CVE-2013-1043

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2011-2391

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service CPU consumption via crafted ICMPv6 packets...

CVE-2013-5138

CVE-2013-5138 affects Apple iOS (pre-7) with IOCatalogue in IOKitUser. A crafted local app can cause a NULL pointer dereference, leading to a denial of service (device crash). Root cause is described as a NULL pointer dereference in IOCatalogue; no remediation details are provided in the connecte...

CVE-2013-5150

CVE-2013-5150 is a Safari history-clearing flaw affecting Apple iOS prior to 7, where clearing a tab’s history did not clear the back/forward history for that open tab. The issue enables physically proximate attackers with access to an unattended workstation to potentially view sensitive informat...

CVE-2013-5158

In Apple iOS before version 7, the Social subsystem did not properly restrict access to the Twitter icon cache, enabling physically proximate attackers to disclose information about recent Twitter interactions. Affected component: Social subsystem cache handling in iOS 6.x and earlier. Root cause...

CVE-2013-1047

CVE-2013-1047 affects WebKit as used in Apple iOS before version 7. A crafted website can trigger memory corruption in WebKit, allowing remote code execution or a denial of service (application crash). The description does not specify exact vulnerable products/versions beyond iOS prior to 7, nor ...

CVE-2013-1045

CVE-2013-1045 concerns WebKit as used in Apple iOS prior to 7. The advisory states that remote attackers can trigger arbitrary code execution or cause a denial of service via a crafted website, via memory corruption in WebKit. Connected documents corroborate multiple references to this set of Web...

CVE-2013-0957

CVE-2013-0957 affects Apple iOS prior to 7, where a privilege-separation issue in Data Protection allowed a third‑party sandboxed app to repeatedly attempt passcode entry, bypassting the device’s Erase Data setting. The root cause is a failure to enforce passcode‑attempt limits across app sandbox...

CVE-2013-1046

CVE-2013-1046 concerns WebKit as used in Apple iOS prior to version 7. The vulnerability allows a remote attacker to execute arbitrary code or cause a memory corruption crash via a crafted web site, potentially leading to application instability or compromise. The available connected records corr...

CVE-2013-5145

CVE-2013-5145 involves kextd in Apple iOS before 7, where IPC message authorization is not properly verified. This allows a local attacker to load or unload kernel extensions via a crafted message, representing a local privilege escalation risk. Root cause: missing authorization checks in kextd’s...

CVE-2013-1042

CVE-2013-1042 affects WebKit as used in Apple iOS before version 7. A crafted website can remotely cause memory corruption, leading to arbitrary code execution or a denial of service (application crash). The provided documents do not include a remediation.*

CVE-2013-1040

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

CVE-2013-1046

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-5131

Cross-site scripting XSS vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-5145

kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to 1 load or 2 unload kernel extensions via a crafted message...

CVE-2013-5157

The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-1044

CVE-2013-1044 affects WebKit as used in Apple iOS prior to version 7. A crafted website can trigger memory corruption in WebKit, allowing remote attackers to execute arbitrary code or cause an application crash. The connected documents corroborate a WebKit/libxml/libxslt memory‑corruption pattern...

CVE-2013-5151

CVE-2013-5151 affects Mobile Safari on iOS prior to 7. The issue arises when a document served with Content-Type: text/plain is treated as HTML, allowing remote attackers to trigger cross-site scripting by uploading a file. Apple’s vulnerability entry for Safari (CVE-2013-5151) notes the impact a...