Apple Imovie vulnerabilities

2 CVEs affecting Apple Imovie, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30757, published 2021-09-08.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-0646, published 2007-02-01. High severity, CVSS 7.1. EPSS: 10.2% chance of exploitation in the next 30 days. Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via format string…
• CVE-2021-30757, published 2021-09-08. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.