| CVE-2013-0340 | Medium 6.8 | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of s… Assigned by redhat | Jan 21, 2014 |
| CVE-2019-19906 | High 7.5 | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. Assigned by mitre | Dec 19, 2019 |
| CVE-2020-3837 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Feb 27, 2020 |
| CVE-2020-13434 | Medium 5.5 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Assigned by mitre | May 24, 2020 |
| CVE-2020-13631 | Medium 5.5 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre | May 27, 2020 |
| CVE-2020-13630 | High 7.0 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre | May 27, 2020 |
| CVE-2020-9859 Known exploited | High 7.8 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 5, 2020 |
| CVE-2020-9819 Known exploited | Medium 4.3 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 9, 2020 |
| CVE-2020-9818 Known exploited | High 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Jun 9, 2020 |
| CVE-2020-15358 | Medium 5.5 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre | Jun 27, 2020 |
| CVE-2020-9907 Known exploited | High 7.8 | A memory corruption issue was addressed by removing the vulnerable code. Assigned by apple | Oct 16, 2020 |
| CVE-2020-9934 Known exploited | Medium 5.5 | An issue existed in the handling of environment variables. Assigned by apple | Oct 16, 2020 |
| CVE-2020-27932 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27950 Known exploited | Medium 5.5 | A memory initialization issue was addressed. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27930 Known exploited | High 7.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Dec 8, 2020 |
| CVE-2021-1782 Known exploited | High 7.0 | A race condition was addressed with improved locking. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1789 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1870 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1871 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1879 Known exploited | Medium 6.1 | This issue was addressed by improved management of object lifetimes. Assigned by apple | Apr 2, 2021 |
| CVE-2021-30858 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30860 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30869 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30883 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30900 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30952 Known exploited | High 8.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30983 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30663 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30807 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Oct 19, 2021 |
| CVE-2022-23308 | High 7.5 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre | Feb 26, 2022 |
| CVE-2022-22587 Known exploited | Critical 9.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Mar 18, 2022 |
| CVE-2022-22620 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Mar 18, 2022 |
| CVE-2022-22675 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | May 26, 2022 |
| CVE-2022-2294 Known exploited | High 8.8 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jul 28, 2022 |
| CVE-2022-37434 | Critical 9.8 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre | Aug 5, 2022 |
| CVE-2022-32894 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2022 |
| CVE-2022-32893 Known exploited | High 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2022 |
| CVE-2022-32917 Known exploited | High 7.8 | The issue was addressed with improved bounds checks. Assigned by apple | Sep 20, 2022 |
| CVE-2022-42827 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Nov 1, 2022 |
| CVE-2022-40303 | High 7.5 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 22, 2022 |
| CVE-2022-40304 | High 7.8 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 23, 2022 |
| CVE-2022-42856 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Dec 15, 2022 |
| CVE-2023-23529 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Feb 27, 2023 |
| CVE-2023-28206 Known exploited | High 8.6 | An out-of-bounds write issue was addressed with improved input validation. Assigned by apple | Apr 10, 2023 |
| CVE-2023-28205 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Apr 10, 2023 |
| CVE-2023-32439 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32435 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Jun 23, 2023 |
