Where
AND
AND
-Infinity
0

Trending

Last week
Last month
Last year

redhat/zlibBuffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition

Risk 57
Severity
8.2
Buffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 72
Source: Apple
First published (updated )
CVE-2018-25032

redhat/httpdmod_lua Use of uninitialized value of in r:parsebody

Risk 45
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.

1 / 6
First published (updated )
CVE-2022-22719

redhat/jbcs-httpd24-apr-utilUse After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition

Risk 78
Severity
8.1
Use After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue.

1 / 43
First published (updated )
CVE-2022-23308

Apple macOS MontereyWebRTC Heap Buffer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 62
Source: Apple
First published (updated )
CVE-2022-2294

Apple macOS Big SurApple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Risk 65
Severity
7.5
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Core Telephony. A deserialization issue was addressed through improved validation.

1 / 7
First published (updated )
CVE-2021-31010

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Type Confusion Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.

1 / 3
First published (updated )
CVE-2021-30869

Apple macOS Big SurApple Multiple Products Integer Overflow Vulnerability

Risk 85
Severity
7.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreGraphics. An integer overflow was addressed with improved input validation.

1 / 7
First published (updated )
CVE-2021-30860

Apple macOS Big SurApple macOS Unspecified Vulnerability

Risk 87
Severity
7.8
Exploited
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

1 / 3
First published (updated )
CVE-2021-30713

Apple tvOSApple Multiple Products Race Condition Vulnerability

Risk 79
Severity
7
Exploited
Race Condition
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..

1 / 3
First published (updated )
CVE-2021-1782

Apple Multiple ProductsApple Multiple Products Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A type confusion issue was addressed with improved state handling.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1789

redhat/jbcs-httpd24-httpdPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Risk 57
Severity
8.2
Null Pointer Dereference, SSRF, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2021-44224

redhat/jbcs-httpd24Buffer Overflow, Input Validation

Risk 46
Severity
7.5
Buffer Overflow, Input Validation
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

1 / 5

Remedy

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2020-8285

Apple macOS Big SurUse After Free in vim/vim

Risk 71
Severity
7.8
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 38
Source: Apple
First published (updated )
CVE-2021-4187

Apple macOS Big SurUse After Free in vim/vim

Risk 71
Severity
7.8
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 38
Source: Apple
First published (updated )
CVE-2021-4173

Apple macOS Big Surppp decapsulator can be convinced to allocate a large amount of memory

Risk 44
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

tcpdump. This issue was addressed with improved checks.

1 / 2
First published (updated )
CVE-2020-8037

debian/openldapOpenLDAP. This issue was addressed with improved checks.

Risk 45
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

1 / 3
First published (updated )
CVE-2020-25709

debian/webkit2gtkUse After Free

Risk 78
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A use after free issue was addressed with improved memory management.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2021-1788

Apple macOS Big SurUse After Free, Input Validation, Buffer Overflow

Risk 82
Severity
7.8
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 17
Source: Apple
First published (updated )
CVE-2022-26763

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

1 / 66
First published (updated )
CVE-2022-26761

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.

1 / 25
Source: MITRE
First published (updated )
CVE-2022-26769

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 24
Source: Apple
First published (updated )
CVE-2022-26770

Apple tvOSInput Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Integer Overflow, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A memory corruption issue was addressed with improved input validation.

1 / 63
Source: Apple
First published (updated )
CVE-2022-32837

Apple macOS Big SurInput Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow

Risk 70
Severity
7.8
Input Validation, Use After Free, Integer Overflow, Race Condition, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.

1 / 43
First published (updated )
CVE-2022-32794

Apple macOS Big SurInput Validation, Integer Overflow, Buffer Overflow

Risk 45
Severity
7.5
Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper.

1 / 15
Source: MITRE
First published (updated )
CVE-2022-32910

Apple macOS Big SurUse After Free in vim/vim

Risk 71
Severity
7.8
Use After Free, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 39
Source: Apple
First published (updated )
CVE-2021-4192

Apple macOS Big SurOut-of-bounds Read in vim/vim

Risk 53
Severity
7.1
Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 39
Source: Apple
First published (updated )
CVE-2021-4166

Apple macOS Big SurHeap-based Buffer Overflow in vim/vim

Risk 71
Severity
7.8
Buffer Overflow, Input Validation, Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

apache. Multiple issues were addressed by updating apache to version 2.4.53.

1 / 38
Source: Apple
First published (updated )
CVE-2021-4136

redhat/jbcs-httpd24curl. This issue was addressed with improved checks.

Risk 46
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

1 / 5
First published (updated )
CVE-2020-8286

Apple macOS Big SurIntel Graphics Driver. A type confusion issue was addressed with improved state handling.

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

1 / 2
First published (updated )
CVE-2022-46706

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 52
Source: Apple
First published (updated )
CVE-2022-26715

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203