Apple

Safari

1622 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-2845

  • EPSS 1.15%
  • Veröffentlicht 25.10.2011 19:55:00
  • Zuletzt bearbeitet 16.06.2026 23:32:06

Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.

6.8

CVE-2011-3229

  • EPSS 2.08%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 16.06.2026 23:32:55

Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.

6.8

CVE-2011-3230

  • EPSS 50.21%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 16.06.2026 23:32:55

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

6.8

CVE-2011-3231

  • EPSS 1.35%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 16.06.2026 23:32:55

The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.

5

CVE-2011-3242

  • EPSS 1.45%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 16.06.2026 23:32:56

The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.

4.3

CVE-2011-3243

  • EPSS 1.98%
  • Veröffentlicht 14.10.2011 10:55:09
  • Zuletzt bearbeitet 16.06.2026 23:32:57

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.

6.8

CVE-2011-2877

  • EPSS 1.35%
  • Veröffentlicht 04.10.2011 20:55:01
  • Zuletzt bearbeitet 16.06.2026 23:32:10

Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale font."

6.8

CVE-2011-2854

  • EPSS 1.7%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 16.06.2026 23:32:07

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "ruby / table style handing."

6.8

CVE-2011-2855

  • EPSS 1.56%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 16.06.2026 23:32:07

Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale no...

6.8

CVE-2011-2857

  • EPSS 1.56%
  • Veröffentlicht 19.09.2011 12:02:56
  • Zuletzt bearbeitet 16.06.2026 23:32:07

Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.