Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

Cross site scripting

Cross-site scripting XSS vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a 1 drag-and-drop or 2 copy-and-paste operation...

Memory corruption

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

Code injection

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox...

Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

Memory corruption

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5145

CVE-2013-5145 involves kextd in Apple iOS before 7, where IPC message authorization is not properly verified. This allows a local attacker to load or unload kernel extensions via a crafted message, representing a local privilege escalation risk. Root cause: missing authorization checks in kextd’s...

CVE-2013-5129

Multiple cross-site scripting XSS vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a 1 drag-and-drop or 2 copy-and-paste operation...

CVE-2013-1041

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-1043

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5153

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

CVE-2013-1042

CVE-2013-1042 affects WebKit as used in Apple iOS before version 7. A crafted website can remotely cause memory corruption, leading to arbitrary code execution or a denial of service (application crash). The provided documents do not include a remediation.*

CVE-2011-2391

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service CPU consumption via crafted ICMPv6 packets...

CVE-2013-5151

Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows remote attackers to conduct cross-site scripting XSS attacks by uploading a file...

CVE-2013-1040

CVE-2013-1040 is listed among Apple iTunes Windows vulnerabilities prior to version 11.1.4. The connected Nessus/NASL entry indicates the WebKit/libxml/libxslt components may cause memory corruption, enabling remote code execution or a denial of service when visiting the iTunes Store via a crafte...

CVE-2013-0957

CVE-2013-0957 affects Apple iOS prior to 7, where a privilege-separation issue in Data Protection allowed a third‑party sandboxed app to repeatedly attempt passcode entry, bypassting the device’s Erase Data setting. The root cause is a failure to enforce passcode‑attempt limits across app sandbox...