Overview 37 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
37matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
2public PoC5.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
37
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
37
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
3
8.1%
Forecast only
0
0.0%
No public exploit
34
91.9%
split by
peak 10 / year
20061
Not applicable1
Medium1
not blocked1
No public exploit1
20070
20081
Not applicable1
Medium1
not blocked1
No public exploit1
20090
20100
20110
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20130
20144
Not applicable4
Medium4
not blocked4
No public exploit4
201510
Not applicable10
Medium10
not blocked10
No public exploit10
20161
Not applicable1
Medium1
not blocked1
No public exploit1
20170
20181
Not applicable1
Medium1
not blocked1
No public exploit1
20190
20201
Not applicable1
Medium1
not blocked1
Proof of concept only1
20211
Not applicable1
Medium1
not blocked1
No public exploit1
20221
Not applicable1
Medium1
not blocked1
Proof of concept only1
20235
Not applicable5
Medium5
not blocked5
Proof of concept only1
No public exploit4
20242
Not applicable2
Medium2
not blocked2
No public exploit2
20254
Not applicable4
Medium4
not blocked4
No public exploit4
20264
Not applicable4
Medium4
not blocked4
No public exploit4
20062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-86875 | Medium | 2026-10-20 | Not applicable | No public exploit | An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination. |
| CVE-2026-65393 | Medium | 2026-09-14 | Not applicable | No public exploit | A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data. |
| CVE-2026-28890 | Medium | 2026-03-25 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination. |
| CVE-2026-28889 | Medium | 2026-03-25 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root. |
| CVE-2025-43504 | Medium | 2025-11-04 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service. |
| CVE-2025-43370 | Medium | 2025-09-15 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in Xcode 26. Processing an overly large path value may crash a process. |
| CVE-2025-30441 | Medium | 2025-03-31 | Not applicable | No public exploit | This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files. |
| CVE-2025-24226 | Medium | 2025-03-31 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information. |
| CVE-2024-44191 | Medium | 2024-09-17 | Not applicable | No public exploit | This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth. |
| CVE-2024-23298 | Medium | 2024-03-15 | Not applicable | No public exploit | A logic issue was addressed with improved state management. This issue is fixed in Xcode 15.3. An app may bypass Gatekeeper checks. |
| CVE-2023-40435 | Medium | 2023-09-27 | Not applicable | No public exploit | This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials. |
| CVE-2023-40391 | Medium | 2023-09-27 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory. |
| CVE-2022-32920 | Medium | 2023-09-06 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure of user information. |
| CVE-2023-27945 | Medium | 2023-05-08 | Not applicable | No public exploit | This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs. |
| CVE-2022-4671 | Medium | 2023-01-30 | Not applicable | Proof of concept only | The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. |
| CVE-2022-39253 | Medium | 2022-10-19 | Not applicable | Proof of concept only | Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and target of the clone are on the same volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing at sensitive information on the victim's machine. This can be done either by having the victim clone a malicious repository on the same machine, or having them clone a malicious repository embedded as a bare repository via a submodule from any source, provided they clone with the `--recurse-submodules` option. Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning untrusted repositories using the `--local` optimization when on a shared machine, either by passing the `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively, avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global protocol.file.allow user`. |
| CVE-2021-1800 | Medium | 2021-04-02 | Not applicable | No public exploit | A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode. |
| CVE-2019-20372 | Medium | 2020-01-09 | Not applicable | Proof of concept only | NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer. |
| CVE-2018-16845 | Medium | 2018-11-07 | Not applicable | No public exploit | nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module. |
| CVE-2016-0747 | Medium | 2016-02-15 | Not applicable | No public exploit | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) via vectors related to arbitrary name resolution. |
| CVE-2015-7057 | Medium | 2015-12-11 | Not applicable | No public exploit | otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049. |
| CVE-2015-7056 | Medium | 2015-12-11 | Not applicable | No public exploit | IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern. |
| CVE-2015-7049 | Medium | 2015-12-11 | Not applicable | No public exploit | otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057. |
| CVE-2015-5909 | Medium | 2015-09-18 | Not applicable | No public exploit | IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery. |
| CVE-2015-3187 | Medium | 2015-08-12 | Not applicable | No public exploit | The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path. |
| CVE-2015-3184 | Medium | 2015-08-12 | Not applicable | No public exploit | mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name. |
| CVE-2015-3185 | Medium | 2015-07-20 | Not applicable | No public exploit | The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather than an authentication setting, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging the presence of a module that relies on the 2.2 API behavior. |
| CVE-2015-3027 | Medium | 2015-04-10 | Not applicable | No public exploit | Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program. |
| CVE-2015-0251 | Medium | 2015-04-08 | Not applicable | No public exploit | The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences. |
| CVE-2015-0248 | Medium | 2015-04-08 | Not applicable | No public exploit | The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers. |
| CVE-2014-8108 | Medium | 2014-12-18 | Not applicable | No public exploit | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request for a URI that triggers a lookup for a virtual transaction name that does not exist. |
| CVE-2014-3580 | Medium | 2014-12-18 | Not applicable | No public exploit | The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist. |
| CVE-2014-3528 | Medium | 2014-08-19 | Not applicable | No public exploit | Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm. |
| CVE-2014-3522 | Medium | 2014-08-19 | Not applicable | No public exploit | The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. |
| CVE-2012-3698 | Medium | 2012-07-26 | Not applicable | No public exploit | Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool. |
| CVE-2008-2318 | Medium | 2008-07-14 | Not applicable | No public exploit | The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs. |
| CVE-2006-1466 | Medium | 2006-05-24 | Not applicable | No public exploit | Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service. |