| CVE-2013-0340 | Medium 6.8 | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of s… Assigned by redhat | Jan 21, 2014 |
| CVE-2014-4404 Known exploited | High 7.8 | Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-m… Assigned by apple | Sep 18, 2014 |
| CVE-2016-5131 | High 8.8 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Assigned by Chrome | Jul 23, 2016 |
| CVE-2016-4657 Known exploited | High 8.8 | WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Assigned by apple | Aug 25, 2016 |
| CVE-2016-4656 Known exploited | High 7.8 | The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Assigned by apple | Aug 25, 2016 |
| CVE-2016-4655 Known exploited | Medium 5.5 | The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app. Assigned by apple | Aug 25, 2016 |
| CVE-2016-4658 | Critical 9.8 | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, wh… Assigned by apple | Sep 25, 2016 |
| CVE-2016-9841 | Critical 9.8 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2016-9840 | High 8.8 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2019-8906 | Medium 4.4 | do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. Assigned by mitre | Feb 18, 2019 |
| CVE-2019-6223 Known exploited | High 7.5 | A logic issue existed in the handling of Group FaceTime calls. Assigned by apple | Mar 5, 2019 |
| CVE-2018-4344 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Apr 3, 2019 |
| CVE-2019-7287 Known exploited | High 7.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Dec 18, 2019 |
| CVE-2019-8506 Known exploited | High 8.8 | A type confusion issue was addressed with improved memory handling. Assigned by apple | Dec 18, 2019 |
| CVE-2019-7286 Known exploited | High 7.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Dec 18, 2019 |
| CVE-2019-8605 Known exploited | High 7.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Dec 18, 2019 |
| CVE-2019-19906 | High 7.5 | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. Assigned by mitre | Dec 19, 2019 |
| CVE-2020-3837 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Feb 27, 2020 |
| CVE-2020-13434 | Medium 5.5 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Assigned by mitre | May 24, 2020 |
| CVE-2020-13631 | Medium 5.5 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre | May 27, 2020 |
| CVE-2020-13630 | High 7.0 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre | May 27, 2020 |
| CVE-2020-9859 Known exploited | High 7.8 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 5, 2020 |
| CVE-2020-9819 Known exploited | Medium 4.3 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 9, 2020 |
| CVE-2020-9818 Known exploited | High 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Jun 9, 2020 |
| CVE-2020-15358 | Medium 5.5 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre | Jun 27, 2020 |
| CVE-2020-9907 Known exploited | High 7.8 | A memory corruption issue was addressed by removing the vulnerable code. Assigned by apple | Oct 16, 2020 |
| CVE-2020-9934 Known exploited | Medium 5.5 | An issue existed in the handling of environment variables. Assigned by apple | Oct 16, 2020 |
| CVE-2020-27932 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27950 Known exploited | Medium 5.5 | A memory initialization issue was addressed. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27930 Known exploited | High 7.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Dec 8, 2020 |
| CVE-2021-1782 Known exploited | High 7.0 | A race condition was addressed with improved locking. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1789 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1870 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1871 Known exploited | Critical 9.8 | A logic issue was addressed with improved restrictions. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1879 Known exploited | Medium 6.1 | This issue was addressed by improved management of object lifetimes. Assigned by apple | Apr 2, 2021 |
| CVE-2021-36690 | High 7.5 | A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. Assigned by mitre | Aug 24, 2021 |
| CVE-2021-30858 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30860 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30869 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30883 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30900 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30952 Known exploited | High 8.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30983 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30761 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30762 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30666 Known exploited | High 8.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30663 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Sep 8, 2021 |
