2021

2020

2019

2018

2017

2016

2015

CVE-2015-1061 (v2: 9.3) 12 Mar 2015
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling.

2014

2013

2012

CVE-2012-0671 (v2: 9.3) 16 May 2012
Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.