Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3440 1Apple 2Ipad2 Iphone Os Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 1.2 LOW· v2 The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirm...Show more The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.Show less
CVE-2011-3439 2Apple Suse 4Iphone Os Linux Enterprise DesktopLinux Enterprise Server+1 more Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.
CVE-2011-3897 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing.
CVE-2011-3998 1Apple 1Webobjects Apr 29, 2026 Nov 9, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-3251 1Apple 1Quicktime Apr 29, 2026 Oct 28, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted TKHD atoms in a QuickTime movie file.
CVE-2011-3250 1Apple 1Quicktime Apr 29, 2026 Oct 28, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with JPEG2000 encoding.
CVE-2011-3249 1Apple 1Quicktime Apr 29, 2026 Oct 28, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FLC encoding.
CVE-2011-3248 1Apple 1Quicktime Apr 29, 2026 Oct 28, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font table in a QuickTime movie file.
CVE-2011-3247 1Apple 1Quicktime Apr 29, 2026 Oct 28, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in Apple QuickTime before 7.7.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT file.
CVE-2011-3888 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Oct 25, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in...Show more Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in.Show less
CVE-2011-3887 2Apple Google 3Chrome Iphone OsSafari Apr 29, 2026 Oct 25, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.
CVE-2011-3885 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Oct 25, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) t...Show more Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data.Show less
CVE-2011-3881 2Apple Google 4Android ChromeIphone Os+1 more Apr 29, 2026 Oct 25, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors related to (1) the DOMWindow::cle...Show more WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors related to (1) the DOMWindow::clear function and use of a selection object, (2) the Object::GetRealNamedPropertyInPrototypeChain function and use of an __proto__ property, (3) the HTMLPlugInImageElement::allowedToLoadFrameURL function and use of a javascript: URL, (4) incorrect origins for XSLT-generated documents in the XSLTProcessor::createDocumentFromSource function, and (5) improper handling of synchronous frame loads in the ScriptController::executeIfJavaScriptURL function.Show less
CVE-2011-2845 2Apple Google 3Chrome Iphone OsSafari Apr 29, 2026 Oct 25, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.
CVE-2011-3437 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document.
CVE-2011-3436 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by...Show more Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.Show less
CVE-2011-3435 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 2.1 LOW· v2 Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors.
CVE-2011-3434 1Apple 1Iphone Os Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
CVE-2011-3432 1Apple 1Iphone Os Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
CVE-2011-3431 1Apple 1Iphone Os Apr 29, 2026 Oct 14, 2011 N/A· v4 N/A· v3 2.1 LOW· v2 The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the de...Show more The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.Show less

Previous 1...353354355...440 Next