Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6Apple Multiple Products WebKit Sandbox Escape VulnerabilityKEVEPSS 16.5%May 22, 2023
- High8.8Apple Multiple Products WebKit Use-After-Free VulnerabilityKEVEPSS 12.2%May 22, 2023
- Medium6.5Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityKEVEPSS 14.3%May 22, 2023
- High8.6Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write VulnerabilityKEVEPSS 23.2%Apr 10, 2023
- High8.8Apple Multiple Products WebKit Use-After-Free VulnerabilityKEVEPSS 27.1%Apr 10, 2023
- High8.8Apple Multiple Products WebKit Type Confusion VulnerabilityKEVEPSS 9.5%Feb 14, 2023
- Medium5.9A use after free vulnerability exists in curl <7.87.0.EPSS 2.5%Feb 9, 2023
- High8.8Apple iOS Type Confusion VulnerabilityKEVEPSS 8.5%Dec 14, 2022
- Medium6.5curl can be told to parse a file for credentials.EPSS 1.9%Dec 5, 2022
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…EPSS 4.7%Dec 5, 2022
- High8.1curl before 7.86.0 has a double free.EPSS 2.9%Oct 29, 2022
- High7.5In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP.EPSS 1.8%Oct 29, 2022
- Low3.7When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…EPSS 2.4%Sep 23, 2022
- High7.8Apple iOS, iPadOS, and macOS Remote Code Execution VulnerabilityKEVEPSS 5.6%Sep 14, 2022
- High7.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 3.3%Aug 18, 2022
- High8.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 9.9%Aug 18, 2022
- Medium5.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly.EPSS 7.5%Jul 7, 2022
- Critical9.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name t…EPSS 7.7%Jul 7, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.EPSS 27.9%Jul 7, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityKEVEPSS 11.5%May 23, 2022
- High7.8Apple macOS Out-of-Bounds Write VulnerabilityKEVEPSS 12.5%Apr 4, 2022
- Medium5.5Apple macOS Out-of-Bounds Read VulnerabilityKEVEPSS 1.1%Apr 4, 2022
- High8.8Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityKEVEPSS 16.3%Feb 11, 2022
- Critical9.8Apple Memory Corruption VulnerabilityKEVEPSS 11.6%Jan 28, 2022
- High7.8Apple Multiple Products Memory Corruption VulnerabilityKEVEPSS 28.8%Oct 19, 2021