Vulnerabilities > Apple > Iphone OS > High

DATE CVE VULNERABILITY TITLE RISK
2011-07-19 CVE-2011-0227 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.
local
low complexity
apple CWE-264
7.2
2011-05-03 CVE-2011-1451 Improper Input Validation vulnerability in Google Chrome
Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."
network
low complexity
google apple CWE-20
7.5
2011-03-25 CVE-2011-1296 Improper Input Validation vulnerability in Google Chrome
Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
network
low complexity
google apple CWE-20
7.5
2011-03-25 CVE-2011-1295 Improper Input Validation vulnerability in Google Chrome
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors.
network
low complexity
apple google CWE-20
7.5
2011-03-25 CVE-2011-1293 USE After Free vulnerability in Google Chrome
Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
network
low complexity
google debian apple CWE-416
7.5
2011-03-11 CVE-2011-0162 Improper Input Validation vulnerability in Apple TV, Iphone OS and Tvos
Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.
network
low complexity
apple CWE-20
7.8
2011-03-11 CVE-2011-0157 Buffer Errors vulnerability in Apple Iphone OS and Webkit
WebKit, as used in Apple iOS before 4.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-09-1.
network
low complexity
apple CWE-119
7.5
2011-03-11 CVE-2011-1203 Multiple Security vulnerability in Google Chrome
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
network
low complexity
google apple
7.5
2011-03-11 CVE-2011-1188 Multiple Security vulnerability in Google Chrome
Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
network
low complexity
google apple
7.5
2011-03-01 CVE-2011-1121 Integer Overflow OR Wraparound vulnerability in Google Chrome
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
network
low complexity
google apple CWE-190
7.5