Show filters
7,746 Total Results
Displaying 51-60 of 7,746
Sort by:
Attacker Value
High
Remote code execution triggered by malformed GIF in ImageIO framework, affectin…
Disclosure Date: April 02, 2017 (last updated November 26, 2024)
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file.
0
Attacker Value
Unknown
CVE-2014-3566
Disclosure Date: October 15, 2014 (last updated November 25, 2024)
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
1
Attacker Value
Unknown
CVE-2012-0663 Apple Quicktime Buffer Overflow
Disclosure Date: May 16, 2012 (last updated December 06, 2023)
Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.
0
Attacker Value
Very High
CVE-2008-0599
Disclosure Date: May 05, 2008 (last updated February 03, 2024)
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.
0
Attacker Value
Unknown
CVE-2025-24200
Disclosure Date: February 10, 2025 (last updated February 14, 2025)
An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
0
Attacker Value
Unknown
CVE-2024-54658
Disclosure Date: February 10, 2025 (last updated February 11, 2025)
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content may lead to a denial-of-service.
0
Attacker Value
Unknown
CVE-2024-27859
Disclosure Date: February 10, 2025 (last updated February 11, 2025)
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content may lead to arbitrary code execution.
0
Attacker Value
Unknown
CVE-2024-44142
Disclosure Date: January 30, 2025 (last updated January 31, 2025)
The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution.
0
Attacker Value
Unknown
CVE-2025-24099
Disclosure Date: January 30, 2025 (last updated January 31, 2025)
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.
0
Attacker Value
Unknown
CVE-2025-24177
Disclosure Date: January 27, 2025 (last updated January 31, 2025)
A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. A remote attacker may be able to cause a denial-of-service.
0
