[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8WJgv1Sqko_L8FMF533K0knwIDvyMgdWIhNXoGfgC1Y":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":905,"kevVulnerabilities":962,"topProductsByCves":1983,"seoMetadata":1994,"meta":2003},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":904},1967,"apple",239,12782,152,2855,"2026-04-02","a",[16,23,29,35,41,47,53,60,67,74,80,86,92,98,104,109,115,121,126,131,137,142,147,152,156,162,167,171,175,179,184,188,192,196,199,204,208,213,217,220,223,227,232,236,240,244,248,253,257,261,264,268,272,276,281,284,288,291,295,299,302,306,310,314,317,321,325,328,332,336,340,343,347,351,354,357,361,366,370,373,376,379,383,386,390,394,399,403,407,410,414,418,422,426,430,434,438,442,445,449,453,457,461,465,468,472,476,480,483,487,491,495,498,501,504,507,510,514,518,521,525,529,533,536,539,543,546,549,552,555,559,562,565,568,572,576,580,584,587,591,594,598,601,605,608,611,615,619,623,626,630,634,638,641,645,649,653,656,659,662,665,669,672,675,678,681,684,687,690,693,696,699,702,705,708,711,714,717,720,723,727,730,733,736,739,742,745,748,751,754,757,760,763,766,769,772,775,778,781,784,787,790,793,796,799,802,805,808,811,814,817,820,823,826,829,832,835,838,841,844,847,850,853,856,859,862,865,868,871,874,877,880,883,886,889,892,895,898,901],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},7271,"mac_os_x",138,5568,65,"2024-09-11",{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":13},7265,"macos",143,4662,82,{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":13},7224,"iphone_os",262,4141,89,{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":40,"last_cve_update":13},7331,"tvos",122,1912,31,{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":46,"last_cve_update":13},7194,"ipados",125,1667,72,{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":52,"last_cve_update":13},7334,"watchos",102,1666,39,{"id":54,"product_name":55,"version_count":56,"cve_count":57,"kev_count":58,"last_cve_update":59},7308,"safari",219,1572,22,"2025-11-04",{"id":61,"product_name":62,"version_count":63,"cve_count":64,"kev_count":65,"last_cve_update":66},7235,"itunes",185,922,2,"2024-10-11",{"id":68,"product_name":69,"version_count":70,"cve_count":71,"kev_count":72,"last_cve_update":73},7273,"mac_os_x_server",78,817,0,"2017-04-13",{"id":75,"product_name":76,"version_count":77,"cve_count":78,"kev_count":65,"last_cve_update":79},7182,"icloud",50,449,"2022-12-15",{"id":81,"product_name":82,"version_count":83,"cve_count":84,"kev_count":85,"last_cve_update":13},7332,"visionos",21,289,10,{"id":87,"product_name":88,"version_count":89,"cve_count":90,"kev_count":72,"last_cve_update":91},7338,"webkit",107,258,"2017-12-27",{"id":93,"product_name":94,"version_count":95,"cve_count":96,"kev_count":72,"last_cve_update":97},7300,"quicktime",77,250,"2017-07-07",{"id":99,"product_name":100,"version_count":101,"cve_count":102,"kev_count":65,"last_cve_update":103},7342,"xcode",99,91,"2025-09-15",{"id":105,"product_name":106,"version_count":107,"cve_count":102,"kev_count":65,"last_cve_update":108},7193,"ipad_os",46,"2025-04-11",{"id":110,"product_name":111,"version_count":112,"cve_count":113,"kev_count":72,"last_cve_update":114},7234,"ipod_touch",8,58,"2012-08-07",{"id":116,"product_name":117,"version_count":118,"cve_count":119,"kev_count":72,"last_cve_update":120},7169,"cups",109,56,"2022-05-26",{"id":122,"product_name":123,"version_count":124,"cve_count":125,"kev_count":72,"last_cve_update":66},7151,"apple_tv",73,36,{"id":127,"product_name":128,"version_count":112,"cve_count":129,"kev_count":72,"last_cve_update":130},7170,"darwin_streaming_server",27,"2007-05-13",{"id":132,"product_name":133,"version_count":134,"cve_count":135,"kev_count":72,"last_cve_update":136},7195,"iphone",16,23,"2022-03-18",{"id":138,"product_name":139,"version_count":140,"cve_count":134,"kev_count":72,"last_cve_update":141},7305,"quicktime_streaming_server",1,"2005-01-10",{"id":143,"product_name":144,"version_count":134,"cve_count":145,"kev_count":72,"last_cve_update":146},7287,"os_x_server",11,"2016-09-25",{"id":148,"product_name":149,"version_count":150,"cve_count":145,"kev_count":72,"last_cve_update":151},7130,"airport_base_station_firmware",20,"2020-10-27",{"id":153,"product_name":154,"version_count":70,"cve_count":85,"kev_count":72,"last_cve_update":155},7319,"swiftnio","2022-09-28",{"id":157,"product_name":158,"version_count":159,"cve_count":160,"kev_count":72,"last_cve_update":161},7175,"garageband",60,9,"2025-01-30",{"id":163,"product_name":164,"version_count":165,"cve_count":160,"kev_count":72,"last_cve_update":166},7134,"airport_extreme",4,"2010-12-22",{"id":168,"product_name":169,"version_count":65,"cve_count":112,"kev_count":72,"last_cve_update":170},7179,"ichat","2007-08-03",{"id":172,"product_name":173,"version_count":72,"cve_count":112,"kev_count":72,"last_cve_update":174},7184,"imageio","2011-07-21",{"id":176,"product_name":177,"version_count":165,"cve_count":112,"kev_count":72,"last_cve_update":178},7283,"music","2025-01-15",{"id":180,"product_name":181,"version_count":72,"cve_count":182,"kev_count":72,"last_cve_update":183},7330,"tv_os",7,"2019-03-05",{"id":185,"product_name":186,"version_count":65,"cve_count":182,"kev_count":72,"last_cve_update":187},7276,"mail","2018-05-16",{"id":189,"product_name":190,"version_count":65,"cve_count":191,"kev_count":72,"last_cve_update":166},7132,"airport_express",6,{"id":193,"product_name":194,"version_count":40,"cve_count":191,"kev_count":72,"last_cve_update":195},7243,"keynote","2017-04-02",{"id":197,"product_name":198,"version_count":135,"cve_count":191,"kev_count":72,"last_cve_update":195},7288,"pages",{"id":200,"product_name":201,"version_count":202,"cve_count":191,"kev_count":72,"last_cve_update":203},7146,"apple_remote_desktop",24,"2015-11-14",{"id":205,"product_name":206,"version_count":72,"cve_count":191,"kev_count":72,"last_cve_update":207},7189,"ipad","2013-06-05",{"id":209,"product_name":210,"version_count":145,"cve_count":211,"kev_count":72,"last_cve_update":212},7233,"iphoto",5,"2008-03-18",{"id":214,"product_name":215,"version_count":159,"cve_count":211,"kev_count":140,"last_cve_update":216},7321,"swiftnio_http\\\u002F2","2023-10-10",{"id":218,"product_name":219,"version_count":72,"cve_count":211,"kev_count":72,"last_cve_update":174},7162,"cfnetwork",{"id":221,"product_name":222,"version_count":140,"cve_count":165,"kev_count":72,"last_cve_update":166},7327,"time_capsule",{"id":224,"product_name":225,"version_count":140,"cve_count":165,"kev_count":72,"last_cve_update":226},7324,"terminal","2011-03-23",{"id":228,"product_name":229,"version_count":230,"cve_count":165,"kev_count":72,"last_cve_update":231},7317,"swift",17,"2022-06-16",{"id":233,"product_name":234,"version_count":235,"cve_count":165,"kev_count":72,"last_cve_update":195},7286,"numbers",3,{"id":237,"product_name":238,"version_count":72,"cve_count":165,"kev_count":72,"last_cve_update":239},7120,"afp_server","2005-06-16",{"id":241,"product_name":242,"version_count":140,"cve_count":165,"kev_count":72,"last_cve_update":243},7237,"iwork","2015-10-18",{"id":245,"product_name":246,"version_count":72,"cve_count":165,"kev_count":72,"last_cve_update":247},7190,"ipad2","2014-01-05",{"id":249,"product_name":250,"version_count":251,"cve_count":235,"kev_count":72,"last_cve_update":252},7277,"mdnsresponder",70,"2016-06-26",{"id":254,"product_name":255,"version_count":65,"cve_count":235,"kev_count":72,"last_cve_update":256},7178,"ical","2008-06-03",{"id":258,"product_name":259,"version_count":140,"cve_count":235,"kev_count":72,"last_cve_update":260},7333,"watch_os","2019-03-04",{"id":262,"product_name":263,"version_count":72,"cve_count":235,"kev_count":72,"last_cve_update":170},7337,"webcore",{"id":265,"product_name":266,"version_count":182,"cve_count":235,"kev_count":72,"last_cve_update":267},7340,"webobjects","2022-09-14",{"id":269,"product_name":270,"version_count":72,"cve_count":235,"kev_count":72,"last_cve_update":271},7167,"coregraphics","2010-08-25",{"id":273,"product_name":274,"version_count":65,"cve_count":235,"kev_count":72,"last_cve_update":275},7154,"a_ux","2007-05-17",{"id":277,"product_name":278,"version_count":279,"cve_count":235,"kev_count":72,"last_cve_update":280},7158,"bonjour",13,"2020-02-05",{"id":282,"product_name":283,"version_count":72,"cve_count":235,"kev_count":72,"last_cve_update":252},7129,"airport_base_station",{"id":285,"product_name":286,"version_count":72,"cve_count":235,"kev_count":72,"last_cve_update":287},7294,"powerpc","2008-01-29",{"id":289,"product_name":290,"version_count":191,"cve_count":235,"kev_count":72,"last_cve_update":166},7133,"airport_express_base_station_firmware",{"id":292,"product_name":293,"version_count":134,"cve_count":235,"kev_count":72,"last_cve_update":294},7264,"mac_os","2019-01-11",{"id":296,"product_name":297,"version_count":298,"cve_count":235,"kev_count":72,"last_cve_update":136},7245,"logic_pro_x",28,{"id":300,"product_name":301,"version_count":65,"cve_count":235,"kev_count":72,"last_cve_update":166},7135,"airport_extreme_base_station_firmware",{"id":303,"product_name":304,"version_count":235,"cve_count":235,"kev_count":72,"last_cve_update":305},7268,"mac_os_runtime_for_java","2001-12-31",{"id":307,"product_name":308,"version_count":85,"cve_count":65,"kev_count":72,"last_cve_update":309},7307,"remote_desktop","2021-12-23",{"id":311,"product_name":312,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":313},7181,"ichat_server","2012-08-25",{"id":315,"product_name":316,"version_count":235,"cve_count":65,"kev_count":72,"last_cve_update":305},7290,"personal_web_sharing",{"id":318,"product_name":319,"version_count":65,"cve_count":65,"kev_count":72,"last_cve_update":320},7304,"quicktime_pictureviewer","2005-05-02",{"id":322,"product_name":323,"version_count":65,"cve_count":65,"kev_count":72,"last_cve_update":324},7311,"shazam","2019-12-18",{"id":326,"product_name":327,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":324},7312,"shortcuts",{"id":329,"product_name":330,"version_count":211,"cve_count":65,"kev_count":72,"last_cve_update":331},7314,"software_update","2016-03-14",{"id":333,"product_name":334,"version_count":235,"cve_count":65,"kev_count":72,"last_cve_update":335},7344,"xsan","2009-09-15",{"id":337,"product_name":338,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":339},7186,"imovie","2021-09-08",{"id":341,"product_name":342,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":226},7187,"installer",{"id":344,"product_name":345,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":346},7188,"instant_message_framework","2007-01-31",{"id":348,"product_name":349,"version_count":72,"cve_count":65,"kev_count":72,"last_cve_update":350},7121,"airplay_audio_software_development_kit","2025-04-30",{"id":352,"product_name":353,"version_count":72,"cve_count":65,"kev_count":72,"last_cve_update":350},7122,"airplay_video_software_development_kit",{"id":355,"product_name":356,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":226},7147,"applescript",{"id":358,"product_name":359,"version_count":235,"cve_count":65,"kev_count":72,"last_cve_update":360},7148,"appleshare","2000-05-02",{"id":362,"product_name":363,"version_count":364,"cve_count":65,"kev_count":72,"last_cve_update":365},7150,"apple_support",25,"2019-04-03",{"id":367,"product_name":368,"version_count":65,"cve_count":65,"kev_count":72,"last_cve_update":369},7124,"airpods_firmware","2024-06-26",{"id":371,"product_name":372,"version_count":235,"cve_count":65,"kev_count":72,"last_cve_update":339},7159,"boot_camp",{"id":374,"product_name":375,"version_count":72,"cve_count":65,"kev_count":72,"last_cve_update":226},7160,"carboncore",{"id":377,"product_name":378,"version_count":72,"cve_count":65,"kev_count":72,"last_cve_update":350},7161,"carplay_communication_plug-in",{"id":380,"product_name":381,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":382},7241,"java_1.5","2010-05-21",{"id":384,"product_name":385,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":382},7242,"java_1.6",{"id":387,"product_name":388,"version_count":72,"cve_count":65,"kev_count":72,"last_cve_update":389},7173,"files","2021-06-02",{"id":391,"product_name":392,"version_count":140,"cve_count":65,"kev_count":72,"last_cve_update":393},7262,"macbook_air","2023-12-08",{"id":395,"product_name":396,"version_count":397,"cve_count":140,"kev_count":72,"last_cve_update":398},7320,"swift-nio-extras",30,"2022-09-21",{"id":400,"product_name":401,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":402},7318,"swift_foundation","2023-01-20",{"id":404,"product_name":405,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":406},7316,"studio_display_firmware","2023-05-08",{"id":408,"product_name":409,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":406},7315,"studio_display",{"id":411,"product_name":412,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":413},7131,"airport_card","2005-07-19",{"id":415,"product_name":416,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":417},7185,"imessage","2022-03-23",{"id":419,"product_name":420,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":421},7310,"server_manager","2007-03-13",{"id":423,"product_name":424,"version_count":65,"cve_count":140,"kev_count":72,"last_cve_update":425},7180,"ichat_av","2004-12-23",{"id":427,"product_name":428,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":429},7303,"quicktime_mpeg-2_playback_component","2009-01-22",{"id":431,"product_name":432,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":433},7302,"quicktime_darwin_mp3_broadcaster","2003-03-07",{"id":435,"product_name":436,"version_count":165,"cve_count":140,"kev_count":72,"last_cve_update":437},7137,"airport_utility","2010-04-05",{"id":439,"product_name":440,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":441},7138,"apache_mod_digest_apple","2004-02-03",{"id":443,"product_name":444,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":212},7139,"aperture",{"id":446,"product_name":447,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":448},7172,"exposure_notifications","2020-09-30",{"id":450,"product_name":451,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":452},7141,"apple_airport_extreme_base_station","2008-03-20",{"id":454,"product_name":455,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":456},7107,"802.11n","2003-06-16",{"id":458,"product_name":459,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":460},7143,"apple_laserwriter","2002-12-31",{"id":462,"product_name":463,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":464},7209,"iphone_3gs","2019-11-22",{"id":466,"product_name":467,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":369},7123,"airpods",{"id":469,"product_name":470,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":471},7145,"apple_music","2017-04-07",{"id":473,"product_name":474,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":475},7301,"quicktime_broadcaster","2003-12-31",{"id":477,"product_name":478,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":479},7270,"macos_server","2021-04-02",{"id":481,"product_name":482,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":369},7127,"airpods_pro",{"id":484,"product_name":485,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":486},7149,"appleshare_mail_server","1998-04-08",{"id":488,"product_name":489,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":490},7275,"magic_keyboard_firmware","2024-01-12",{"id":492,"product_name":493,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":494},7299,"quicklook","2008-08-04",{"id":496,"product_name":497,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":271},7152,"apple_type_services",{"id":499,"product_name":500,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":369},7128,"airpods_pro_firmware",{"id":502,"product_name":503,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":170},7298,"quartz_composer",{"id":505,"product_name":506,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":369},7155,"beats_fit_pro",{"id":508,"product_name":509,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":369},7156,"beats_fit_pro_firmware",{"id":511,"product_name":512,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":513},7223,"iphone_configuration_web_utility","2008-12-03",{"id":515,"product_name":516,"version_count":165,"cve_count":140,"kev_count":72,"last_cve_update":517},7297,"pykerberos","2017-08-25",{"id":519,"product_name":520,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":393},7225,"iphone_se",{"id":522,"product_name":523,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":524},7157,"bomarchivehelper","2006-12-07",{"id":526,"product_name":527,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":528},7296,"pro_video_formats","2023-09-06",{"id":530,"product_name":531,"version_count":65,"cve_count":140,"kev_count":72,"last_cve_update":532},7177,"ibooks_author","2016-04-05",{"id":534,"product_name":535,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":490},7274,"magic_keyboard",{"id":537,"product_name":538,"version_count":65,"cve_count":140,"kev_count":72,"last_cve_update":195},7269,"mac_os_server",{"id":540,"product_name":541,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":542},7295,"preview","2007-01-09",{"id":544,"product_name":545,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":305},7163,"claris_emailer",{"id":547,"product_name":548,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":369},7293,"powerbeats_firmware",{"id":550,"product_name":551,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":369},7292,"powerbeats",{"id":553,"product_name":554,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":212},7291,"podcast_producer",{"id":556,"product_name":557,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":558},7236,"itunes_u","2021-08-24",{"id":560,"product_name":561,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":170},7289,"pdfkit",{"id":563,"product_name":564,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":382},7238,"java",{"id":566,"product_name":567,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":369},7125,"airpods_max",{"id":569,"product_name":570,"version_count":235,"cve_count":140,"kev_count":72,"last_cve_update":571},7240,"java_1.4","2009-09-09",{"id":573,"product_name":574,"version_count":575,"cve_count":140,"kev_count":72,"last_cve_update":393},7263,"macbook_pro",32,{"id":577,"product_name":578,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":579},7272,"mac_os_x_preview.app","2007-04-24",{"id":581,"product_name":582,"version_count":279,"cve_count":140,"kev_count":72,"last_cve_update":583},7285,"nioextras","2020-05-11",{"id":585,"product_name":586,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":271},7244,"libsecurity",{"id":588,"product_name":589,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":590},7284,"music_classical","2025-08-15",{"id":592,"product_name":593,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":369},7126,"airpods_max_firmware",{"id":595,"product_name":596,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":597},7247,"m1_mac_mini","2023-09-27",{"id":599,"product_name":600,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":170},7166,"core_audio_technologies",{"id":602,"product_name":603,"version_count":112,"cve_count":140,"kev_count":72,"last_cve_update":604},7281,"motion","2013-11-04",{"id":606,"product_name":607,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":597},7335,"watch_ultra",{"id":609,"product_name":610,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":597},7336,"watch_ultra_2",{"id":612,"product_name":613,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":614},7329,"transporter","2017-02-20",{"id":616,"product_name":617,"version_count":279,"cve_count":140,"kev_count":72,"last_cve_update":618},7328,"tokend","2020-01-30",{"id":620,"product_name":621,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":622},7339,"weblog_server","2005-08-19",{"id":624,"product_name":625,"version_count":65,"cve_count":140,"kev_count":72,"last_cve_update":324},7326,"texture",{"id":627,"product_name":628,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":629},7341,"windows_migration_assistant","2020-06-09",{"id":631,"product_name":632,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":633},7325,"textedit","2005-12-22",{"id":635,"product_name":636,"version_count":112,"cve_count":140,"kev_count":72,"last_cve_update":637},7343,"xcode_tools","2008-07-14",{"id":639,"product_name":640,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":637},7168,"core_image_fun_house",{"id":642,"product_name":643,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":644},7345,"xserve_lights-out_management","2007-06-04",{"id":646,"product_name":647,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":648},7280,"mobile_safari","2008-02-12",{"id":650,"product_name":651,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":652},7279,"minimal_slp_service_agent","2007-01-19",{"id":654,"product_name":655,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":494},7171,"data_detectors_engine",{"id":657,"product_name":658,"version_count":140,"cve_count":140,"kev_count":72,"last_cve_update":460},7323,"tcp_ip_configuration_utility",{"id":660,"product_name":661,"version_count":364,"cve_count":140,"kev_count":72,"last_cve_update":324},7322,"swiftnio_ssl",{"id":663,"product_name":664,"version_count":72,"cve_count":140,"kev_count":72,"last_cve_update":207},7191,"ipad_mini",{"id":666,"product_name":667,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7255,"m3",null,{"id":670,"product_name":671,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7108,"a10_fusion",{"id":673,"product_name":674,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7109,"a10x_fusion",{"id":676,"product_name":677,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7110,"a11_bionic",{"id":679,"product_name":680,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7111,"a5",{"id":682,"product_name":683,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7112,"a5x",{"id":685,"product_name":686,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7113,"a6",{"id":688,"product_name":689,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7114,"a6x",{"id":691,"product_name":692,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7115,"a7",{"id":694,"product_name":695,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7116,"a8",{"id":697,"product_name":698,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7117,"a8x",{"id":700,"product_name":701,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7118,"a9",{"id":703,"product_name":704,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7119,"a9x",{"id":706,"product_name":707,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7136,"airport_extreme_firmware",{"id":709,"product_name":710,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7140,"apple_airport_base_station_firmware",{"id":712,"product_name":713,"version_count":160,"cve_count":72,"kev_count":72,"last_cve_update":668},7142,"apple_application_support",{"id":715,"product_name":716,"version_count":191,"cve_count":72,"kev_count":72,"last_cve_update":668},7144,"apple_mobile_device_support",{"id":718,"product_name":719,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7153,"app_store_connect",{"id":721,"product_name":722,"version_count":85,"cve_count":72,"kev_count":72,"last_cve_update":668},7164,"container",{"id":724,"product_name":725,"version_count":726,"cve_count":72,"kev_count":72,"last_cve_update":668},7165,"containerization",38,{"id":728,"product_name":729,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7174,"finder",{"id":731,"product_name":732,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7176,"help_viewer",{"id":734,"product_name":735,"version_count":107,"cve_count":72,"kev_count":72,"last_cve_update":668},7183,"imac",{"id":737,"product_name":738,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7192,"ipad_mini-",{"id":740,"product_name":741,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7196,"iphone_11",{"id":743,"product_name":744,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7197,"iphone_11_pro",{"id":746,"product_name":747,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7198,"iphone_11_pro_max",{"id":749,"product_name":750,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7199,"iphone_12",{"id":752,"product_name":753,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7200,"iphone_12_mini",{"id":755,"product_name":756,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7201,"iphone_12_pro",{"id":758,"product_name":759,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7202,"iphone_12_pro_max",{"id":761,"product_name":762,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7203,"iphone_13",{"id":764,"product_name":765,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7204,"iphone_13_mini",{"id":767,"product_name":768,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7205,"iphone_13_pro",{"id":770,"product_name":771,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7206,"iphone_13_pro_max",{"id":773,"product_name":774,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7207,"iphone_\\(1st_generation\\)",{"id":776,"product_name":777,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7208,"iphone_3g",{"id":779,"product_name":780,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7210,"iphone_4",{"id":782,"product_name":783,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7211,"iphone_4s",{"id":785,"product_name":786,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7212,"iphone_5",{"id":788,"product_name":789,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7213,"iphone_5c",{"id":791,"product_name":792,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7214,"iphone_5s",{"id":794,"product_name":795,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7215,"iphone_6",{"id":797,"product_name":798,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7216,"iphone_6_plus",{"id":800,"product_name":801,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7217,"iphone_6s",{"id":803,"product_name":804,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7218,"iphone_6s_plus",{"id":806,"product_name":807,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7219,"iphone_7",{"id":809,"product_name":810,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7220,"iphone_7_plus",{"id":812,"product_name":813,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7221,"iphone_8",{"id":815,"product_name":816,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7222,"iphone_8_plus",{"id":818,"product_name":819,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7226,"iphone_se_\\(1st_generation\\)",{"id":821,"product_name":822,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7227,"iphone_se_\\(2nd_generation\\)",{"id":824,"product_name":825,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7228,"iphone_se_\\(3rd_generation\\)",{"id":827,"product_name":828,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7229,"iphone_x",{"id":830,"product_name":831,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7230,"iphone_xr",{"id":833,"product_name":834,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7231,"iphone_xs",{"id":836,"product_name":837,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7232,"iphone_xs_max",{"id":839,"product_name":840,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7239,"java_1.3",{"id":842,"product_name":843,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7246,"m1",{"id":845,"product_name":846,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7248,"m1_max",{"id":848,"product_name":849,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7249,"m1_pro",{"id":851,"product_name":852,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7250,"m1_ultra",{"id":854,"product_name":855,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7251,"m2",{"id":857,"product_name":858,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7252,"m2_max",{"id":860,"product_name":861,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7253,"m2_pro",{"id":863,"product_name":864,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7254,"m2_ultra",{"id":866,"product_name":867,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7256,"m3_max",{"id":869,"product_name":870,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7257,"m3_pro",{"id":872,"product_name":873,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7258,"m3_ultra",{"id":875,"product_name":876,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7259,"m4",{"id":878,"product_name":879,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7260,"m4_max",{"id":881,"product_name":882,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7261,"m4_pro",{"id":884,"product_name":885,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7266,"mac_os_appleshare_ip",{"id":887,"product_name":888,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7267,"mac_os_nsl_manager",{"id":890,"product_name":891,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7278,"metaio_sdk",{"id":893,"product_name":894,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7282,"mpeg2_codec",{"id":896,"product_name":897,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7306,"quictime",{"id":899,"product_name":900,"version_count":72,"cve_count":72,"kev_count":72,"last_cve_update":668},7309,"securerom",{"id":902,"product_name":903,"version_count":140,"cve_count":72,"kev_count":72,"last_cve_update":668},7313,"smart_card_services","Apple is a technology vendor with 239 tracked products and 12782 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[906,915,920,926,931,937,944,949,953,957],{"cveId":907,"description":908,"publishedDate":909,"cvssScore":910,"cvssVersion":911,"severity":912,"isKev":913,"epssScore":914},"CVE-2008-0226","Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) \"input_buffer& operator>>\" in yassl_imp.cpp.","2008-01-10",7.5,"v2","High",false,0.91602,{"cveId":916,"description":917,"publishedDate":918,"cvssScore":910,"cvssVersion":911,"severity":912,"isKev":913,"epssScore":919},"CVE-2002-0656","Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.","2002-08-12",0.8982,{"cveId":921,"description":922,"publishedDate":923,"cvssScore":85,"cvssVersion":911,"severity":924,"isKev":913,"epssScore":925},"CVE-2003-0201","Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.","2003-05-05","Critical",0.84502,{"cveId":927,"description":928,"publishedDate":579,"cvssScore":929,"cvssVersion":911,"severity":912,"isKev":913,"epssScore":930},"CVE-2007-2175","Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory when creating QTPointerRef objects, as demonstrated during the \"PWN 2 0WN\" contest at CanSecWest 2007.",7.6,0.83804,{"cveId":932,"description":933,"publishedDate":934,"cvssScore":935,"cvssVersion":911,"severity":924,"isKev":913,"epssScore":936},"CVE-2004-2687","distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.","2004-12-31",9.3,0.80978,{"cveId":938,"description":939,"publishedDate":940,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":913,"epssScore":943},"CVE-2003-0466","Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.","2003-08-27",9.8,"v3.1",0.78115,{"cveId":945,"description":946,"publishedDate":947,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":913,"epssScore":948},"CVE-2007-3798","Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.","2007-07-16",0.70386,{"cveId":950,"description":951,"publishedDate":320,"cvssScore":910,"cvssVersion":911,"severity":912,"isKev":913,"epssScore":952},"CVE-2005-0043","Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.",0.69005,{"cveId":954,"description":955,"publishedDate":433,"cvssScore":910,"cvssVersion":911,"severity":912,"isKev":913,"epssScore":956},"CVE-2003-0050","parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters.",0.68858,{"cveId":958,"description":959,"publishedDate":960,"cvssScore":85,"cvssVersion":911,"severity":924,"isKev":913,"epssScore":961},"CVE-2003-0694","The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.","2003-10-06",0.60185,[963,973,980,987,996,1004,1012,1019,1027,1035,1043,1051,1058,1066,1076,1084,1092,1098,1107,1114,1120,1127,1134,1139,1146,1153,1160,1169,1176,1183,1189,1197,1205,1213,1219,1226,1234,1242,1248,1256,1262,1268,1273,1279,1286,1293,1300,1305,1312,1318,1324,1330,1337,1344,1352,1359,1367,1375,1381,1389,1394,1401,1408,1413,1418,1423,1429,1437,1444,1451,1458,1464,1471,1479,1486,1492,1497,1505,1511,1520,1527,1534,1541,1548,1556,1562,1568,1575,1580,1585,1590,1597,1601,1609,1616,1622,1627,1633,1640,1647,1653,1660,1667,1674,1680,1688,1694,1700,1708,1714,1720,1727,1733,1740,1746,1752,1759,1765,1771,1778,1785,1793,1800,1807,1813,1818,1825,1832,1835,1841,1847,1852,1858,1864,1870,1875,1881,1887,1894,1900,1906,1912,1917,1923,1930,1936,1942,1947,1953,1959,1965,1970,1976],{"cveId":964,"description":965,"publishedDate":966,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":968,"cisaVulnName":969,"cisaDateAdded":970,"cisaShortDescription":971,"cisaRequiredAction":972},"CVE-2020-9715","Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution .","2020-08-19",7.8,0.48441,"Adobe Acrobat Use-After-Free Vulnerability","2026-04-13","Adobe Acrobat contains a use-after-free vulnerability that allows for code execution","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":974,"description":975,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":976,"cisaVulnName":977,"cisaDateAdded":978,"cisaShortDescription":979,"cisaRequiredAction":972},"CVE-2021-30952","An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.",0.07617,"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","2026-03-05","Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":981,"description":982,"publishedDate":983,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":984,"cisaVulnName":985,"cisaDateAdded":978,"cisaShortDescription":986,"cisaRequiredAction":972},"CVE-2023-41974","A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.","2024-01-10",0.0141,"Apple iOS and iPadOS Use-After-Free Vulnerability","Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.",{"cveId":988,"description":989,"publishedDate":990,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":992,"cisaVulnName":993,"cisaDateAdded":994,"cisaShortDescription":995,"cisaRequiredAction":972},"CVE-2022-48503","The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.","2023-08-14",8.8,0.03213,"Apple Multiple Products Unspecified Vulnerability","2025-10-20","Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":997,"description":998,"publishedDate":999,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1000,"cisaVulnName":1001,"cisaDateAdded":1002,"cisaShortDescription":1003,"cisaRequiredAction":972},"CVE-2025-10585","Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-09-24",0.05419,"Google Chromium V8 Type Confusion Vulnerability","2025-09-23","Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.",{"cveId":1005,"description":1006,"publishedDate":1007,"cvssScore":112,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1008,"cisaVulnName":1009,"cisaDateAdded":1010,"cisaShortDescription":1011,"cisaRequiredAction":972},"CVE-2025-48384","Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","2025-07-08",0.02775,"Git Link Following Vulnerability","2025-08-25","Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.",{"cveId":1013,"description":1014,"publishedDate":1015,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1016,"cisaVulnName":1017,"cisaDateAdded":1015,"cisaShortDescription":1018,"cisaRequiredAction":972},"CVE-2025-43300","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.","2025-08-21",0.19972,"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I\u002FO framework.",{"cveId":1020,"description":1021,"publishedDate":1022,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1023,"cisaVulnName":1024,"cisaDateAdded":1025,"cisaShortDescription":1026,"cisaRequiredAction":972},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2025-07-15",0.09185,"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1028,"description":1029,"publishedDate":1030,"cvssScore":1031,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1032,"cisaVulnName":1001,"cisaDateAdded":1033,"cisaShortDescription":1034,"cisaRequiredAction":972},"CVE-2025-6554","Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. (Chromium security severity: High)","2025-06-30",8.1,0.06564,"2025-07-02","Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1036,"description":1037,"publishedDate":1038,"cvssScore":1039,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1041,"cisaVulnName":993,"cisaDateAdded":1038,"cisaShortDescription":1042,"cisaRequiredAction":972},"CVE-2025-43200","This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.","2025-06-16",4.2,"Medium",0.01009,"Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link.",{"cveId":1044,"description":1045,"publishedDate":1046,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1047,"cisaVulnName":1048,"cisaDateAdded":1049,"cisaShortDescription":1050,"cisaRequiredAction":972},"CVE-2025-31201","This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.","2025-04-16",0.12358,"Apple Multiple Products Arbitrary Read and Write Vulnerability","2025-04-17","Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.",{"cveId":1052,"description":1053,"publishedDate":1046,"cvssScore":1054,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1055,"cisaVulnName":1056,"cisaDateAdded":1049,"cisaShortDescription":1057,"cisaRequiredAction":972},"CVE-2025-31200","A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.",7.1,0.21255,"Apple Multiple Products Memory Corruption Vulnerability","Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.",{"cveId":1059,"description":1060,"publishedDate":1061,"cvssScore":1054,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1062,"cisaVulnName":1063,"cisaDateAdded":1064,"cisaShortDescription":1065,"cisaRequiredAction":972},"CVE-2025-24201","An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in visionOS 2.3.2, iOS 18.3.2 and iPadOS 18.3.2, macOS Sequoia 15.3.2, Safari 18.3.1, watchOS 11.4, iPadOS 17.7.6, iOS 16.7.11 and iPadOS 16.7.11, iOS 15.8.4 and iPadOS 15.8.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).","2025-03-11",0.0424,"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","2025-03-13","Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1067,"description":1068,"publishedDate":1069,"cvssScore":1070,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1071,"cisaVulnName":1072,"cisaDateAdded":1073,"cisaShortDescription":1074,"cisaRequiredAction":1075},"CVE-2025-24200","An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.","2025-02-10",6.1,0.04906,"Apple iOS and iPadOS Incorrect Authorization Vulnerability","2025-02-12","Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":1077,"description":1078,"publishedDate":1079,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1080,"cisaVulnName":1081,"cisaDateAdded":1082,"cisaShortDescription":1083,"cisaRequiredAction":1075},"CVE-2025-24085","A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.","2025-01-27",0.18668,"Apple Multiple Products Use-After-Free Vulnerability","2025-01-29","Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.",{"cveId":1085,"description":1086,"publishedDate":1087,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1088,"cisaVulnName":1089,"cisaDateAdded":1090,"cisaShortDescription":1091,"cisaRequiredAction":1075},"CVE-2024-44308","The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.","2024-11-20",0.09186,"Apple Multiple Products Code Execution Vulnerability","2024-11-21","Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.",{"cveId":1093,"description":1094,"publishedDate":1087,"cvssScore":1070,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1095,"cisaVulnName":1096,"cisaDateAdded":1090,"cisaShortDescription":1097,"cisaRequiredAction":1075},"CVE-2024-44309","A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.",0.21044,"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.",{"cveId":1099,"description":1100,"publishedDate":1101,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1102,"cisaVulnName":1103,"cisaDateAdded":1104,"cisaShortDescription":1105,"cisaRequiredAction":1106},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99883,"Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":1108,"description":1109,"publishedDate":1110,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1111,"cisaVulnName":1112,"cisaDateAdded":1104,"cisaShortDescription":1113,"cisaRequiredAction":1106},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":1115,"description":1116,"publishedDate":1110,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1117,"cisaVulnName":1118,"cisaDateAdded":1104,"cisaShortDescription":1119,"cisaRequiredAction":1106},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":1121,"description":1122,"publishedDate":1123,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1124,"cisaVulnName":1125,"cisaDateAdded":1104,"cisaShortDescription":1126,"cisaRequiredAction":1106},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24204,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":1128,"description":1129,"publishedDate":1130,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1131,"cisaVulnName":1056,"cisaDateAdded":1132,"cisaShortDescription":1133,"cisaRequiredAction":1075},"CVE-2024-23296","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.","2024-03-05",0.01411,"2024-03-06","Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"cveId":1135,"description":1136,"publishedDate":1130,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1137,"cisaVulnName":1056,"cisaDateAdded":1132,"cisaShortDescription":1138,"cisaRequiredAction":1075},"CVE-2024-23225","A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.",0.01481,"Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.",{"cveId":1140,"description":1141,"publishedDate":1142,"cvssScore":182,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1143,"cisaVulnName":1056,"cisaDateAdded":1144,"cisaShortDescription":1145,"cisaRequiredAction":1075},"CVE-2022-48618","The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.","2024-01-09",0.00487,"2024-01-31","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check\u002Ftime-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.",{"cveId":1147,"description":1148,"publishedDate":1149,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1150,"cisaVulnName":1151,"cisaDateAdded":1149,"cisaShortDescription":1152,"cisaRequiredAction":1075},"CVE-2024-23222","A type confusion issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.","2024-01-23",0.10593,"Apple Multiple Products WebKit Type Confusion Vulnerability","Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1154,"description":1155,"publishedDate":1156,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1157,"cisaVulnName":1089,"cisaDateAdded":1158,"cisaShortDescription":1159,"cisaRequiredAction":1075},"CVE-2023-41990","The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.","2023-09-12",0.01145,"2024-01-08","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.",{"cveId":1161,"description":1162,"publishedDate":1163,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1164,"cisaVulnName":1165,"cisaDateAdded":1166,"cisaShortDescription":1167,"cisaRequiredAction":1168},"CVE-2023-42917","A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.","2023-11-30",0.0937,"Apple Multiple Products WebKit Memory Corruption Vulnerability","2023-12-04","Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":1170,"description":1171,"publishedDate":1163,"cvssScore":1172,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1173,"cisaVulnName":1174,"cisaDateAdded":1166,"cisaShortDescription":1175,"cisaRequiredAction":1168},"CVE-2023-42916","An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.",6.5,0.17823,"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1177,"description":1178,"publishedDate":1179,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1180,"cisaVulnName":1181,"cisaDateAdded":216,"cisaShortDescription":1182,"cisaRequiredAction":1075},"CVE-2023-21608","Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-01-18",0.61475,"Adobe Acrobat and Reader Use-After-Free Vulnerability","Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.",{"cveId":1184,"description":1185,"publishedDate":216,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1186,"cisaVulnName":1187,"cisaDateAdded":216,"cisaShortDescription":1188,"cisaRequiredAction":972},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",0.99999,"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":1190,"description":1191,"publishedDate":1192,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1193,"cisaVulnName":1194,"cisaDateAdded":1195,"cisaShortDescription":1196,"cisaRequiredAction":1075},"CVE-2023-42824","The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","2023-10-04",0.00943,"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","2023-10-05","Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.",{"cveId":1198,"description":1199,"publishedDate":1200,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1201,"cisaVulnName":1202,"cisaDateAdded":1203,"cisaShortDescription":1204,"cisaRequiredAction":1075},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":1206,"description":1207,"publishedDate":1208,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1209,"cisaVulnName":1210,"cisaDateAdded":1211,"cisaShortDescription":1212,"cisaRequiredAction":1075},"CVE-2023-41993","The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","2023-09-21",0.29179,"Apple Multiple Products WebKit Code Execution Vulnerability","2023-09-25","Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1214,"description":1215,"publishedDate":1208,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1216,"cisaVulnName":1217,"cisaDateAdded":1211,"cisaShortDescription":1218,"cisaRequiredAction":1075},"CVE-2023-41992","The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.",0.02918,"Apple Multiple Products Kernel Privilege Escalation Vulnerability","Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.",{"cveId":1220,"description":1221,"publishedDate":1208,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1223,"cisaVulnName":1224,"cisaDateAdded":1211,"cisaShortDescription":1225,"cisaRequiredAction":1075},"CVE-2023-41991","A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.",5.5,0.04547,"Apple Multiple Products Improper Certificate Validation Vulnerability","Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.",{"cveId":1227,"description":1228,"publishedDate":1229,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1230,"cisaVulnName":1231,"cisaDateAdded":1232,"cisaShortDescription":1233,"cisaRequiredAction":1075},"CVE-2023-26369","Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2023-09-13",0.07036,"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","2023-09-14","Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution.",{"cveId":1235,"description":1236,"publishedDate":1237,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1238,"cisaVulnName":1239,"cisaDateAdded":1240,"cisaShortDescription":1241,"cisaRequiredAction":1075},"CVE-2023-41061","A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-09-07",0.03151,"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","2023-09-11","Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.",{"cveId":1243,"description":1244,"publishedDate":1237,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1245,"cisaVulnName":1246,"cisaDateAdded":1240,"cisaShortDescription":1247,"cisaRequiredAction":1075},"CVE-2023-41064","A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.15263,"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.",{"cveId":1249,"description":1250,"publishedDate":1251,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1252,"cisaVulnName":1253,"cisaDateAdded":1254,"cisaShortDescription":1255,"cisaRequiredAction":1075},"CVE-2023-38606","This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.","2023-07-27",0.01002,"Apple Multiple Products Kernel Unspecified Vulnerability","2023-07-26","Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.",{"cveId":1257,"description":1258,"publishedDate":1251,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1259,"cisaVulnName":1210,"cisaDateAdded":1260,"cisaShortDescription":1212,"cisaRequiredAction":1261},"CVE-2023-37450","The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.18185,"2023-07-13","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":1263,"description":1264,"publishedDate":1265,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1266,"cisaVulnName":1165,"cisaDateAdded":1265,"cisaShortDescription":1167,"cisaRequiredAction":1267},"CVE-2023-32435","A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.","2023-06-23",0.22951,"Apply updates per vendor instructions.",{"cveId":1269,"description":1270,"publishedDate":1265,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1271,"cisaVulnName":1151,"cisaDateAdded":1265,"cisaShortDescription":1272,"cisaRequiredAction":1267},"CVE-2023-32439","A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.23788,"Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1274,"description":1275,"publishedDate":1265,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1276,"cisaVulnName":1277,"cisaDateAdded":1265,"cisaShortDescription":1278,"cisaRequiredAction":1267},"CVE-2023-32434","An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.",0.51517,"Apple Multiple Products Integer Overflow Vulnerability","Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":1280,"description":1281,"publishedDate":1282,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1283,"cisaVulnName":1001,"cisaDateAdded":1284,"cisaShortDescription":1285,"cisaRequiredAction":1267},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.32724,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1287,"description":1288,"publishedDate":1265,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1289,"cisaVulnName":1290,"cisaDateAdded":1291,"cisaShortDescription":1292,"cisaRequiredAction":1267},"CVE-2023-32373","A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.12172,"Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-05-22","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1294,"description":1295,"publishedDate":1265,"cvssScore":1296,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1297,"cisaVulnName":1298,"cisaDateAdded":1291,"cisaShortDescription":1299,"cisaRequiredAction":1267},"CVE-2023-32409","The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.",8.6,0.1653,"Apple Multiple Products WebKit Sandbox Escape Vulnerability","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1301,"description":1302,"publishedDate":1265,"cvssScore":1172,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1303,"cisaVulnName":1174,"cisaDateAdded":1291,"cisaShortDescription":1304,"cisaRequiredAction":1267},"CVE-2023-28204","An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.",0.14292,"Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1306,"description":1307,"publishedDate":324,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1308,"cisaVulnName":1309,"cisaDateAdded":1310,"cisaShortDescription":1311,"cisaRequiredAction":1267},"CVE-2019-8526","A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.",0.00701,"Apple macOS Use-After-Free Vulnerability","2023-04-17","Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.",{"cveId":1313,"description":1314,"publishedDate":1315,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1316,"cisaVulnName":1290,"cisaDateAdded":1315,"cisaShortDescription":1317,"cisaRequiredAction":1267},"CVE-2023-28205","A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-04-10",0.27076,"Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1319,"description":1320,"publishedDate":1315,"cvssScore":1296,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1321,"cisaVulnName":1322,"cisaDateAdded":1315,"cisaShortDescription":1323,"cisaRequiredAction":1267},"CVE-2023-28206","An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.",0.24513,"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.",{"cveId":1325,"description":1326,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1327,"cisaVulnName":1017,"cisaDateAdded":1328,"cisaShortDescription":1329,"cisaRequiredAction":1267},"CVE-2021-30900","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.",0.05204,"2023-03-30","Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.",{"cveId":1331,"description":1332,"publishedDate":1333,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1334,"cisaVulnName":1151,"cisaDateAdded":1335,"cisaShortDescription":1336,"cisaRequiredAction":1267},"CVE-2023-23529","A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-02-27",0.09426,"2023-02-14","Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1338,"description":1339,"publishedDate":79,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1340,"cisaVulnName":1341,"cisaDateAdded":1342,"cisaShortDescription":1343,"cisaRequiredAction":1267},"CVE-2022-42856","A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..",0.08523,"Apple iOS Type Confusion Vulnerability","2022-12-14","Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.",{"cveId":1345,"description":1346,"publishedDate":1347,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1348,"cisaVulnName":1349,"cisaDateAdded":1350,"cisaShortDescription":1351,"cisaRequiredAction":1267},"CVE-2022-42827","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","2022-11-01",0.01136,"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","2022-10-25","Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.",{"cveId":1353,"description":1354,"publishedDate":1355,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1356,"cisaVulnName":1357,"cisaDateAdded":267,"cisaShortDescription":1358,"cisaRequiredAction":1267},"CVE-2022-32917","The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","2022-09-20",0.05557,"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.",{"cveId":1360,"description":1361,"publishedDate":1362,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1363,"cisaVulnName":1364,"cisaDateAdded":1365,"cisaShortDescription":1366,"cisaRequiredAction":1267},"CVE-2020-9934","An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information.","2020-10-16",0.03208,"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","2022-09-08","Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.",{"cveId":1368,"description":1369,"publishedDate":1370,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1371,"cisaVulnName":1372,"cisaDateAdded":1373,"cisaShortDescription":1374,"cisaRequiredAction":1267},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",0.70461,"WebRTC Heap Buffer Overflow Vulnerability","2022-08-25","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":1376,"description":1377,"publishedDate":558,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1378,"cisaVulnName":1379,"cisaDateAdded":1373,"cisaShortDescription":1380,"cisaRequiredAction":1267},"CVE-2021-31010","A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..",0.03673,"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.",{"cveId":1382,"description":1383,"publishedDate":1384,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1385,"cisaVulnName":1386,"cisaDateAdded":1387,"cisaShortDescription":1388,"cisaRequiredAction":1267},"CVE-2022-32893","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2022-08-24",0.09785,"Apple iOS and macOS Out-of-Bounds Write Vulnerability","2022-08-18","Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.",{"cveId":1390,"description":1391,"publishedDate":1384,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1392,"cisaVulnName":1386,"cisaDateAdded":1387,"cisaShortDescription":1393,"cisaRequiredAction":1267},"CVE-2022-32894","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.",0.03259,"Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":1395,"description":1396,"publishedDate":1397,"cvssScore":1172,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1398,"cisaVulnName":1399,"cisaDateAdded":1387,"cisaShortDescription":1400,"cisaRequiredAction":1267},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.","2022-09-26",0.04493,"Google Chromium Intents Insufficient Input Validation Vulnerability","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1402,"description":1403,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1404,"cisaVulnName":1405,"cisaDateAdded":1406,"cisaShortDescription":1407,"cisaRequiredAction":1267},"CVE-2021-30983","A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.",0.02934,"Apple iOS and iPadOS Buffer Overflow Vulnerability","2022-06-27","Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":1409,"description":1410,"publishedDate":365,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1411,"cisaVulnName":1056,"cisaDateAdded":1406,"cisaShortDescription":1412,"cisaRequiredAction":1267},"CVE-2018-4344","A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.",0.02939,"Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.",{"cveId":1414,"description":1415,"publishedDate":324,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1416,"cisaVulnName":1081,"cisaDateAdded":1406,"cisaShortDescription":1417,"cisaRequiredAction":1267},"CVE-2019-8605","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.",0.17438,"A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.",{"cveId":1419,"description":1420,"publishedDate":1362,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1421,"cisaVulnName":1056,"cisaDateAdded":1406,"cisaShortDescription":1422,"cisaRequiredAction":1267},"CVE-2020-9907","A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.",0.03738,"Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":1424,"description":1425,"publishedDate":1426,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1427,"cisaVulnName":1056,"cisaDateAdded":1406,"cisaShortDescription":1428,"cisaRequiredAction":1267},"CVE-2020-3837","A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.","2020-02-27",0.16111,"Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.",{"cveId":1430,"description":1431,"publishedDate":1432,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1433,"cisaVulnName":1434,"cisaDateAdded":1435,"cisaShortDescription":1436,"cisaRequiredAction":1267},"CVE-2011-2462","Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","2011-12-07",0.86238,"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","2022-06-08","The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":1438,"description":1439,"publishedDate":1440,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1441,"cisaVulnName":1442,"cisaDateAdded":1435,"cisaShortDescription":1443,"cisaRequiredAction":1267},"CVE-2009-3953","The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","2010-01-13",0.83855,"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.",{"cveId":1445,"description":1446,"publishedDate":1447,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1448,"cisaVulnName":1449,"cisaDateAdded":1435,"cisaShortDescription":1450,"cisaRequiredAction":1267},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34703,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1452,"description":1453,"publishedDate":1454,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1455,"cisaVulnName":1456,"cisaDateAdded":1435,"cisaShortDescription":1457,"cisaRequiredAction":1267},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.41603,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1459,"description":1460,"publishedDate":1461,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1462,"cisaVulnName":1001,"cisaDateAdded":1435,"cisaShortDescription":1463,"cisaRequiredAction":1267},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.31212,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1465,"description":1466,"publishedDate":1467,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1468,"cisaVulnName":1469,"cisaDateAdded":1435,"cisaShortDescription":1470,"cisaRequiredAction":1267},"CVE-2018-4990","Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.40537,"Adobe Acrobat and Reader Double Free Vulnerability","Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.",{"cveId":1472,"description":1473,"publishedDate":1474,"cvssScore":1031,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1475,"cisaVulnName":1476,"cisaDateAdded":1435,"cisaShortDescription":1477,"cisaRequiredAction":1478},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",0.9203,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":1480,"description":1481,"publishedDate":1482,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1483,"cisaVulnName":1484,"cisaDateAdded":1435,"cisaShortDescription":1485,"cisaRequiredAction":1478},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",0.66821,"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":1487,"description":1488,"publishedDate":1489,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1490,"cisaVulnName":1181,"cisaDateAdded":1435,"cisaShortDescription":1491,"cisaRequiredAction":1267},"CVE-2009-4324","Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","2009-12-15",0.81933,"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.",{"cveId":1493,"description":1494,"publishedDate":1495,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1496,"cisaVulnName":1476,"cisaDateAdded":1435,"cisaShortDescription":1477,"cisaRequiredAction":1478},"CVE-2010-1297","Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.","2010-06-08",0.82365,{"cveId":1498,"description":1499,"publishedDate":1500,"cvssScore":1501,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1502,"cisaVulnName":1503,"cisaDateAdded":1435,"cisaShortDescription":1504,"cisaRequiredAction":1267},"CVE-2010-2883","Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.","2010-09-09",7.3,0.82485,"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","Adobe Acrobat and Reader contain a stack-based buffer overflow vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":1506,"description":1507,"publishedDate":1474,"cvssScore":1070,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1508,"cisaVulnName":1509,"cisaDateAdded":1435,"cisaShortDescription":1510,"cisaRequiredAction":1478},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",0.06662,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":1512,"description":1513,"publishedDate":1514,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1515,"cisaVulnName":1516,"cisaDateAdded":1517,"cisaShortDescription":1518,"cisaRequiredAction":1519},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.55375,"Adobe Flash Player and AIR Use-After-Free Vulnerability","2022-05-25","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":1521,"description":1522,"publishedDate":1523,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1524,"cisaVulnName":1525,"cisaDateAdded":1517,"cisaShortDescription":1526,"cisaRequiredAction":1478},"CVE-2014-8439","Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.","2014-11-25",0.20008,"Adobe Flash Player Dereferenced Pointer Vulnerability","Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.",{"cveId":1528,"description":1529,"publishedDate":1530,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1531,"cisaVulnName":1532,"cisaDateAdded":1517,"cisaShortDescription":1533,"cisaRequiredAction":1478},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67922,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":1535,"description":1536,"publishedDate":1537,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1538,"cisaVulnName":1539,"cisaDateAdded":1517,"cisaShortDescription":1540,"cisaRequiredAction":1519},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19785,"Adobe Flash Player and AIR Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.",{"cveId":1542,"description":1543,"publishedDate":1544,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1545,"cisaVulnName":1546,"cisaDateAdded":1517,"cisaShortDescription":1547,"cisaRequiredAction":1478},"CVE-2015-0310","Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.15217,"Adobe Flash Player ASLR Bypass Vulnerability","Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.",{"cveId":1549,"description":1550,"publishedDate":1551,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1552,"cisaVulnName":1553,"cisaDateAdded":1554,"cisaShortDescription":1555,"cisaRequiredAction":1267},"CVE-2016-4657","WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.","2016-08-25",0.66788,"Apple iOS Webkit Memory Corruption Vulnerability","2022-05-24","Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1557,"description":1558,"publishedDate":1551,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1559,"cisaVulnName":1560,"cisaDateAdded":1554,"cisaShortDescription":1561,"cisaRequiredAction":1267},"CVE-2016-4656","The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.",0.23626,"Apple iOS Memory Corruption Vulnerability","A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service (DoS) via a crafted application.",{"cveId":1563,"description":1564,"publishedDate":1551,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1565,"cisaVulnName":1566,"cisaDateAdded":1554,"cisaShortDescription":1567,"cisaRequiredAction":1267},"CVE-2016-4655","The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.",0.33353,"Apple iOS Information Disclosure Vulnerability","The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application.",{"cveId":1569,"description":1570,"publishedDate":1467,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1571,"cisaVulnName":1572,"cisaDateAdded":1573,"cisaShortDescription":1574,"cisaRequiredAction":1478},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.",0.25353,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":1576,"description":1577,"publishedDate":324,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1578,"cisaVulnName":1056,"cisaDateAdded":1573,"cisaShortDescription":1579,"cisaRequiredAction":1267},"CVE-2019-7286","A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.",0.15705,"Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.",{"cveId":1581,"description":1582,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1583,"cisaVulnName":1056,"cisaDateAdded":1573,"cisaShortDescription":1584,"cisaRequiredAction":1267},"CVE-2021-30883","A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..",0.14721,"Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.",{"cveId":1586,"description":1587,"publishedDate":324,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1588,"cisaVulnName":1560,"cisaDateAdded":1573,"cisaShortDescription":1589,"cisaRequiredAction":1267},"CVE-2019-7287","A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.",0.04589,"Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.",{"cveId":1591,"description":1592,"publishedDate":324,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1593,"cisaVulnName":1594,"cisaDateAdded":1595,"cisaShortDescription":1596,"cisaRequiredAction":1267},"CVE-2019-8506","A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.",0.18108,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":1598,"description":1599,"publishedDate":479,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1600,"cisaVulnName":1594,"cisaDateAdded":1595,"cisaShortDescription":1596,"cisaRequiredAction":1267},"CVE-2021-1789","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.",0.14542,{"cveId":1602,"description":1603,"publishedDate":1604,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1605,"cisaVulnName":1606,"cisaDateAdded":1607,"cisaShortDescription":1608,"cisaRequiredAction":1478},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.9994,"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","2022-04-13","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":1610,"description":1611,"publishedDate":1612,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1613,"cisaVulnName":1614,"cisaDateAdded":1607,"cisaShortDescription":1615,"cisaRequiredAction":1478},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-14",0.18493,"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":1617,"description":1618,"publishedDate":1544,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1619,"cisaVulnName":1620,"cisaDateAdded":1607,"cisaShortDescription":1621,"cisaRequiredAction":1478},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.",0.8582,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":1623,"description":1624,"publishedDate":1612,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1625,"cisaVulnName":1614,"cisaDateAdded":1607,"cisaShortDescription":1626,"cisaRequiredAction":1478},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.",0.93688,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":1628,"description":1629,"publishedDate":1630,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1631,"cisaVulnName":1614,"cisaDateAdded":1607,"cisaShortDescription":1632,"cisaRequiredAction":1478},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95683,"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":1634,"description":1635,"publishedDate":1636,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1637,"cisaVulnName":1638,"cisaDateAdded":1607,"cisaShortDescription":1639,"cisaRequiredAction":1478},"CVE-2014-9163","Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.","2014-12-10",0.20356,"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.",{"cveId":1641,"description":1642,"publishedDate":120,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1643,"cisaVulnName":1644,"cisaDateAdded":1645,"cisaShortDescription":1646,"cisaRequiredAction":1267},"CVE-2022-22675","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..",0.12642,"Apple macOS Out-of-Bounds Write Vulnerability","2022-04-04","macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.",{"cveId":1648,"description":1649,"publishedDate":120,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1650,"cisaVulnName":1651,"cisaDateAdded":1645,"cisaShortDescription":1652,"cisaRequiredAction":1267},"CVE-2022-22674","An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.",0.01132,"Apple macOS Out-of-Bounds Read Vulnerability","macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.",{"cveId":1654,"description":1655,"publishedDate":1656,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1657,"cisaVulnName":1476,"cisaDateAdded":1658,"cisaShortDescription":1659,"cisaRequiredAction":1478},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",0.078,"2022-03-28","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":1661,"description":1662,"publishedDate":1663,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1664,"cisaVulnName":1620,"cisaDateAdded":1665,"cisaShortDescription":1666,"cisaRequiredAction":1478},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.19903,"2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":1668,"description":1669,"publishedDate":1670,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1671,"cisaVulnName":1672,"cisaDateAdded":1665,"cisaShortDescription":1673,"cisaRequiredAction":1267},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",0.99998,"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":1675,"description":1676,"publishedDate":1677,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1678,"cisaVulnName":1614,"cisaDateAdded":1665,"cisaShortDescription":1679,"cisaRequiredAction":1478},"CVE-2016-7892","Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","2016-12-15",0.18786,"Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.",{"cveId":1681,"description":1682,"publishedDate":1683,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1684,"cisaVulnName":1685,"cisaDateAdded":1686,"cisaShortDescription":1687,"cisaRequiredAction":1267},"CVE-2013-0625","Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.","2013-01-09",0.93797,"Adobe ColdFusion Authentication Bypass Vulnerability","2022-03-07","Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.",{"cveId":1689,"description":1690,"publishedDate":1683,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1691,"cisaVulnName":1692,"cisaDateAdded":1686,"cisaShortDescription":1693,"cisaRequiredAction":1267},"CVE-2013-0629","Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.",0.65902,"Adobe ColdFusion Directory Traversal Vulnerability","Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.",{"cveId":1695,"description":1696,"publishedDate":1683,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1697,"cisaVulnName":1698,"cisaDateAdded":1686,"cisaShortDescription":1699,"cisaRequiredAction":1267},"CVE-2013-0631","Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.",0.65867,"Adobe ColdFusion Information Disclosure Vulnerability","Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.",{"cveId":1701,"description":1702,"publishedDate":1703,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1704,"cisaVulnName":1705,"cisaDateAdded":1706,"cisaShortDescription":1707,"cisaRequiredAction":1478},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",0.22487,"Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":1709,"description":1710,"publishedDate":1711,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1712,"cisaVulnName":1614,"cisaDateAdded":1706,"cisaShortDescription":1713,"cisaRequiredAction":1478},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.99344,"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":1715,"description":1716,"publishedDate":1717,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1718,"cisaVulnName":1476,"cisaDateAdded":1706,"cisaShortDescription":1719,"cisaRequiredAction":1478},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.","2015-04-14",0.7983,"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":1721,"description":1722,"publishedDate":1723,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1724,"cisaVulnName":1725,"cisaDateAdded":1706,"cisaShortDescription":1726,"cisaRequiredAction":1267},"CVE-2014-0496","Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.","2014-01-15",0.40243,"Adobe Reader and Acrobat Use-After-Free Vulnerability","Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution.",{"cveId":1728,"description":1729,"publishedDate":1730,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1731,"cisaVulnName":1620,"cisaDateAdded":1706,"cisaShortDescription":1732,"cisaRequiredAction":1478},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",0.9941,"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":1734,"description":1735,"publishedDate":1736,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1737,"cisaVulnName":1738,"cisaDateAdded":1706,"cisaShortDescription":1739,"cisaRequiredAction":1478},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.12104,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":1741,"description":1742,"publishedDate":1743,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1744,"cisaVulnName":1614,"cisaDateAdded":1706,"cisaShortDescription":1745,"cisaRequiredAction":1478},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":1747,"description":1748,"publishedDate":1749,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1750,"cisaVulnName":1705,"cisaDateAdded":1706,"cisaShortDescription":1751,"cisaRequiredAction":1478},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.68396,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":1753,"description":1754,"publishedDate":1755,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1756,"cisaVulnName":1757,"cisaDateAdded":1706,"cisaShortDescription":1758,"cisaRequiredAction":1267},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.32449,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":1760,"description":1761,"publishedDate":1755,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1762,"cisaVulnName":1763,"cisaDateAdded":1706,"cisaShortDescription":1764,"cisaRequiredAction":1267},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.",0.86979,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":1766,"description":1767,"publishedDate":1768,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1769,"cisaVulnName":1705,"cisaDateAdded":1706,"cisaShortDescription":1770,"cisaRequiredAction":1478},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.","2012-08-15",0.70384,"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":1772,"description":1773,"publishedDate":1774,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1775,"cisaVulnName":1614,"cisaDateAdded":1776,"cisaShortDescription":1777,"cisaRequiredAction":1478},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.81971,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":1779,"description":1780,"publishedDate":136,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1781,"cisaVulnName":1782,"cisaDateAdded":1783,"cisaShortDescription":1784,"cisaRequiredAction":1267},"CVE-2022-22620","A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.16342,"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","2022-02-11","Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1786,"description":1787,"publishedDate":1788,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1789,"cisaVulnName":1790,"cisaDateAdded":1791,"cisaShortDescription":1792,"cisaRequiredAction":1267},"CVE-2015-1130","The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.","2015-04-10",0.09887,"Apple OS X Authentication Bypass Vulnerability","2022-02-10","The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.",{"cveId":1794,"description":1795,"publishedDate":1796,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1797,"cisaVulnName":1798,"cisaDateAdded":1791,"cisaShortDescription":1799,"cisaRequiredAction":1267},"CVE-2014-4404","Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.","2014-09-18",0.49049,"Apple OS X Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.",{"cveId":1801,"description":1802,"publishedDate":1803,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1605,"cisaVulnName":1804,"cisaDateAdded":1805,"cisaShortDescription":1806,"cisaRequiredAction":1267},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25","GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":1808,"description":1809,"publishedDate":136,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1810,"cisaVulnName":1811,"cisaDateAdded":1805,"cisaShortDescription":1812,"cisaRequiredAction":1267},"CVE-2022-22587","A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..",0.11638,"Apple Memory Corruption Vulnerability","Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.",{"cveId":1814,"description":1815,"publishedDate":1816,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1186,"cisaVulnName":1804,"cisaDateAdded":1805,"cisaShortDescription":1817,"cisaRequiredAction":1267},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":1819,"description":1820,"publishedDate":1821,"cvssScore":85,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1186,"cisaVulnName":1822,"cisaDateAdded":1821,"cisaShortDescription":1823,"cisaRequiredAction":1824},"CVE-2021-44228","Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.","2021-12-10","Apache Log4j2 Remote Code Execution Vulnerability","Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.","For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.",{"cveId":1826,"description":1827,"publishedDate":479,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1828,"cisaVulnName":1829,"cisaDateAdded":1830,"cisaShortDescription":1831,"cisaRequiredAction":1267},"CVE-2021-1871","A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.0712,"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","2021-11-03","Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1833,"description":1827,"publishedDate":479,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1834,"cisaVulnName":1829,"cisaDateAdded":1830,"cisaShortDescription":1831,"cisaRequiredAction":1267},"CVE-2021-1870",0.07921,{"cveId":1836,"description":1837,"publishedDate":1838,"cvssScore":941,"cvssVersion":942,"severity":924,"isKev":4,"epssScore":1839,"cisaVulnName":1614,"cisaDateAdded":1830,"cisaShortDescription":1840,"cisaRequiredAction":1478},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.89618,"Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":1842,"description":1843,"publishedDate":629,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1844,"cisaVulnName":1845,"cisaDateAdded":1830,"cisaShortDescription":1846,"cisaRequiredAction":1267},"CVE-2020-9818","An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.",0.02286,"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.",{"cveId":1848,"description":1849,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1850,"cisaVulnName":1165,"cisaDateAdded":1830,"cisaShortDescription":1851,"cisaRequiredAction":1267},"CVE-2021-30665","A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.03692,"Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1853,"description":1854,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1855,"cisaVulnName":1856,"cisaDateAdded":1830,"cisaShortDescription":1857,"cisaRequiredAction":1267},"CVE-2021-30666","A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.03031,"Apple iOS WebKit Buffer Overflow Vulnerability","Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1859,"description":1860,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1861,"cisaVulnName":1862,"cisaDateAdded":1830,"cisaShortDescription":1863,"cisaRequiredAction":1267},"CVE-2021-30761","A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.10591,"Apple iOS WebKit Memory Corruption Vulnerability","Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1865,"description":1866,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1867,"cisaVulnName":1868,"cisaDateAdded":1830,"cisaShortDescription":1869,"cisaRequiredAction":1267},"CVE-2021-30762","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.10986,"Apple iOS WebKit Use-After-Free Vulnerability","Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1871,"description":1872,"publishedDate":558,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1873,"cisaVulnName":1874,"cisaDateAdded":1830,"cisaShortDescription":1784,"cisaRequiredAction":1267},"CVE-2021-30858","A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.13486,"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability",{"cveId":1876,"description":1877,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1878,"cisaVulnName":1879,"cisaDateAdded":1830,"cisaShortDescription":1880,"cisaRequiredAction":1267},"CVE-2021-30661","A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..",0.04528,"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1882,"description":1883,"publishedDate":1884,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1885,"cisaVulnName":1181,"cisaDateAdded":1830,"cisaShortDescription":1886,"cisaRequiredAction":1267},"CVE-2021-28550","Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2021-09-02",0.52005,"Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.",{"cveId":1888,"description":1889,"publishedDate":1890,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1891,"cisaVulnName":1892,"cisaDateAdded":1830,"cisaShortDescription":1893,"cisaRequiredAction":1267},"CVE-2021-21017","Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","2021-02-11",0.8621,"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.",{"cveId":1895,"description":1896,"publishedDate":339,"cvssScore":991,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1897,"cisaVulnName":1898,"cisaDateAdded":1830,"cisaShortDescription":1899,"cisaRequiredAction":1267},"CVE-2021-30663","An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.",0.0369,"Apple Multiple Products WebKit Integer Overflow Vulnerability","Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1901,"description":1902,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1903,"cisaVulnName":1904,"cisaDateAdded":1830,"cisaShortDescription":1905,"cisaRequiredAction":1267},"CVE-2021-30869","A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.",0.0415,"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.",{"cveId":1907,"description":1908,"publishedDate":1909,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1910,"cisaVulnName":1056,"cisaDateAdded":1830,"cisaShortDescription":1911,"cisaRequiredAction":1267},"CVE-2020-27930","A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.","2020-12-08",0.22178,"Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.",{"cveId":1913,"description":1914,"publishedDate":1909,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1915,"cisaVulnName":1594,"cisaDateAdded":1830,"cisaShortDescription":1916,"cisaRequiredAction":1267},"CVE-2020-27932","A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.",0.10337,"Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.",{"cveId":1918,"description":1919,"publishedDate":339,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1920,"cisaVulnName":1921,"cisaDateAdded":1830,"cisaShortDescription":1922,"cisaRequiredAction":1267},"CVE-2021-30713","A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..",0.0658,"Apple macOS Unspecified Vulnerability","Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.",{"cveId":1924,"description":1925,"publishedDate":1926,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1927,"cisaVulnName":1928,"cisaDateAdded":1830,"cisaShortDescription":1929,"cisaRequiredAction":1267},"CVE-2020-3950","VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.","2020-03-17",0.07254,"VMware Multiple Products Privilege Escalation Vulnerability","VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.",{"cveId":1931,"description":1932,"publishedDate":1933,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1934,"cisaVulnName":1056,"cisaDateAdded":1830,"cisaShortDescription":1935,"cisaRequiredAction":1267},"CVE-2021-30807","A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.","2021-10-19",0.28839,"Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.",{"cveId":1937,"description":1938,"publishedDate":1939,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1940,"cisaVulnName":1089,"cisaDateAdded":1830,"cisaShortDescription":1941,"cisaRequiredAction":1267},"CVE-2020-9859","A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.","2020-06-05",0.00829,"Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.",{"cveId":1943,"description":1944,"publishedDate":558,"cvssScore":967,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1945,"cisaVulnName":1277,"cisaDateAdded":1830,"cisaShortDescription":1946,"cisaRequiredAction":1267},"CVE-2021-30860","An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",0.75994,"Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.",{"cveId":1948,"description":1949,"publishedDate":183,"cvssScore":910,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1950,"cisaVulnName":1951,"cisaDateAdded":1830,"cisaShortDescription":1952,"cisaRequiredAction":1267},"CVE-2019-6223","A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.",0.02629,"Apple iOS and macOS Group Facetime Vulnerability","Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.",{"cveId":1954,"description":1955,"publishedDate":479,"cvssScore":182,"cvssVersion":942,"severity":912,"isKev":4,"epssScore":1956,"cisaVulnName":1957,"cisaDateAdded":1830,"cisaShortDescription":1958,"cisaRequiredAction":1267},"CVE-2021-1782","A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..",0.02222,"Apple Multiple Products Race Condition Vulnerability","Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.",{"cveId":1960,"description":1961,"publishedDate":479,"cvssScore":1070,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1962,"cisaVulnName":1963,"cisaDateAdded":1830,"cisaShortDescription":1964,"cisaRequiredAction":1267},"CVE-2021-1879","This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..",0.07082,"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":1966,"description":1967,"publishedDate":339,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1968,"cisaVulnName":1921,"cisaDateAdded":1830,"cisaShortDescription":1969,"cisaRequiredAction":1267},"CVE-2021-30657","A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..",0.68531,"Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.",{"cveId":1971,"description":1972,"publishedDate":1909,"cvssScore":1222,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1973,"cisaVulnName":1974,"cisaDateAdded":1830,"cisaShortDescription":1975,"cisaRequiredAction":1267},"CVE-2020-27950","A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.",0.1652,"Apple Multiple Products Memory Initialization Vulnerability","Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.",{"cveId":1977,"description":1978,"publishedDate":629,"cvssScore":1979,"cvssVersion":942,"severity":1040,"isKev":4,"epssScore":1980,"cisaVulnName":1981,"cisaDateAdded":1830,"cisaShortDescription":1982,"cisaRequiredAction":1267},"CVE-2020-9819","A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.",4.3,0.02178,"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.",[1984,1985,1986,1987,1988,1989,1990,1991,1992,1993],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":27,"kev_count":28,"last_cve_update":13},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":13},{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":40,"last_cve_update":13},{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":46,"last_cve_update":13},{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":52,"last_cve_update":13},{"id":54,"product_name":55,"version_count":56,"cve_count":57,"kev_count":58,"last_cve_update":59},{"id":61,"product_name":62,"version_count":63,"cve_count":64,"kev_count":65,"last_cve_update":66},{"id":68,"product_name":69,"version_count":70,"cve_count":71,"kev_count":72,"last_cve_update":73},{"id":75,"product_name":76,"version_count":77,"cve_count":78,"kev_count":65,"last_cve_update":79},{"title":1995,"metaDescription":1996,"keywords":1997,"structuredData":1998},"Apple - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Apple covering 239 products with 12782 tracked vulnerabilities including 22 critical and 115 high-severity issues and 152 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Apple vulnerabilities, Apple security, Apple CVE, Apple threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Apple KEV, Apple exploited vulnerabilities",{"@context":1999,"@type":2000,"name":2001,"description":1996,"url":2002},"https:\u002F\u002Fschema.org","Organization","Apple","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapple",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":2004,"apiVersion":2005},"2026-10-28T14:24:46.391Z","3.0"]