Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-13498An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types.
- CVE-2019-8796A logic issue was addressed with improved validation.
- CVE-2019-8664An input validation issue was addressed with improved input validation.
- CVE-2019-8531A validation issue existed in Trust Anchor Management.
- CVE-2020-9982This issue was addressed with improved checks to prevent unauthorized actions.
- CVE-2020-9973An out-of-bounds read was addressed with improved bounds checking.
- CVE-2020-9941This issue was addressed with improved checks.
- CVE-2020-9932A memory corruption issue was addressed with improved validation.
- CVE-2020-9979A trust issue was addressed by removing a legacy API.
- CVE-2020-9857An issue existed in the parsing of URLs.
- CVE-2020-3880An out-of-bounds read was addressed with improved input validation.
- CVE-2020-9782A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2020-9961An out-of-bounds read was addressed with improved input validation.
- CVE-2020-3863A memory corruption issue was addressed with improved memory handling.
- CVE-2020-9866A buffer overflow was addressed with improved bounds checking.
- CVE-2020-9860A custom URL scheme handling issue was addressed with improved input validation.
- CVE-2020-9786This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Updat
- CVE-2020-3851A use after free issue was addressed with improved memory management.
- CVE-2020-3855An access issue was addressed with improved access restrictions.
- CVE-2020-9774An issue existed with Siri Suggestions access to encrypted data.
- CVE-2019-8858A logic issue was addressed with improved state management.
- CVE-2020-3864A logic issue was addressed with improved validation.
- CVE-2019-8855An access issue was addressed with additional sandbox restrictions.
- CVE-2019-8854A user privacy issue was addressed by removing the broadcast MAC address.
- CVE-2020-3852A logic issue was addressed with improved validation.
- CVE-2019-8898An information disclosure issue existed in the handling of the Storage Access API.
- CVE-2019-8901This issue was addressed by verifying host keys when connecting to a previously-known SSH server.
- CVE-2019-8853A validation issue was addressed with improved input sanitization.
- CVE-2019-8846A use after free issue was addressed with improved memory management.
- CVE-2019-8850An out-of-bounds read was addressed with improved input validation.