Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-1249 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.
CVE-2014-1248 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.
CVE-2014-1247 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.
CVE-2014-1246 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.
CVE-2014-1245 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file.
CVE-2014-1244 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2014-1243 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.
CVE-2014-1266 1Apple 3Iphone Os Mac Os XTvos Apr 29, 2026 Feb 22, 2014 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before...Show more The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.Show less
CVE-2014-2019 1Apple 1Iphone Os Apr 29, 2026 Feb 18, 2014 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associat...Show more The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary iCloud Account Password value and a blank iCloud Account Description value.Show less
CVE-2014-1253 1Apple 1Boot Camp Apr 29, 2026 Feb 14, 2014 N/A· v4 N/A· v3 4.7 MEDIUM· v2 AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.
CVE-2013-6891 2Apple Canonical 2Cups Ubuntu Linux Apr 29, 2026 Jan 26, 2014 N/A· v4 N/A· v3 1.2 LOW· v2 lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.
CVE-2014-1252 1Apple 3Iphone Os Mac Os XPages Apr 29, 2026 Jan 24, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.
CVE-2014-1242 1Apple 1Itunes Apr 29, 2026 Jan 23, 2014 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.
CVE-2013-5987 2Apple Nvidia 2Gpu Driver Mac Os X Apr 29, 2026 Jan 21, 2014 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors.
CVE-2013-0340 3Apple Libexpat ProjectPython 7Ipados Iphone OsLibexpat+4 more Apr 29, 2026 Jan 21, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource cons...Show more expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.Show less
CVE-2010-1819 1Apple 1Quicktime Apr 29, 2026 Dec 27, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse...Show more Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.Show less
CVE-2013-5228 1Apple 5Iphone Os ItunesSafari+2 more Apr 29, 2026 Dec 18, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differ...Show more WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.Show less
CVE-2013-5227 1Apple 1Safari Apr 29, 2026 Dec 18, 2013 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Apple Safari before 6.1.1 and 7.x before 7.0.1 allows remote attackers to bypass the Same Origin Policy and discover credentials by triggering autofill of subframe form fields.
CVE-2013-5225 1Apple 5Iphone Os ItunesSafari+2 more Apr 29, 2026 Dec 18, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differ...Show more WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.Show less
CVE-2013-5199 1Apple 5Iphone Os ItunesSafari+2 more Apr 29, 2026 Dec 18, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differ...Show more WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.Show less

Previous 1...327328329...443 Next