CVE-2017-7161

CVE-2017-7161 affects Safari/WebKit’s Web Inspector. An arbitrary code execution vulnerability exists in Safari before 11.0.2 due to a command-injection flaw triggered by crafting special characters in WebKit Web Inspector. Exploitation would allow a remote attacker to run arbitrary code on the a...

CVE-2018-4120

Affected software: Apple iOS prior to 11.3, Safari prior to 11.1, iCloud for Windows prior to 7.4, iTunes for Windows prior to 12.7.4, and tvOS prior to 11.3, all involving WebKit. Root cause: memory corruption in WebKit leading to remote code execution or denial of service via a crafted web site...

CVE-2018-4165

CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2018-4133

CVE-2018-4133 affects Safari/WebKit prior to Safari 11.1. A cross-site scripting (XSS) vulnerability in WebKit could allow a remote attacker to inject arbitrary web script or HTML via a crafted URL. Exploitation requires a user to visit a malicious page; impact is remote script execution within t...

CVE-2018-4114

CVE-2018-4114 concerns the WebKit component in multiple Apple platforms. A memory corruption issue via a crafted website could allow remote code execution or a denial of service, affecting: iOS<11.3, Safari<11.1, iCloud<7.4 on Windows, iTunes<12.7.4 on Windows, tvOS<11.3, and watchOS

CVE-2018-4096

CVE-2018-4096 is a WebKit memory-corruption issue exploited via a crafted web site, affecting multiple Apple platforms (iOS <11.2.5, macOS <10.13.3, Safari <11.0.3, iCloud/iTunes on Windows, tvOS <11.2.5, watchOS

CVE-2018-4121

CVE-2018-4121 involves WebKit in multiple Apple platforms (iOS, iPhone Safari, macOS Safari, iCloud for Windows, iTunes for Windows, tvOS, watchOS) and stems from memory corruption when processing crafted web content, allowing remote code execution. Apple’s security notes for Safari 11.1 and iOS ...

CVE-2018-4127

CVE-2018-4127 affects Apple WebKit components across multiple Apple platforms (iOS < 11.3, Safari < 11.1, tvOS

CVE-2018-4119

CVE-2018-4119 affects Apple’s WebKit component across multiple platforms (iOS prior to 11.3, Safari prior to 11.1, iCloud/Windows and tvOS variants). The issue allows remote attacker code execution or a memory-corruption–driven DoS via a crafted website, caused by memory handling/memory-corruptio...

CVE-2018-4146

CVE-2018-4146 affects Apple WebKit components across iOS, Safari, tvOS, watchOS, iCloud/Desktop WebKit stack. The issue allows memory corruption triggered by a crafted website, potentially causing a denial of service. Affected: iOS before 11.3; Safari before 11.1; iCloud on Windows before 7.4; iT...

CVE-2018-4118

CVE-2018-4118 affects Apple's WebKit stack used by iOS ≤11.2/11.2.x and related components on macOS/tvOS, iCloud for Windows, and iTunes for Windows. Affected: WebKit-based rendering; vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted websit...

CVE-2018-4113

CVE-2018-4113 affects WebKit’s JavaScriptCore in multiple Apple platforms (iOS <11.3, Safari

CVE-2018-4101

CVE-2018-4101 affects WebKit in Apple products (iOS < 11.3, Safari < 11.1, iCloud < 7.4 for Windows, iTunes < 12.7.4 on Windows, tvOS

CVE-2018-4163

CVE-2018-4163 affects WebKit components in Apple platforms (iOS <11.3, Safari <11.1, iCloud <7.4 on Windows, iTunes <12.7.4 on Windows, tvOS <11.3, watchOS

CVE-2018-4088

The CVE-2018-4088 entry maps to memory-corruption flaws in WebKit that could allow remote code execution via crafted web content in Apple platforms. Affected products include iOS before 11.2.5, macOS before 10.13.3, Safari before 11.0.3, iCloud/iTunes on Windows, tvOS before 11.2.5, and watchOS b...

CVE-2018-4130

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...

CVE-2017-2493

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2018-4117

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It...

CVE-2018-4114

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...