CVE-2017-2386

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2469

CVE-2017-2469 affects Apple’s WebKit components in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). A memory corruption issue in WebKit may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Exploitation was observed in public disclosures ...

CVE-2017-2464

CVE-2017-2464 affects WebKit components used by Apple iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). Root cause is memory corruption/validation issues in WebKit leading to arbitrary code execution or memory corruption with crafted web content. Apple patched this in iOS 10.3, Saf...

CVE-2017-2394

CVE-2017-2394 affects Apple WebKit components used by Safari, iOS before 10.3, tvOS before 10.2. A crafted web page can cause remote arbitrary code execution or memory corruption leading to a crash. Apple addresses include Safari 10.1, iOS 10.3, and tvOS 10.2 security updates. If exploiting statu...

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2454

CVE-2017-2454 affects WebKit in Apple products (iOS 10.x, Safari 10.x, tvOS 10.x). A crafted web site could execute arbitrary code or cause memory corruption and a crash. Apple released fixes in iOS 10.3, tvOS 10.2, and Safari/macOS security updates (per HT207600/HT207617). Remediation: update to...

CVE-2017-2457

CVE-2017-2457 affects WebKit in Apple products (notably iOS up to 10.3 and Safari up to 10.1). The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and a denial of service via a crafted web page. Connected documents indicate WebKit/WebKitGTK+ variants and...

CVE-2017-2424

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site...

CVE-2017-2470

CVE-2017-2470 affects WebKit components across Apple devices (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote arbitrary code execution or memory corruption via a crafted web site, potentially crashing the application. Root cause involves memory corruption in WebKi...

CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2395

CVE-2017-2395 is a WebKit vulnerability affecting multiple Apple platforms (iOS 10.3-, Safari 10.1-, tvOS 10.2-) where crafted web content can cause memory corruption leading to arbitrary code execution or a denial of service. Connected docs show broader WebKit exposure across WebKitGTK+/WebKitJS...

CVE-2017-2481

CVE-2017-2481 is an Apple WebKit/WebKitGTK+ related issue involving a type confusion/memory handling bug in WebKit that could allow remote code execution or memory corruption via a crafted web site. Affected products include iOS prior to 10.3, Safari prior to 10.1, and tvOS prior to 10.2. Mitigat...

CVE-2017-2447

CVE-2017-2447 concerns WebKit in Apple products (iOS, Safari, tvOS) with impact described as information disclosure and potential memory corruption. Connected sources confirm a WebKit issue that could allow remote attackers to obtain sensitive information or cause a denial of service via crafted ...

CVE-2017-2480

The CVE-2017-2480 entry concerns WebKit in multiple Apple platforms (iOS before 10.3, Safari before 10.1, iCloud/iTunes on Windows, tvOS before 10.2). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Connected documents co...

CVE-2017-2455

CVE-2017-2455 affects WebKit components in Apple products (iOS < 10.3, Safari < 10.1, tvOS

CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2464

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2433

CVE-2017-2433 concerns the WebKit component in Apple products (iOS before 10.3; Safari before 10.1) and allows an attacker to execute arbitrary code or cause a denial of service via a crafted website. The connected Nessus/NVL/OSV entries corroborate this, listing WebKit/WebKitGTK+ contexts with a...

CVE-2017-2405

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a...