Every CVE whose affected-product data names Apple Cfnetwork, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2010-1383 — CVSS 9.3 (critical): CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of…
CVE-2007-2403 — CVSS 6.8 (medium): CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the…
CVE-2010-1800 — CVSS 5.0 (medium): CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to…
CVE-2011-0214 — CVSS 5.0 (medium): CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which…
CVE-2010-1420 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script…