Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
AppleMac Os X10.9.3

30 matches found

CVE
CVE•added 2014/09/19 10:55 a.m.•104 views

CVE-2014-4416

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•63 views

CVE-2014-4394

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4395, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•61 views

CVE-2014-4398

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•60 views

CVE-2014-1361

Secure Transport in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 does not ensure that a DTLS message is accepted only for a DTLS connection, which allows remote attackers to obtain potentially sensitive information from uninitialized process memory by providing a DTLS...

5CVSS5.3AI score0.00783EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•57 views

CVE-2014-1355

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service (NULL pointer dereference and reboot) via crafted API arguments.

4.9CVSS5.5AI score0.00061EPSS
CVE
CVE•added 2014/11/18 11:59 a.m.•54 views

CVE-2014-4460

CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate attackers to obtain sensitive information by reading cache files.

2.1CVSS2.8AI score0.00072EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•52 views

CVE-2014-4396

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/11/18 11:59 a.m.•52 views

CVE-2014-4453

Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors.

5CVSS5.5AI score0.00782EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•51 views

CVE-2014-1357

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.

10CVSS7.3AI score0.03252EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•51 views

CVE-2014-4395

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•50 views

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.

10CVSS7.2AI score0.03185EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•50 views

CVE-2014-4399

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•50 views

CVE-2014-4400

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•50 views

CVE-2014-4401

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•49 views

CVE-2014-1359

Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.

10CVSS6.9AI score0.01536EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•48 views

CVE-2014-4393

Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GLSL shader.

10CVSS7.9AI score0.06092EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•48 views

CVE-2014-4397

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CV...

6.9CVSS7.2AI score0.00257EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•48 views

CVE-2014-4403

The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism by leveraging predictability of the location of the CPU Global Descriptor Table.

2.1CVSS6.4AI score0.00071EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•46 views

CVE-2014-1317

iBooks Commerce in Apple OS X before 10.9.4 places Apple ID credentials in the iBooks log, which allows local users to obtain sensitive information by reading this file.

2.1CVSS5AI score0.00069EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•45 views

CVE-2014-1356

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.

10CVSS7.3AI score0.03252EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•45 views

CVE-2014-4402

An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

9.3CVSS7.1AI score0.01017EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•44 views

CVE-2014-4350

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIDI file.

6.8CVSS7.7AI score0.10417EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•44 views

CVE-2014-4390

Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

9.3CVSS7.2AI score0.00744EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•43 views

CVE-2014-4376

IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted API arguments.

10CVSS7.5AI score0.00962EPSS
CVE
CVE•added 2014/09/19 10:55 a.m.•41 views

CVE-2014-1391

QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with RLE encoding.

6.8CVSS7.7AI score0.05493EPSS
CVE
CVE•added 2014/11/18 11:59 a.m.•41 views

CVE-2014-4458

The "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous cookie data in system-model requests, which might allow remote attackers to obtain sensitive information via unspecified vectors.

5CVSS5.5AI score0.0056EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•39 views

CVE-2014-1381

Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted call.

10CVSS7.4AI score0.01329EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•36 views

CVE-2014-1380

The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input.

2.6CVSS6.2AI score0.00067EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•34 views

CVE-2014-1378

IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object.

2.1CVSS5.5AI score0.00062EPSS
CVE
CVE•added 2014/07/01 10:17 a.m.•32 views

CVE-2014-1375

Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object.

2.1CVSS5.5AI score0.00068EPSS