| Max CVSS | 9.3 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-4404 | 9.3 |
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
|
24-07-2024 - 16:04 | 18-09-2014 - 10:55 | |
| CVE-2014-4371 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
07-11-2019 - 15:36 | 18-09-2014 - 10:55 | |
| CVE-2014-4412 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4378 | 5.8 |
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4414 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4369 | 7.8 |
The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via an application that uses crafted arguments. <a href="http://cwe.mitre
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4415 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4388 | 9.3 |
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4375 | 7.2 |
Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (device crash) via vectors related to Mach ports. <a href="http://cwe.mitre.org/data/definitions/415.html" target
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4410 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4372 | 3.6 |
syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4357 | 2.1 |
Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4418 | 9.3 |
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4407 | 4.3 |
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function calls. <a href="http://cwe.mitre.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4389 | 9.3 |
Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4411 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4408 | 6.9 |
The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4380 | 9.3 |
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4421 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4373 | 7.8 |
The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted application. <a href="http://cwe.mi
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4405 | 9.3 |
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties. <a hre
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4379 | 7.1 |
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4413 | 6.8 |
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4381 | 9.3 |
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4419 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4383 | 4.3 |
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4420 | 1.9 |
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a diffe
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4422 | 6.8 |
The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot process, which allows attackers to bypass certain kernel-hardening protection mechanisms by using a user-space proc
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4377 | 6.8 |
Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-4364 | 2.9 |
The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong authentication methods, which allows remote attackers to calculate credentials by offering LEAP authentication from a crafted Wi-Fi AP and then performing a cryp
|
08-03-2019 - 16:06 | 18-09-2014 - 10:55 | |
| CVE-2014-1388 | 6.8 |
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other W
|
29-08-2017 - 01:34 | 14-08-2014 - 11:15 | |
| CVE-2014-1389 | 6.8 |
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other W
|
29-08-2017 - 01:34 | 14-08-2014 - 11:15 | |
| CVE-2014-1387 | 6.8 |
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other W
|
29-08-2017 - 01:34 | 14-08-2014 - 11:15 | |
| CVE-2014-1384 | 6.8 |
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other W
|
29-08-2017 - 01:34 | 14-08-2014 - 11:15 | |
| CVE-2014-1385 | 6.8 |
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other W
|
29-08-2017 - 01:34 | 14-08-2014 - 11:15 | |
| CVE-2011-2391 | 6.1 |
The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.
|
29-08-2017 - 01:29 | 19-09-2013 - 10:27 | |
| CVE-2013-6663 | 7.5 |
Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possi
|
07-01-2017 - 02:59 | 05-03-2014 - 05:11 |