Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Macos
(Apple)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 1618 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2023-12-19 | CVE-2023-42940 | A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A user who shares their screen may unintentionally share the incorrect content. | Macos | 5.7 | ||
2023-02-27 | CVE-2022-46705 | A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing. | Ipados, Iphone_os, Macos, Safari, Tvos, Watchos | 4.3 | ||
2023-09-27 | CVE-2023-40422 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14. An app may be able to cause a denial-of-service. | Macos | 5.5 | ||
2023-09-27 | CVE-2023-41996 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch. | Macos | 5.5 | ||
2023-10-25 | CVE-2023-40401 | The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication. | Macos | 7.5 | ||
2023-05-26 | CVE-2023-28322 | An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer.... | Macos, Fedora, Curl, Clustered_data_ontap, H300s_firmware, H410s_firmware, H500s_firmware, H700s_firmware, Ontap_antivirus_connector | 3.7 | ||
2023-09-02 | CVE-2023-4735 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. | Macos, Vim | 7.8 | ||
2023-09-02 | CVE-2023-4736 | Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833. | Macos, Vim | 7.8 | ||
2023-09-03 | CVE-2023-4751 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. | Macos, Vim | 7.8 | ||
2023-09-06 | CVE-2023-38605 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location. | Ipados, Iphone_os, Macos | 3.3 |