Apple

iPhone OS

3821 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-3254

  • EPSS 0.25%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.

4.3

CVE-2011-3255

  • EPSS 0.31%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.

6.8

CVE-2011-2877

  • EPSS 1.61%
  • Veröffentlicht 04.10.2011 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

6.8

CVE-2011-2854

  • EPSS 1.84%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."

6.8

CVE-2011-2855

  • EPSS 1.65%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale no...

6.8

CVE-2011-2857

  • EPSS 2.1%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.

7.5

CVE-2011-2860

  • EPSS 2.12%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to table styles.

5

CVE-2011-3234

Exploit
  • EPSS 2.82%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

6.8

CVE-2011-2834

  • EPSS 2.9%
  • Veröffentlicht 19.09.2011 12:02:55
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

6.8

CVE-2011-2846

  • EPSS 2.1%
  • Veröffentlicht 19.09.2011 12:02:55
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.