Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-1261 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Unicode font.
CVE-2014-1260 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 QuickLook in Apple OS X through 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Microsoft Office document.
CVE-2014-1259 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted filename.
CVE-2014-1258 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image.
CVE-2014-1257 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 3.6 LOW· v2 CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstatio...Show more CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.Show less
CVE-2014-1256 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.
CVE-2014-1255 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.
CVE-2014-1254 1Apple 1Mac Os X Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Type 1 font that is embedded in a document.
CVE-2014-1251 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted clef atom in a movie file.
CVE-2014-1250 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) v...Show more Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.Show less
CVE-2014-1249 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PSD image.
CVE-2014-1248 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ldat atom in a movie file.
CVE-2014-1247 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted dref atom in a movie file.
CVE-2014-1246 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ftab atom in a movie file.
CVE-2014-1245 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted stsz atom in a movie file.
CVE-2014-1244 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2014-1243 1Apple 1Quicktime Apr 29, 2026 Feb 27, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.5 does not initialize an unspecified pointer, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted track list in a movie file.
CVE-2014-1266 1Apple 3Iphone Os Mac Os XTvos Apr 29, 2026 Feb 22, 2014 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before...Show more The SSLVerifySignedServerKeyExchange function in libsecurity_ssl/lib/sslKeyExchange.c in the Secure Transport feature in the Data Security component in Apple iOS 6.x before 6.1.6 and 7.x before 7.0.6, Apple TV 6.x before 6.0.2, and Apple OS X 10.9.x before 10.9.2 does not check the signature in a TLS Server Key Exchange message, which allows man-in-the-middle attackers to spoof SSL servers by (1) using an arbitrary private key for the signing step or (2) omitting the signing step.Show less
CVE-2014-2019 1Apple 1Iphone Os Apr 29, 2026 Feb 18, 2014 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associat...Show more The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary iCloud Account Password value and a blank iCloud Account Description value.Show less
CVE-2014-1253 1Apple 1Boot Camp Apr 29, 2026 Feb 14, 2014 N/A· v4 N/A· v3 4.7 MEDIUM· v2 AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.

Previous 1...342343344...459 Next