Apple

iPhone OS

4014 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2010-1809

  • EPSS 0.86%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.

3.5

CVE-2010-1810

  • EPSS 0.13%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

6.8

CVE-2010-1811

  • EPSS 4.37%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF file.

6.8

CVE-2010-1812

  • EPSS 5.51%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving selectio...

6.8

CVE-2010-1813

  • EPSS 17.39%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving HTML object outlines.

6.8

CVE-2010-1814

  • EPSS 4.6%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving form menus.

6.8

CVE-2010-1815

  • EPSS 5.51%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollba...

6.8

CVE-2010-1817

  • EPSS 1.34%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

4.3

CVE-2010-3259

  • EPSS 0.82%
  • Veröffentlicht 07.09.2010 18:00:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass t...

9.3

CVE-2010-3257

  • EPSS 10.34%
  • Veröffentlicht 07.09.2010 18:00:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (applicat...