Vulnerabilities > Apple > MAC OS X > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-03-12 CVE-2014-8130 Divide By Zero vulnerability in multiple products
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
network
low complexity
libtiff redhat apple CWE-369
6.5
2017-12-27 CVE-2017-7158 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-119
6.5
2017-12-27 CVE-2017-7154 Improper Input Validation vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-20
6.6
2017-12-25 CVE-2017-13869 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5
2017-12-25 CVE-2017-13868 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5
2017-12-25 CVE-2017-13865 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5
2017-12-25 CVE-2017-13860 Unspecified vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
high complexity
apple
5.9
2017-12-25 CVE-2017-13855 Incorrect Type Conversion or Cast vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-704
5.5
2017-11-13 CVE-2017-13842 Information Exposure vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5
2017-11-13 CVE-2017-13841 Information Exposure vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5