|
3011
|
-
1.9
|
LOW
|
House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents direc…
|
CWE-310
Cryptographic Issues
|
CVE-2014-4448
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.0.2
|
|
|
2024-11-21 11:10
2014-10-22
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3012
|
-
7.5
|
HIGH
|
Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.212…
|
CWE-416
Use After Free
|
CVE-2014-3192
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
8.1.2
|
|
|
2024-11-21 11:07
2014-10-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3013
|
-
6.8
|
MEDIUM
|
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain …
|
CWE-79
Cross-site Scripting
|
CVE-2014-3187
|
cpe:2.3:o:apple:iphone_os:-:*
|
|
|
|
|
2024-11-21 11:07
2014-10-8
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3014
|
7.8
9.3
|
HIGH
Local
|
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-m…
|
CWE-787
Out-of-bounds Write
|
CVE-2014-4404
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
|
|
8.0
|
2026-04-22 01:22
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3015
|
-
4.3
|
MEDIUM
|
The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2014-4423
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3016
|
8.1
6.8
|
HIGH
Network
|
The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardeni…
|
CWE-310
Cryptographic Issues
|
CVE-2014-4422
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3017
|
-
1.9
|
LOW
|
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-la…
|
NVD-CWE-Other
|
CVE-2014-4421
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3018
|
-
1.9
|
LOW
|
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-la…
|
NVD-CWE-Other
|
CVE-2014-4420
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3019
|
-
1.9
|
LOW
|
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-la…
|
NVD-CWE-Other
|
CVE-2014-4419
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3020
|
7.8
9.3
|
HIGH
Local
|
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application t…
|
CWE-20
Improper Input Validation
|
CVE-2014-4418
|
cpe:2.3:o:apple:iphone_os:7.1:* cpe:2.3:o:apple:iphone_os:7.1.1:* cpe:2.3:o:apple:iphone_os:7.0:* cpe:2.3:o:ap…
|
|
7.1.2
|
|
|
2024-11-21 11:10
2014-09-18
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|