Apple

iPhone OS

4053 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2010-1119

  • EPSS 19.02%
  • Veröffentlicht 25.03.2010 21:00:01
  • Zuletzt bearbeitet 16.06.2026 23:17:32

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 10.4, and Safari on Apple iPhone OS allows remote attackers to execute arbitrary code or cause a denial of serv...

9.3

CVE-2010-0050

  • EPSS 11.64%
  • Veröffentlicht 15.03.2010 14:15:32
  • Zuletzt bearbeitet 16.06.2026 23:15:19

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

4.6

CVE-2010-0038

  • EPSS 0.36%
  • Veröffentlicht 03.02.2010 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:15:17

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corr...

6.8

CVE-2009-2816

  • EPSS 1.55%
  • Veröffentlicht 13.11.2009 15:30:00
  • Zuletzt bearbeitet 16.06.2026 23:10:16

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight,...

4.3

CVE-2009-3271

Exploit
  • EPSS 4.21%
  • Veröffentlicht 21.09.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:16

Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attribute of an IFRAME element.

7.5

CVE-2009-3273

  • EPSS 0.93%
  • Veröffentlicht 21.09.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:16

iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate.

6.8

CVE-2009-2206

Exploit
  • EPSS 4.63%
  • Veröffentlicht 10.09.2009 21:30:01
  • Zuletzt bearbeitet 16.06.2026 23:09:00

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (applic...

2.1

CVE-2009-2207

  • EPSS 0.35%
  • Veröffentlicht 10.09.2009 21:30:01
  • Zuletzt bearbeitet 16.06.2026 23:09:00

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages.

4.6

CVE-2009-2794

  • EPSS 0.26%
  • Veröffentlicht 10.09.2009 21:30:01
  • Zuletzt bearbeitet 16.06.2026 23:10:14

The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows local users to bypass intended Microsoft Exchange rest...

7.2

CVE-2009-2795

  • EPSS 0.37%
  • Veröffentlicht 10.09.2009 21:30:01
  • Zuletzt bearbeitet 16.06.2026 23:10:14

Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to "command parsin...