Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3453 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Integer overflow in libresolv in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via crafted DNS data.
CVE-2011-3452 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password f...Show more Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network.Show less
CVE-2011-3450 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and applic...Show more CoreUI in Apple Mac OS X 10.7.x before 10.7.3 does not properly restrict the allocation of stack memory, which allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption and application crash) via a long URL.Show less
CVE-2011-3449 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in CoreText in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted embedded font in a document.
CVE-2011-3448 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heap-based buffer overflow in CoreMedia in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVE-2011-3447 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
CVE-2011-3446 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via...Show more Apple Type Services (ATS) in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font that is accessed by Font Book.Show less
CVE-2011-3444 1Apple 2Mac Os X Mac Os X Server Apr 29, 2026 Feb 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection...Show more Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.Show less
CVE-2011-3928 2Apple Google 3Chrome Iphone OsSafari Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.
CVE-2011-3926 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3924 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Jan 24, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.
CVE-2011-3919 5Apple DebianGoogle+2 more 9Chrome Debian LinuxEnterprise Linux Desktop+6 more Apr 29, 2026 Jan 7, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3913 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.
CVE-2011-3909 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corrupt...Show more The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.Show less
CVE-2011-3908 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 Dec 13, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-4692 2Apple Google 3Chrome SafariWebkit Apr 29, 2026 Dec 7, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whet...Show more WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.Show less
CVE-2010-5070 1Apple 1Safari Apr 29, 2026 Dec 7, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information...Show more The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264. NOTE: this may overlap CVE-2010-5073.Show less
CVE-2011-1516 1Apple 1Mac Os X Apr 29, 2026 Nov 15, 2011 N/A· v4 N/A· v3 7.6 HIGH· v2 The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resource...Show more The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.Show less
CVE-2008-7303 1Apple 1Mac Os X Apr 29, 2026 Nov 15, 2011 N/A· v4 N/A· v3 7.6 HIGH· v2 The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstra...Show more The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script file, a related issue to CVE-2011-1516.Show less
CVE-2011-3442 1Apple 1Iphone Os Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.

Previous 1...370371372...458 Next