Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3694 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.
CVE-2012-3693 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unic...Show more Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.Show less
CVE-2012-3691 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2012-3690 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.
CVE-2012-3689 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site.
CVE-2012-3650 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.
CVE-2012-0680 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.
CVE-2012-0679 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL.
CVE-2012-0678 1Apple 1Safari Apr 29, 2026 Jul 25, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL.
CVE-2012-1148 2Apple Libexpat Project 2Libexpat Mac Os X Apr 29, 2026 Jul 3, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause i...Show more Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities.Show less
CVE-2012-1147 2Apple Libexpat Project 2Libexpat Mac Os X Apr 29, 2026 Jul 3, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files.
CVE-2012-2824 2Apple Google 2Chrome Iphone Os Apr 29, 2026 Jun 27, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.
CVE-2012-2807 2Apple Google 2Chrome Iphone Os Apr 29, 2026 Jun 27, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other imp...Show more Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-0677 1Apple 1Itunes Apr 29, 2026 Jun 12, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
CVE-2012-0671 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.
CVE-2012-0670 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted sean atom in a movie file.
CVE-2012-0669 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
CVE-2012-0668 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.
CVE-2012-0667 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.
CVE-2012-0666 1Apple 1Quicktime Apr 29, 2026 May 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.

Previous 1...344345346...441 Next