Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
The i386_set_ldt system call in the kernel in Apple Mac OS X before 10.6.7 does not properly handle call gates, which allows local users to gain privileges via vectors involving the creation of a call gate entry.
CVEs:CVE-2011-0182
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
CVEs:CVE-2011-0167
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vec...
CVEs:CVE-2011-1290
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| webkit | affected | apple | — | — |
Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash)...
CVEs:CVE-2011-0192
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile i...
CVEs:CVE-2011-0170
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0164
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.
CVEs:CVE-2011-0187
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| quicktime | affected | apple | — | — |
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."
CVEs:CVE-2011-1117
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via a crafted document.
CVEs:CVE-2011-1204
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressio...
CVEs:CVE-2010-4754
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted...
CVEs:CVE-2011-0191
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding chi...
CVEs:CVE-2011-1344
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application ...
CVEs:CVE-2011-1417
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle att...
CVEs:CVE-2011-0115
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption a...
CVEs:CVE-2011-0116
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to...
CVEs:CVE-2011-0132
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly access glyph data during layout actions for floating blocks associated with pseudo-elements, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial ...
CVEs:CVE-2011-0133
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, does not properly parse HTML elements associated with document namespaces, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and ap...
CVEs:CVE-2011-0149
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
QuickLook in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via an Excel spreadsheet with a crafted formula that uses unspecified opcodes.
CVEs:CVE-2011-0184
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.
CVEs:CVE-2011-0162
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| apple_tv | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
Integer overflow in ImageIO in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XBM image.
CVEs:CVE-2011-0181
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| imageio | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded TrueType font.
CVEs:CVE-2011-0175
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted embedded Type 1 font.
CVEs:CVE-2011-0176
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Multiple buffer overflows in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code via a document that contains a crafted SFNT table in an embedded font.
CVEs:CVE-2011-0177
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Multiple buffer overflows in Image RAW in Apple Mac OS X before 10.6.7 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.
CVEs:CVE-2011-0193
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0152
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0155
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows and Apple iOS, does not properly implement the .sort function for JavaScript arrays, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corrupti...
CVEs:CVE-2011-0154
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0112
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0113
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0114
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0117
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0118
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0119
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0120
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0121
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0122
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0123
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0124
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0125
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0126
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0127
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0128
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0129
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0130
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0131
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0134
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0135
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0136
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0137
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0138
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0140
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0141
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0142
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0143
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0144
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0145
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0146
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0147
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0148
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0150
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0151
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0153
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0156
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0168
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG2000 image.
CVEs:CVE-2011-0186
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| quicktime | affected | apple | — | — |
Integer overflow in ImageIO in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with JPEG encoding.
CVEs:CVE-2011-0194
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| imageio | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
CoreText in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a document that contains a crafted embedded font.
CVEs:CVE-2011-0179
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0139
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulner...
CVEs:CVE-2011-0165
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| itunes | affected | apple | — | — |
| webkit | affected | apple | — | — |
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X before 10.6.7 allows remote attackers to execute arbitrary code via a document that contains a crafted embedded OpenType font.
CVEs:CVE-2011-0174
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overl...
CVEs:CVE-2011-0166
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVEs:CVE-2011-1296
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
CVEs:CVE-2011-1114
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVEs:CVE-2011-1115
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
CVEs:CVE-2011-1121
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVEs:CVE-2011-1293
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service (lockd, statd, mountd, or portmap outage) via a crafted packet, related to an...
CVEs:CVE-2011-0183
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
CVEs:CVE-2011-1190
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVEs:CVE-2011-1203
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-...
CVEs:CVE-2011-0157
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| webkit | affected | apple | — | — |
Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVEs:CVE-2011-1188
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, o...
CVEs:CVE-2011-1295
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale...
CVEs:CVE-2011-1109
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| itunes | affected | apple | — | — |
| safari | affected | apple | — | — |
Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a (1) display dialog or (...
CVEs:CVE-2011-0173
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| applescript | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
The Safari Settings feature in Safari in Apple iOS 4.x before 4.3 does not properly implement the clearing of cookies during execution of the Safari application, which might make it easier for remote web servers to track users by setting a cookie.
CVEs:CVE-2011-0159
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web ...
CVEs:CVE-2011-0161
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-...
CVEs:CVE-2011-0163
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
CVEs:CVE-2011-0160
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scri...
CVEs:CVE-2011-0169
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| safari | affected | apple | — | — |
| webkit | affected | apple | — | — |
The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track...
CVEs:CVE-2011-1418
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| apple_tv | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| tvos | affected | apple | — | — |
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors.
CVEs:CVE-2011-1107
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
| safari | affected | apple | — | — |
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an A...
CVEs:CVE-2011-0190
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| installer | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service (persistent application crash) via crafted JavaScript code.
CVEs:CVE-2011-0158
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| iphone_os | affected | apple | — | — |
The default configuration of Terminal in Apple Mac OS X 10.6 before 10.6.7 uses SSH protocol version 1 within the New Remote Connection dialog, which might make it easier for man-in-the-middle attackers to spoof SSH servers by leveraging protocol vulne...
CVEs:CVE-2011-0189
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
| terminal | affected | apple | — | — |
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.
CVEs:CVE-2011-0180
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
AirPort in Apple Mac OS X 10.6 before 10.6.7 allows remote attackers to cause a denial of service (divide-by-zero error and reboot) via Wi-Fi frames on the local wireless network, a different vulnerability than CVE-2011-0162.
CVEs:CVE-2011-0172
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of file...
CVEs:CVE-2011-1073
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mac_os_x | affected | apple | — | — |
The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this dire...
CVEs:CVE-2011-0178
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| carboncore | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
| mac_os_x_server | affected | apple | — | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.