Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3462 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoof...Show more Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.Show less
CVE-2011-3460 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PNG file.
CVE-2011-3459 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buf...Show more Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.Show less
CVE-2011-3458 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted...Show more QuickTime in Apple Mac OS X before 10.7.3 does not prevent access to uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 file.Show less
CVE-2011-3457 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (me...Show more The OpenGL implementation in Apple Mac OS X before 10.7.3 does not properly perform OpenGL Shading Language (aka GLSL) compilation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted program.Show less
CVE-2011-3453 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via crafted DNS data.
CVE-2011-3452 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password f...Show more Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network.Show less
CVE-2011-3450 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and applic...Show more CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.Show less
CVE-2011-3449 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
CVE-2011-3448 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2011-3447 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
CVE-2011-3446 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via...Show more Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book.Show less
CVE-2011-3444 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection...Show more Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.Show less
CVE-2011-3928 2Apple Google 3Chrome Iphone OsSafari Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.
CVE-2011-3926 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3924 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.
CVE-2011-3919 5Apple DebianGoogle+2 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more Apr 29, 2026 Jan 7, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3913 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.
CVE-2011-3909 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corrupt...Show more The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.Show less
CVE-2011-3908 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Previous 1...352353354...441 Next