Latest CVE Feed
-
9.3
HIGHCVE-2014-4418
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fiel... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4415
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4414
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4413
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4412
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4411
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2014-4410
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs ... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-4409
WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads HTML5 application-cache data that had been stored during normal browsing.... Read more
Affected Products : iphone_os- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
6.9
MEDIUMCVE-2014-4408
The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (out-of-bounds read and device crash) via a crafted call.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-4407
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function calls.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4405
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.... Read more
- Actively Exploited
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4389
Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4388
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fiel... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2014-4386
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.... Read more
Affected Products : iphone_os- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
1.9
LOWCVE-2014-4384
Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle.... Read more
Affected Products : iphone_os- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2014-4383
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4381
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2014-4380
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2014-4379
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application.... Read more
- Published: Sep. 18, 2014
- Modified: Apr. 12, 2025