Latest CVE Feed
-
7.8
HIGHCVE-2016-1848
QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-1847
OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1846
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.3
MEDIUMCVE-2016-1844
The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-1843
The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-1842
MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-1841
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1840
Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a de... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1839
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XM... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1838
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read)... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1837
Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote att... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1836
Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a cra... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-1835
Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1834
Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of serv... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1833
The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1832
libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1831
The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
8.5
HIGHCVE-2016-1830
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulne... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1829
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulne... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1828
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulne... Read more
- Published: May. 20, 2016
- Modified: Apr. 12, 2025