CVE-2017-2508

CVE-2017-2508 relates to WebKit in Apple Safari/WebKit on iOS and macOS before patches: iOS <10.3.2 and Safari

CVE-2017-2536

CVE-2017-2536 is a WebKit memory-corruption vulnerability affecting Apple devices: iOS < 10.3.2, Safari < 10.1.1, and tvOS

CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-2521

CVE-2017-2521 affects Apple WebKit in iOS, Safari, tvOS, and watchOS. Root cause is memory corruption in WebKit when rendering crafted web content, enabling remote code execution or memory corruption that can crash the app. Affected: iOS before 10.3.2; Safari before 10.1.1; tvOS before 10.2.1; wa...

CVE-2017-2531

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2510

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with pageshow events...

CVE-2017-2496

CVE-2017-2496 affects Apple WebKit components in iOS (before 10.3.2) and Safari (before 10.1.1), allowing remote code execution or memory corruption via a crafted website, potentially crashing the app. Connected documents corroborate that patches addressing this family of issues were released in ...

CVE-2017-2499

The CVE-2017-2499 entry concerns a memory corruption vulnerability in the WebKit Web Inspector component affecting Apple devices: iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows an attacker to execute arbitrary unsigned code or cause a denial of service via...

CVE-2017-2506

CVE-2017-2506 affects WebKit in Apple products (iOS before 10.3.2 and Safari before 10.1.1). The issue allows remote attackers to trigger memory corruption and potentially execute arbitrary code or crash the app via a crafted webpage. The root cause is a WebKit memory handling issue; Apple lists ...

CVE-2017-2510

CVE-2017-2510 concerns a UXSS flaw in WebKit used by iOS and Safari (iOS < 10.3.2; Safari

CVE-2017-2515

CVE-2017-2515 affects WebKit in Apple Safari on iOS (pre-10.3.2), Safari (<10.1.1), and tvOS (

CVE-2017-2526

The CVE-2017-2526 issue affects Apple WebKit components in iOS prior to 10.3.2 and Safari prior to 10.1.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via crafted web content due to memory corruption in WebKit. Apple’s advisories indicate affec...

CVE-2017-2531

CVE-2017-2531 is a WebKit memory‑corruption vulnerability affecting Apple products (iOS before 10.3.2, Safari before 10.1.1, tvOS before 10.2.1). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Public advisories list multiple WebKit...

CVE-2017-2547

CVE-2017-2547 maps to a WebKit memory corruption vulnerability affecting Apple iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Root cause: memory corruption in WebKit components used b...

CVE-2017-2549

CVE-2017-2549 affects WebKit-based components in Apple products: iOS <10.3.2, Safari <10.1.1, and tvOS

CVE-2017-2504

CVE-2017-2504 affects Apple WebKit components in iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue is a logic/handling flaw in WebKit Editor commands that enables remote, universal cross‑site scripting (UXSS) via crafted web content. The vulnerability is tied to a W...

CVE-2017-2530

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause ...

CVE-2017-2505

CVE-2017-2505 affects Apple WebKit components used by iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit/JavaScriptCore pathways....

CVE-2017-2544

CVE-2017-2544 affects WebKit in Apple iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted web site. Apple patches were released: iOS 10.3.2 and Safari 10.1.1. Impac...

CVE-2017-2539

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...