Apple

iPhone OS

4014 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2011-3064

  • EPSS 3.87%
  • Veröffentlicht 30.03.2012 22:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.

6.8

CVE-2011-3050

Exploit
  • EPSS 5.57%
  • Veröffentlicht 22.03.2012 16:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-lette...

6.8

CVE-2011-3053

  • EPSS 4.45%
  • Veröffentlicht 22.03.2012 16:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.

6.8

CVE-2011-3056

  • EPSS 0.89%
  • Veröffentlicht 22.03.2012 16:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

10

CVE-2011-3046

Medienbericht
  • EPSS 2.47%
  • Veröffentlicht 09.03.2012 00:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.

5

CVE-2012-0641

  • EPSS 0.56%
  • Veröffentlicht 08.03.2012 22:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447.

9.3

CVE-2012-0642

  • EPSS 3.14%
  • Veröffentlicht 08.03.2012 22:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via a crafted catalog file in an HFS disk image.

9.3

CVE-2012-0643

  • EPSS 1.36%
  • Veröffentlicht 08.03.2012 22:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.

6.9

CVE-2012-0644

  • EPSS 0.05%
  • Veröffentlicht 08.03.2012 22:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.

1.2

CVE-2012-0645

  • EPSS 0.09%
  • Veröffentlicht 08.03.2012 22:55:04
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary reci...