Apple

iPhone OS

4169 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-2819

  • EPSS 1.38%
  • Veröffentlicht 03.08.2011 00:55:02
  • Zuletzt bearbeitet 16.06.2026 23:32:03

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.

6.8

CVE-2011-2359

  • EPSS 1.54%
  • Veröffentlicht 03.08.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:31:10

Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

6.8

CVE-2011-2788

  • EPSS 1.46%
  • Veröffentlicht 03.08.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:32:00

Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted remote attackers to have an unspecified impact via unknown vectors.

6.8

CVE-2011-2790

  • EPSS 1.61%
  • Veröffentlicht 03.08.2011 00:55:01
  • Zuletzt bearbeitet 16.06.2026 23:32:00

Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving floating styles.

9.3

CVE-2011-0226

  • EPSS 6.65%
  • Veröffentlicht 19.07.2011 22:55:00
  • Zuletzt bearbeitet 16.06.2026 23:27:02

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory...

7.2

CVE-2011-0227

  • EPSS 0.32%
  • Veröffentlicht 19.07.2011 22:55:00
  • Zuletzt bearbeitet 16.06.2026 23:27:02

The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.

6.8

CVE-2011-2351

  • EPSS 1.58%
  • Veröffentlicht 29.06.2011 17:55:04
  • Zuletzt bearbeitet 16.06.2026 23:31:09

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.

6.8

CVE-2011-1449

Exploit
  • EPSS 1.65%
  • Veröffentlicht 03.05.2011 22:55:01
  • Zuletzt bearbeitet 16.06.2026 23:29:22

Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

7.5

CVE-2011-1451

  • EPSS 1.82%
  • Veröffentlicht 03.05.2011 22:55:01
  • Zuletzt bearbeitet 16.06.2026 23:29:22

Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."

4.3

CVE-2011-0195

  • EPSS 1.03%
  • Veröffentlicht 15.04.2011 19:55:00
  • Zuletzt bearbeitet 16.06.2026 23:26:59

The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site. NOTE: this may overlap CVE-2011-1202.