Search vulnerabilities

Results 2,014

Export CSV
CVE-2017-2502

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreAudio" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2501

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.0 High EPSS 4.2% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 4.7% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2487

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2485

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2483

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 5.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2482

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 5.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2478

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.0 High EPSS 4.7% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2474

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 5.2% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2473

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 4.7% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2472

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 4.5% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 8.2% KEV · Not listed
Vendors
CVE-2017-2467

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2462

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2461

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2458

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Keyboards" component. A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2456

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS 3.0 · 7.0 High EPSS 4.9% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2451

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2450

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file.

CVSS 3.0 · 7.1 High EPSS 1.3% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2017-2448

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging lack of authentication for OTR packets.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more