Apple

Safari

1572 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-2845

  • EPSS 0.53%
  • Veröffentlicht 25.10.2011 19:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.

6.8

CVE-2011-3229

  • EPSS 0.39%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.

6.8

CVE-2011-3230

  • EPSS 65.2%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

6.8

CVE-2011-3231

  • EPSS 0.32%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.

5

CVE-2011-3242

  • EPSS 0.43%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.

4.3

CVE-2011-3243

  • EPSS 0.52%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.

6.8

CVE-2011-2877

  • EPSS 1.61%
  • Veröffentlicht 04.10.2011 20:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

6.8

CVE-2011-2854

  • EPSS 1.84%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."

6.8

CVE-2011-2855

  • EPSS 1.65%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale no...

6.8

CVE-2011-2857

  • EPSS 2.1%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.