Apple macOS vulnerabilities

3,139 known vulnerabilities affecting apple/mac_os_x.

Total CVEs
3,139
CISA KEV
26
actively exploited
Public exploits
277
Exploited in wild
28
Severity breakdown
CRITICAL302HIGH1409MEDIUM1236LOW192

Vulnerabilities

Page 97 of 157
CVE-2015-3704CRITICALCVSS 9.3PoC≤ 10.10.32015-07-03
CVE-2015-3704 [CRITICAL] CWE-264 CVE-2015-3704: runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 d runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
nvd
CVE-2015-3707CRITICALCVSS 9.3≤ 10.10.32015-07-03
CVE-2015-3707 [CRITICAL] CVE-2015-3707: The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arb The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
nvd
CVE-2015-3706CRITICALCVSS 9.3≤ 10.10.32015-07-03
CVE-2015-3706 [CRITICAL] CVE-2015-3706: IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a pri IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3705.
nvd
CVE-2015-3705CRITICALCVSS 9.3≤ 10.10.32015-07-03
CVE-2015-3705 [CRITICAL] CWE-119 CVE-2015-3705: IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a pri IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3706.
nvd
CVE-2015-3712CRITICALCVSS 9.3≤ 10.10.32015-07-03
CVE-2015-3712 [CRITICAL] CWE-119 CVE-2015-3712: The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code i The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds write) via a crafted app.
nvd
CVE-2015-3691CRITICALCVSS 9.3≤ 10.10.32015-07-03
CVE-2015-3691 [CRITICAL] CWE-284 CVE-2015-3691: The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X befo The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer.
nvd
CVE-2015-3672HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3672 [HIGH] CWE-284 CVE-2015-3672: Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which a Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privileges via unspecified vectors.
nvd
CVE-2015-3717HIGHCVSS 7.5fixed in 10.10.42015-07-03
CVE-2015-3717 [HIGH] CWE-120 CVE-2015-3717: Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
nvd
CVE-2015-3702HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3702 [HIGH] CVE-2015-3702: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3701.
nvd
CVE-2015-3695HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3695 [HIGH] CWE-119 CVE-2015-3695: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702.
nvd
CVE-2015-3701HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3701 [HIGH] CVE-2015-3701: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3702.
nvd
CVE-2015-3697HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3697 [HIGH] CVE-2015-3697: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702.
nvd
CVE-2015-3708HIGHCVSS 8.8≤ 10.10.32015-07-03
CVE-2015-3708 [HIGH] CVE-2015-3708: kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack.
nvd
CVE-2015-3673HIGHCVSS 7.2PoC≤ 10.10.32015-07-03
CVE-2015-3673 [HIGH] CWE-264 CVE-2015-3673: Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility.
nvd
CVE-2015-3674HIGHCVSS 7.5≤ 10.10.32015-07-03
CVE-2015-3674 [HIGH] CWE-119 CVE-2015-3674: afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
nvd
CVE-2015-3696HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3696 [HIGH] CVE-2015-3696: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702.
nvd
CVE-2015-3671HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3671 [HIGH] CWE-284 CVE-2015-3671: Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors.
nvd
CVE-2015-3700HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3700 [HIGH] CVE-2015-3700: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3701, and CVE-2015-3702.
nvd
CVE-2015-3678HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3678 [HIGH] CWE-77 CVE-2015-3678: AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cau AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified Thunderbolt commands.
nvd
CVE-2015-3698HIGHCVSS 7.2≤ 10.10.32015-07-03
CVE-2015-3698 [HIGH] CVE-2015-3698: Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702.
nvd
← Previous97 / 157Next →