Apple

Safari

1536 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-3053

  • EPSS 4.45%
  • Published 22.03.2012 16:55:01
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.

6.8

CVE-2011-3056

  • EPSS 0.89%
  • Published 22.03.2012 16:55:01
  • Last modified 11.04.2025 00:51:21

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

6.4

CVE-2012-0584

  • EPSS 0.59%
  • Published 12.03.2012 21:55:00
  • Last modified 11.04.2025 00:51:21

The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.

5

CVE-2012-0640

  • EPSS 0.29%
  • Published 12.03.2012 21:55:00
  • Last modified 11.04.2025 00:51:21

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.

5

CVE-2012-0647

  • EPSS 0.28%
  • Published 12.03.2012 21:55:00
  • Last modified 11.04.2025 00:51:21

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.

10

CVE-2011-3046

Media report
  • EPSS 4.46%
  • Published 09.03.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.

7.6

CVE-2012-0636

  • EPSS 0.86%
  • Published 08.03.2012 22:55:03
  • Last modified 11.04.2025 00:51:21

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability t...

7.6

CVE-2012-0637

  • EPSS 0.86%
  • Published 08.03.2012 22:55:03
  • Last modified 11.04.2025 00:51:21

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability t...

4.3

CVE-2011-3844

  • EPSS 0.28%
  • Published 08.03.2012 04:15:02
  • Last modified 11.04.2025 00:51:21

Apple Safari 5.0.5 does not properly implement the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page.

7.6

CVE-2011-3845

  • EPSS 3.94%
  • Published 08.03.2012 04:15:02
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in...