Filter by Date
- 2019
  - 1 01-2019
- 2016
  - 1 04-2016
- 2015
  - 1 06-2015
  - 1 05-2015
  - 1 04-2015
- 2013
  - 1 05-2013
  - 2 01-2013
- 2011
  - 1 01-2011
- 2010
  - 1 10-2010
  - 1 08-2010
  - 1 07-2010
- 2008
  - 1 09-2008
  - 1 08-2008
- 2006
  - 1 04-2006
  - 1 03-2006
  - 1 02-2006
  - 1 01-2006
Filter by Risk
- 8
- 9
- 1
- 0
- 0
Filter by Vendor
- All
- 18 Apple

Zero Days Discovered: 968

Zero Days discovered this year: 63

Vendor Fixes Available (698)

Vendor Fix Pending (270)

Filter by Date:

All

2019

January (1)

2016

April (1)

2015

June (1)

May (1)

April (1)

2013

May (1)

January (2)

2011

January (1)

2010

October (1)

August (1)

July (1)

2008

September (1)

August (1)

2006

April (1)

March (1)

February (1)

January (1)

Filter by Risk Level:

All

Filter by Vendor:

All

Apple (18)

Refine Search

Zero-Day Research | Fixes Available

Fortinet's team of dedicated expert researchers and analysts examine many third party products and software applications daily, looking for weaknesses and exploitable vulnerabilities. When a vulnerability is found the Fortiguard Lab teams work together to create protective measures that can be delivered to our customers and notify the software/product vendor of the vulnerability. Learn More

Vulnerability Severity Level

FortiGuard Event Name's Severity Level is mainly based on the ratings set forth by the Common Vulnerability Scoring System (CVSS). The CVSS is a vendor-neutral, industry standard that provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.

FortiGuard Security Level	CVSS v2 Rating
Critical	9 - 10
High	7 - 8.9
Medium	4 - 6.9
Low	0.1 - 3.9
Info	0

Common Vulnerability Scoring System Version 2.0

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental.

Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time.

The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities.

Exceptions

If there is no CVSS rating posted, then the CVSS rating is calculated. A Base Score tool form is available at: http://nvd.nist.gov/cvss.cfm
If the vulnerable software/system is not common in a business network environment and the FortiGuard Severity Level would normally be Critical, then the FortiGuard Severity Level may be reduced to High.
If the vulnerability is a Denial of Service (DoS) attack and only affecting the availability of a remote service or host, then the FortiGuard Severity Level is adjusted to at most Medium for Client-side DoS and High for Server-side DoS
For any "remote code execution" type of vulnerability, the FortiGuard Severity Level is set to either High or Critical.

Exceptions

For identifying or detecting network traffic, the FortiGuard Severity Level is set to Informational.
For a vulnerability/exploit that is highly active, the FortiGuard Severity Level is temporarily set to either High or Critical. Later, the level may be reduced back to its normal level; generally this is based on the temporal parameter of a vulnerability.
For zero-day vulnerabilities where the rating has not yet been fully evaluated, the FortiGuard Severity Level is generally set at either Medium or High.

For more information on CVSS, visit A Complete Guide to the Common Vulnerability Scoring System Version 2.0.

Please view our Responsible Disclosure Policies

FG-VD-10-032 (Apple)

Fortinet Discovers Vulnerability in Apple QuickTime Player

Discovered: Aug 04, 2010 Released: Oct 28, 2010 Risk

CVE-2010-3790

FG-VD-10-025 (Apple)

Fortinet Discovers Apple QuickTime Picture Viewer Vulnerability

Discovered: Jul 16, 2010 Released: Sep 15, 2010 Risk

CVE-2010-1819

FG-VD-16-025 (Apple)

Fortinet Discovers Memory Corruption Vulnerability in Apple QuickTime

Discovered: Apr 20, 2016 Released: Jul 15, 2016 Risk

FG-VD-10-039 (Apple)

Fortinet Discovers Vulnerability in Apple QuickTime Player

Discovered: Oct 11, 2010 Released: Nov 09, 2010 Risk

CVE-2010-4009

FG-VD-08-032 (Apple)

Fortinet Discovers Apple Safari DHTML Handling Remote Code Execution Vulnerability

Discovered: Sep 18, 2008 Released: Oct 29, 2008 Risk

CVE-2008-4231

FG-VD-19-001 (Apple)

Fortinet Discovers macOS QuartzCore Handling Shape Object Memory Corruption Vulnerability in CA::Render::Decoder::decode_shape

Discovered: Jan 01, 2019 Released: Mar 26, 2019 Risk

CVE-2019-8507

FG-VD-15-040 (Apple)

Fortinet Discovers Apple QuickTime 3gp File 'stsz' Atom Handling Memory Corruption Vulnerability

Discovered: May 12, 2015 Released: Aug 25, 2015 Risk

CVE-2015-5785

FG-VD-15-046 (Apple)

Fortinet Discovers Apple QuickTime mp4 File 'stbl' Atom Handling Heap Overflow Vulnerability

Discovered: Jun 03, 2015 Released: Jul 02, 2015 Risk

CVE-2015-3667

FG-VD-06-001 (Apple)

Buffer Overflow Vulnerability in Apple QuickTime Player

Discovered: Jan 13, 2006 Released: Jan 30, 2006 Risk

CVE-2005-3710

FG-VD-13-014 (Apple)

Fortinet Discovers Apple iTunes ActiveX Control Memory Corruption Vulnerability

Discovered: May 21, 2013 Released: Sep 23, 2013 Risk

CVE-2013-1035

FG-VD-11-001 (Apple)

Fortinet Discovers QuickTime Player Vulnerability

Discovered: Jan 06, 2011 Released: May 24, 2011 Risk

CVE-2011-0210

FG-VD-06-004 (Apple)

Buffer Overflow Vulnerability in Apple QuickTime Player

Discovered: Apr 03, 2006 Released: Apr 30, 2006 Risk

CVE-2005-3709

FG-VD-06-002 (Apple)

Improper Memory Access Vulnerability in Apple QuickTime Player

Discovered: Feb 14, 2006 Released: Feb 27, 2006 Risk

CVE-2005-3711

FG-VD-15-033 (Apple)

Fortinet Discovers Apple QuickTime mp4 File 'traf' Atom Handling Heap Overflow Vulnerability

Discovered: Apr 22, 2015 Released: Jul 02, 2015 Risk

CVE-2015-3668

FG-VD-13-001 (Apple)

Fortinet Discovers Apple Safari Memory Corruption Vulnerability

Discovered: Jan 18, 2013 Released: Sep 23, 2013 Risk

CVE-2013-1036

FG-VD-13-003 (Apple)

Fortinet Discovers Apple Safari Memory Corruption Vulnerability II

Discovered: Jan 22, 2013 Released: Sep 23, 2013 Risk

CVE-2012-2871

FG-VD-08-019 (Apple)

Fortinet Discovers Apple iTunes DAAP Handler Remote DoS Vulnerability

Discovered: Aug 01, 2008 Released: Aug 24, 2008 Risk

CVE-2009-0016

FG-VD-06-003 (Apple)

Integer Overflow Vulnerability in Apple QuickTime Player ImageWidth

Discovered: Mar 14, 2006 Released: Mar 29, 2006 Risk

CVE-2005-3711

At a glance: RESET

Zero-Day Research | Fixes Available

At a glance:
RESET