3762 matches found
Information disclosure
iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4448
The CVE-2014-4448 entry concerns Apple iOS House Arrest prior to iOS 8.1, where the Documents directory could be exposed because files were encrypted with a key protected only by the hardware UID. This is caused by relying on the hardware UID as the encryption key, enabling physically proximate a...
CVE-2014-4449
iCloud Data Access in Apple iOS before 8.1 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-4450
The QuickType feature in the Keyboards subsystem in Apple iOS before 8.1 collects typing-prediction data from fields with an off autocomplete attribute, which makes it easier for attackers to discover credentials by reading credential values within unintended DOM input elements...
CVE-2014-4450
CVE-2014-4450 maps to Apple iOS QuickType credential-leak risk in the Keyboards subsystem prior to iOS 8.1. The vulnerability arises because typing-prediction data could be learned from fields with autocomplete enabled, enabling credential values to be read within unintended DOM input elements. T...
Apple iOS < 8.1 Multiple Vulnerabilities
Binary data 8560.prm...
Apple iOS < 8.1 Multiple Vulnerabilities (POODLE)
Binary data appleios81check.nbin...
Google Chrome for Apple iOS < 38.0.2125.59 Information Disclosure
Binary data 8546.prm...
Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability
Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...
Apple iOS multiple security vulnerabilities
Weak authentication, unauthorized access, information leakage, race conditions, protection bypass, memory corruptions on different formats parsing, XXE...
CVE-2014-4420
The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...
CVE-2014-4423
The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and metadata via a crafted application...
CVE-2014-4367
Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attackers to launch unintended calls by speaking a telephone number...
CVE-2014-4378
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a crafted PDF document...
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...
CVE-2014-4375
Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...
CVE-2014-4384
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle...
CVE-2014-4389
Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments...