Apple

Safari

1622 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-1383

  • EPSS 2.08%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:18:14

CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.

4.3

CVE-2010-1420

  • EPSS 1.64%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:18:21

Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file.

5

CVE-2011-0214

  • EPSS 0.72%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certificatio...

9.3

CVE-2011-0215

  • EPSS 4.48%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.

9.3

CVE-2011-0216

  • EPSS 5.31%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.

4.3

CVE-2011-0217

  • EPSS 0.97%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fiel...

9.3

CVE-2011-0218

  • EPSS 3.92%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in ...

5.8

CVE-2011-0219

  • EPSS 1.61%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:01

Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts.

9.3

CVE-2011-0221

  • EPSS 3.92%
  • Veröffentlicht 21.07.2011 23:55:01
  • Zuletzt bearbeitet 16.06.2026 23:27:02

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in ...

6.8

CVE-2011-2351

  • EPSS 1.58%
  • Veröffentlicht 29.06.2011 17:55:04
  • Zuletzt bearbeitet 16.06.2026 23:31:09

Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.