About the security content of Safari 10.1.1

🗓️ 15 May 2017 00:00:00Reported by AppleType

This document describes the security content of Safari 10.1.1. It includes multiple memory corruption issues, inconsistent user interface issue, and a logic issue in the handling of WebKit Editor commands

Reporter	Title	Published	Views	Family All 416
zdt	Apple WebKit / Safari 10.0.3(12602.4.8) - Editor::Command::execute Universal Cross-Site Scripting Ex	25 May 201700:00	–	zdt
zdt	Apple WebKit / Safari 10.0.3(12602.4.8) - WebCore::FrameView::scheduleRelayout Use-After-Free Exploi	25 May 201700:00	–	zdt
zdt	WebKit - Stealing Variables via Page Navigation in FrameLoader::clear Exploit	25 May 201700:00	–	zdt
zdt	WebKit - enqueuePageshowEvent and enqueuePopstateEvent Universal Cross-Site Scripting Exploit	25 May 201700:00	–	zdt
zdt	WebKit - ContainerNode::parserInsertBefore Universal Cross-Site Scripting Exploit	25 May 201700:00	–	zdt
zdt	WebKit JSC JSObject::ensureLength Failure Check Vulnerability	1 Jun 201700:00	–	zdt
zdt	WebKit JSC emitPutDerivedConstructorToArrowFunctionContextScope Incorrect Check Vulnerability	1 Jun 201700:00	–	zdt
zdt	WebKit CachedFrame Universal Cross Site Scripting Vulnerability	1 Jun 201700:00	–	zdt
zdt	Apple Safari 10.1 - Spread Operator Integer Overflow Remote Code Execution Exploit	6 Jun 201700:00	–	zdt
zdt	WebKit JSC - Heap Buffer Overflow in Intl.getCanonicalLocales Exploit	17 Jun 201700:00	–	zdt

Source	Link
support	www.support.apple.com/en-us/HT201222

15 May 2017 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 26.8

CVSS 38.8

EPSS0.14349