Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-0647 1Apple 1Safari Apr 29, 2026 Mar 12, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
CVE-2012-0640 1Apple 1Safari Apr 29, 2026 Mar 12, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.
CVE-2012-0584 1Apple 1Safari Apr 29, 2026 Mar 12, 2012 N/A· v4 N/A· v3 6.4 MEDIUM· v2 The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via unspecified homoglyphs.
CVE-2011-3046 3Apple GoogleOpensuse 4Chrome Iphone OsOpensuse+1 more Apr 29, 2026 Mar 9, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.
CVE-2012-0648 1Apple 2Itunes Webkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0646 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.
CVE-2012-0645 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 1.2 LOW· v2 Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mai...Show more Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.Show less
CVE-2012-0644 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.
CVE-2012-0643 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.
CVE-2012-0642 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via a crafted catalog file in an HFS disk image.
CVE-2012-0641 1Apple 1Iphone Os Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-...Show more CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447.Show less
CVE-2012-0639 1Apple 2Itunes Webkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0638 1Apple 2Itunes Webkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0637 1Apple 3Itunes SafariWebkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0636 1Apple 3Itunes SafariWebkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0635 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0634 1Apple 2Itunes Webkit Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 7.6 HIGH· v2 WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsin...Show more WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.Show less
CVE-2012-0633 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0632 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less
CVE-2012-0631 1Apple 2Iphone Os Itunes Apr 29, 2026 Mar 8, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different...Show more WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.Show less

Previous 1...347348349...441 Next