Apple
Page 56 of 100 — Apple CVEs from a corpus of 15028, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28244 | Medium | 6.3 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design pr… |
CVE-2022-28243 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28242 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28241 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28240 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28239 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28238 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28237 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28236 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-28235 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28234 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vu… |
CVE-2022-28233 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28232 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28231 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by an out-of-bounds read vulnerabi… |
CVE-2022-28230 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27802 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27801 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27800 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27799 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27798 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-27797 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27796 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27795 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27794 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by the use of a variable that has… |
CVE-2022-27793 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-27792 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-27791 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a stack-based buffer overflow v… |
CVE-2022-27790 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27789 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27788 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-27787 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-27786 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-27785 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24104 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24103 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24102 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-24101 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-1622 | Medium | 5.5 | 2022-05-11 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file… |
CVE-2022-1629 | High | 7.8 | 2022-05-10 | Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memo… |
CVE-2022-1621 | High | 7.8 | 2022-05-10 | Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protec… |
CVE-2022-28739 | High | 7.5 | 2022-05-09 | There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, inclu… |
CVE-2022-1620 | High | 7.5 | 2022-05-08 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function v… |
CVE-2022-1619 | High | 7.8 | 2022-05-08 | Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing softwar… |
CVE-2022-1616 | High | 7.8 | 2022-05-07 | Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanis… |
CVE-2022-28279 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-28278 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28277 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28276 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28275 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28274 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-28273 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28272 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28271 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execut… |
CVE-2022-28270 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier) and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-27784 | High | 7.8 | 2022-05-06 | Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted… |
CVE-2022-27783 | High | 7.8 | 2022-05-06 | Adobe After Effects versions 22.2.1 (and earlier) and 18.4.5 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a crafted… |
CVE-2022-24105 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-24099 | Low | 3.3 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sens… |
CVE-2022-24098 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an improper input validation vulnerability when parsing a PCX file that c… |
CVE-2022-23205 | High | 7.8 | 2022-05-06 | Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-28871 | Medium | 4.3 | 2022-04-25 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger… |
CVE-2022-1420 | Medium | 5.5 | 2022-04-21 | Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. |
CVE-2022-27536 | High | 7.5 | 2022-04-20 | Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a… |
CVE-2022-29458 | High | 7.1 | 2022-04-18 | ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. |
CVE-2020-13495 | Medium | 5.5 | 2022-04-18 | An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an… |
CVE-2022-1381 | High | 7.8 | 2022-04-18 | global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection… |
CVE-2022-24308 | Medium | 5.5 | 2022-04-13 | Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the i… |
CVE-2022-29048 | Medium | 4.3 | 2022-04-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL. |
CVE-2022-29046 | Medium | 5.4 | 2022-04-12 | Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying paramet… |
CVE-2022-24765 | Medium | 6.0 | 2022-04-12 | Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties… |
CVE-2022-24070 | High | 7.5 | 2022-04-12 | Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory whi… |
CVE-2021-28544 | Medium | 4.3 | 2022-04-12 | Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-b… |
CVE-2022-21155 | High | 7.5 | 2022-04-12 | A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to… |
CVE-2022-24836 | High | 7.5 | 2022-04-11 | Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive back… |
CVE-2022-0807 | Medium | 6.5 | 2022-04-05 | Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… |
CVE-2022-0806 | Medium | 6.5 | 2022-04-05 | Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross… |
CVE-2022-0805 | High | 8.8 | 2022-04-05 | Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction… |
CVE-2022-0804 | Medium | 6.5 | 2022-04-05 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo… |
CVE-2022-0803 | Medium | 6.5 | 2022-04-05 | Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL ba… |
CVE-2022-0802 | Medium | 6.5 | 2022-04-05 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibo… |
CVE-2022-0799 | High | 8.8 | 2022-04-05 | Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation… |
CVE-2022-0798 | High | 8.8 | 2022-04-05 | Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially e… |
CVE-2022-0797 | High | 8.8 | 2022-04-05 | Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… |
CVE-2022-0796 | High | 8.8 | 2022-04-05 | Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0791 | High | 8.8 | 2022-04-05 | Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to pote… |
CVE-2018-25032 | High | 7.5 | 2022-03-25 | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. |
CVE-2020-20095 | Medium | 6.5 | 2022-03-23 | iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially cra… |
CVE-2022-1030 | High | 8.8 | 2022-03-23 | Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An… |
CVE-2022-24092 | High | 7.8 | 2022-03-18 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2022-24091 | High | 7.8 | 2022-03-18 | Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2022-22671 | Medium | 4.6 | 2022-03-18 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS… |
CVE-2022-22670 | Low | 3.3 | 2022-03-18 | An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious applicati… |
CVE-2022-22669 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitra… |
CVE-2022-22667 | High | 7.8 | 2022-03-18 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute ar… |
CVE-2022-22666 | High | 7.8 | 2022-03-18 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a malicio… |
CVE-2022-22665 | High | 7.8 | 2022-03-18 | A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges. |
CVE-2022-22664 | High | 7.8 | 2022-03-18 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a m… |
CVE-2022-22661 | High | 7.8 | 2022-03-18 | A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 C… |
CVE-2022-22660 | Medium | 5.5 | 2022-03-18 | This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI. |
CVE-2022-22659 | Medium | 6.5 | 2022-03-18 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An attacker in a privileged network position may b… |