)75 vulnerabilities
- Cups54 vulnerabilities
- Webkit47 vulnerabilities
- Security Update Catalina43 vulnerabilities
- Apple Tv36 vulnerabilities
- Darwin Streaming Server27 vulnerabilities
- Icloud For Windows (Microsoft Store)22 vulnerabilities
- Quicktime Streaming Server16 vulnerabilities
- Os X Server12 vulnerabilities
- Airport Base Station11 vulnerabilities
- Iphone10 vulnerabilities
- Swiftnio10 vulnerabilities
- Garageband9 vulnerabilities
- Music8 vulnerabilities
- Airport Base Station Firmware Update7 vulnerabilities
- Apple Music For Android7 vulnerabilities
- Apple Remote Desktop7 vulnerabilities
- Keynote7 vulnerabilities
- Pages7 vulnerabilities
- Swiftnio Http\/27 vulnerabilities
- Tv Os7 vulnerabilities
- Iphoto5 vulnerabilities
- Airport Extreme4 vulnerabilities
- Container4 vulnerabilities
- Ichat4 vulnerabilities
- Iwork4 vulnerabilities
- Numbers4 vulnerabilities
- Swift4 vulnerabilities
- Airport Express3 vulnerabilities
- Airport Express Base Station3 vulnerabilities
- Airport Extreme Base Station3 vulnerabilities
- Bonjour3 vulnerabilities
CVE-2018-16228alpinetcpdump+8
EPSS score3.74%
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().CVE-2018-16227alpinetcpdump+8EPSS score6.82%
The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.CVE-2018-16451alpinetcpdump+8EPSS score4.13%
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.CVE-2018-16843alpinenginx+8EPSS score47.98%
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.CVE-2018-16845alpinenginx+10EPSS score9.84%
nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.CVE-2018-16230alpinetcpdump+8EPSS score3.89%
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).CVE-2018-16229alpinetcpdump+9EPSS score6.82%
The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().CVE-2018-16844alpinenginx+7EPSS score12.73%
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.CVE-2018-20505appleicloud+7EPSS score6.89%
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).CVE-2018-20506appleicloud+9EPSS score7.56%
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.CVE-2018-14879alpinetcpdump+9EPSS score4.67%
The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().CVE-2018-14882alpinetcpdump+9EPSS score3.89%
The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.CVE-2018-14470alpinetcpdump+8EPSS score3.98%
The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().CVE-2018-14461alpinetcpdump+8EPSS score3.98%
The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print().CVE-2018-14463alpinetcpdump+9EPSS score4.72%
The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.CVE-2018-14467alpinetcpdump+8EPSS score3.98%
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP).CVE-2018-14468alpinetcpdump+25EPSS score3.98%
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().CVE-2018-14466alpinetcpdump+8EPSS score3.98%
The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert().CVE-2018-14469alpinetcpdump+9EPSS score5.34%
The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().CVE-2018-14464alpinetcpdump+8EPSS score3.98%
The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().