← Back

Iphone Os

iphone_os

Vendor: Apple • 4,053 CVEs

CVEs (4,053)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4227
1Apple
1Iphone Os
Apr 23, 2026
Nov 25, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to o...Show more
Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network traffic.Show less
CVE-2008-1586
1Apple
1Iphone Os
Apr 23, 2026
Nov 25, 2008
N/A· v4
N/A· v3
7.1 HIGH· v2
ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.
CVE-2008-4211
1Apple
3Iphone Os
Mac Os XMac Os X Server
Apr 23, 2026
Oct 10, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of servic...Show more
Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted Microsoft Excel file that triggers an out-of-bounds memory access, related to "handling of columns."Show less
CVE-2008-3529
4Apple
CanonicalDebian+1 more
6Debian Linux
Iphone OsLibxml2+3 more
Apr 23, 2026
Sep 12, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML enti...Show more
Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.Show less
CVE-2008-3632
1Apple
3Iphone
Iphone OsIpod Touch
Apr 23, 2026
Sep 11, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web pag...Show more
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.Show less
CVE-2008-3612
1Apple
1Iphone Os
Apr 23, 2026
Sep 11, 2008
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.
CVE-2008-3281
7Apple
CanonicalDebian+4 more
11Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+8 more
Apr 23, 2026
Aug 27, 2008
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafte...Show more
libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.Show less
CVE-2008-0034
1Apple
2Iphone
Iphone Os
Apr 23, 2026
Jan 16, 2008
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls.
CVE-2007-3755
1Apple
2Iphone
Iphone Os
Apr 23, 2026
Sep 27, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number.
CVE-2007-3754
1Apple
2Iphone
Iphone Os
Apr 23, 2026
Sep 27, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) att...Show more
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.Show less
CVE-2007-3753
1Apple
2Iphone
Iphone Os
Apr 23, 2026
Sep 27, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, re...Show more
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, related to insufficient input validation.Show less
CVE-2007-3944
1Apple
3Iphone Os
SafariWebkit
Apr 23, 2026
Jul 23, 2007
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attacker...Show more
Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone. NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier.Show less
CVE-2007-2400
1Apple
2Iphone Os
Safari
Apr 23, 2026
Jun 25, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security...Show more
Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.Show less