Skip to content
OpenAdvisories

Archive

May 2016

Vulnerabilities first published in this month (UTC), newest first.

← April 2016 2016 / May June 2016 →
  1. 18
  2. 236
  3. 34
  4. 4 
  5. 525
  6. 67
  7. 718
  8. 8 
  9. 941
  10. 105
  11. 11156
  12. 125
  13. 1325
  14. 1425
  15. 153
  16. 1627
  17. 1713
  18. 184
  19. 191
  20. 2084
  21. 212
  22. 2240
  23. 2328
  24. 241
  25. 2513
  26. 2614
  27. 27 
  28. 283
  29. 292
  30. 307
  31. 3115
All Critical High Medium Low Exploited only Public exploit

612 results · Feed

  • Unscored —
    CVE-2016-1812

    Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a p…

  • Unscored —
    CVE-2016-1804

    The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged conte…

  • Unscored —
    CVE-2016-1822

    IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cau…

  • Unscored —
    CVE-2016-1799

    Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial…

  • Unscored —
    CVE-2016-1841

    libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows re…

    libxslt libxslt Debian Ubuntu
  • Unscored —
    CVE-2016-1795

    AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged co…

  • Unscored —
    CVE-2016-1796

    Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout inform…

  • Unscored —
    CVE-2016-1844

    The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify …

  • Unscored —
    CVE-2016-1857

    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execu…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  • Unscored —
    CVE-2016-1848 Public exploit

    QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-1828 Public exploit

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers…

  • Unscored —
    CVE-2016-1859

    The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote at…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  • Unscored —
    CVE-2016-1813 Public exploit

    The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.…

  • Unscored —
    CVE-2016-1810

    The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged …

  • Unscored —
    CVE-2016-1827 Public exploit

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers…

  • Unscored —
    CVE-2016-1832

    libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to …

  • Unscored —
    CVE-2016-1847

    OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows rem…

  • Unscored —
    CVE-2016-1742

    Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges …

  • Unscored —
    CVE-2016-1793 Public exploit

    AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privilege…

  • Unscored —
    CVE-2016-1829

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers…

  • Unscored —
    CVE-2016-1842

    MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, wh…

  • Unscored —
    CVE-2016-1790

    Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel me…

  • Unscored —
    CVE-2016-1830

    The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers…

  • Unscored —
    CVE-2016-1846 Public exploit

    The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows …

  • Unscored —
    CVE-2016-1811

    ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attac…

  • Unscored —
    CVE-2016-1850

    SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2016-1840

    Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before …

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1836

    Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1831

    The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged…

  • Unscored —
    CVE-2016-1802

    CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mis…

  • Unscored —
    CVE-2016-1852

    Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows phys…

  • Unscored —
    CVE-2016-1819 Public exploit

    Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before …

  • Unscored —
    CVE-2016-1853

    Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support.

  • Unscored —
    CVE-2016-1858

    WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attribut…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  • Unscored —
    CVE-2016-1820

    Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privilege…

  • Unscored —
    CVE-2016-1808

    The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 a…

  • Unscored —
    CVE-2016-1849

    The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other produc…

  • Unscored —
    CVE-2016-1807 Public exploit

    Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watc…

  • Unscored —
    CVE-2016-1833

    The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo…

    libxml2 libxml2 Debian Ubuntu
  • Unscored —
    CVE-2016-1839 Public exploit

    The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS bef…

    libxml2 libxml2 Debian Ubuntu