Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Results 5,071

Export CSV
CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2016-4777

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (invalid pointer dereference) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2016-4778

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Products
Iphone Os Mac Os X Tvos and 1 more
CVE-2010-1811

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF file.

CVSS 2.0 · 6.8 Medium EPSS 3.1% KEV · Not listed
Vendors
CVE-2011-3069

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3068

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
CVE-2011-3060

Webkitgtk: google chrome update [28-March-2012]

Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3059

Webkitgtk: google chrome update [28-March-2012]

Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3056

Webkitgtk: google chrome update [21-March-2012]

Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a "magic iframe."

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Products
Iphone Os Safari Chrome and 1 more
CVE-2011-3053

Webkitgtk: google chrome update [21-March-2012]

Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3050

Webkitgtk: google chrome update [21-March-2012]

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3046

The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.

CVSS 2.0 · 10.0 Critical EPSS 4.4% KEV · Not listed
Products
Iphone Os Safari Chrome and 1 more
CVE-2011-3044

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3043

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3042

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3041

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3040

Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3039

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3038

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more