| CVE-2013-0340 | Medium 6.8 | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of s… Assigned by redhat | Jan 21, 2014 |
| CVE-2016-5131 | High 8.8 | Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via… Assigned by Chrome | Jul 23, 2016 |
| CVE-2016-4658 | Critical 9.8 | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, wh… Assigned by apple | Sep 25, 2016 |
| CVE-2016-9841 | Critical 9.8 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2016-9840 | High 8.8 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus | May 23, 2017 |
| CVE-2019-8906 | Medium 4.4 | do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. Assigned by mitre | Feb 18, 2019 |
| CVE-2018-4344 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Apr 3, 2019 |
| CVE-2019-8506 Known exploited | High 8.8 | A type confusion issue was addressed with improved memory handling. Assigned by apple | Dec 18, 2019 |
| CVE-2019-8605 Known exploited | High 7.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Dec 18, 2019 |
| CVE-2020-3837 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Feb 27, 2020 |
| CVE-2020-13434 | Medium 5.5 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. Assigned by mitre | May 24, 2020 |
| CVE-2020-13631 | Medium 5.5 | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. Assigned by mitre | May 27, 2020 |
| CVE-2020-13630 | High 7.0 | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. Assigned by mitre | May 27, 2020 |
| CVE-2020-9859 Known exploited | High 7.8 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 5, 2020 |
| CVE-2020-9819 Known exploited | Medium 4.3 | A memory consumption issue was addressed with improved memory handling. Assigned by apple | Jun 9, 2020 |
| CVE-2020-9818 Known exploited | High 8.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Jun 9, 2020 |
| CVE-2020-15358 | Medium 5.5 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre | Jun 27, 2020 |
| CVE-2020-27932 Known exploited | High 7.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27950 Known exploited | Medium 5.5 | A memory initialization issue was addressed. Assigned by apple | Dec 8, 2020 |
| CVE-2020-27930 Known exploited | High 7.8 | A memory corruption issue was addressed with improved input validation. Assigned by apple | Dec 8, 2020 |
| CVE-2021-1782 Known exploited | High 7.0 | A race condition was addressed with improved locking. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1789 Known exploited | High 8.8 | A type confusion issue was addressed with improved state handling. Assigned by apple | Apr 2, 2021 |
| CVE-2021-1879 Known exploited | Medium 6.1 | This issue was addressed by improved management of object lifetimes. Assigned by apple | Apr 2, 2021 |
| CVE-2021-36690 | High 7.5 | A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. Assigned by mitre | Aug 24, 2021 |
| CVE-2021-30860 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30883 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30952 Known exploited | High 8.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-31010 Known exploited | High 7.5 | A deserialization issue was addressed through improved validation. Assigned by apple | Aug 24, 2021 |
| CVE-2021-30665 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30661 Known exploited | High 8.8 | A use after free issue was addressed with improved memory management. Assigned by apple | Sep 8, 2021 |
| CVE-2021-30807 Known exploited | High 7.8 | A memory corruption issue was addressed with improved memory handling. Assigned by apple | Oct 19, 2021 |
| CVE-2022-23308 | High 7.5 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. Assigned by mitre | Feb 26, 2022 |
| CVE-2022-22675 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | May 26, 2022 |
| CVE-2022-2294 Known exploited | High 8.8 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jul 28, 2022 |
| CVE-2022-37434 | Critical 9.8 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. Assigned by mitre | Aug 5, 2022 |
| CVE-2022-32894 Known exploited | High 7.8 | An out-of-bounds write issue was addressed with improved bounds checking. Assigned by apple | Aug 24, 2022 |
| CVE-2022-40303 | High 7.5 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 22, 2022 |
| CVE-2022-40304 | High 7.8 | An issue was discovered in libxml2 before 2.10.3. Assigned by mitre | Nov 23, 2022 |
| CVE-2023-32434 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32409 Known exploited | High 8.6 | The issue was addressed with improved bounds checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32373 Known exploited | High 8.8 | A use-after-free issue was addressed with improved memory management. Assigned by apple | Jun 23, 2023 |
| CVE-2023-28204 Known exploited | Medium 6.5 | An out-of-bounds read was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-37450 Known exploited | High 8.8 | The issue was addressed with improved checks. Assigned by apple | Jul 26, 2023 |
| CVE-2023-38606 Known exploited | Medium 5.5 | This issue was addressed with improved state management. Assigned by apple | Jul 26, 2023 |
| CVE-2022-48503 Known exploited | High 8.8 | The issue was addressed with improved bounds checks. Assigned by apple | Aug 14, 2023 |
| CVE-2023-41061 Known exploited | High 7.8 | A validation issue was addressed with improved logic. Assigned by apple | Sep 7, 2023 |
| CVE-2023-41990 Known exploited | High 7.8 | The issue was addressed with improved handling of caches. Assigned by apple | Sep 11, 2023 |
| CVE-2023-41074 | High 8.8 | The issue was addressed with improved checks. | Sep 27, 2023 |
| CVE-2022-48618 Known exploited | High 7.0 | The issue was addressed with improved checks. Assigned by apple | Jan 9, 2024 |
| CVE-2024-23225 Known exploited | High 7.8 | A memory corruption issue was addressed with improved validation. Assigned by apple | Mar 5, 2024 |
