CVE-2017-2504

CVE-2017-2504 affects Apple WebKit components in iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue is a logic/handling flaw in WebKit Editor commands that enables remote, universal cross‑site scripting (UXSS) via crafted web content. The vulnerability is tied to a W...

CVE-2017-2530

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause ...

CVE-2017-2505

CVE-2017-2505 affects Apple WebKit components used by iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit/JavaScriptCore pathways....

CVE-2017-2544

CVE-2017-2544 affects WebKit in Apple iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted web site. Apple patches were released: iOS 10.3.2 and Safari 10.1.1. Impac...

CVE-2017-2539

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2506

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2514

CVE-2017-2514 affects Apple’s WebKit stack in iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows a remote attacker to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption in WebKit. An exploit exists (Exploit-DB entry 42063) per CIRCL...

CVE-2017-2496

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2536

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2530

The CVE-2017-2530 issue affects WebKit components in Apple products including iOS before 10.3.2, Safari before 10.1.1, iCloud for Windows before 6.2.1, and tvOS before 10.2.1. Root cause: memory corruption in WebKit that can be triggered by a crafted web site, enabling remote code execution or ca...

CVE-2017-2538

CVE-2017-2538 affects WebKit/WebKitGTK+ components. The Apple stack (iOS before 10.3.2 and Safari before 10.1.1) is described as allowing remote code execution or memory corruption/DoS via a crafted website. Various distributions addressed this with WebKitGTK+ updates to version 2.18.0 (e.g., ope...

CVE-2017-2538

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2528

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with cached frames...

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-6984

CVE-2017-6984 affects WebKit components in multiple Apple platforms (iOS before 10.3.2, Safari before 10.1.1, iTunes on Windows, tvOS before 10.2.1). The issue allows remote code execution or memory corruption via a crafted webpage or site, with the WebKit memory handling/logic vulnerabilities ci...

CVE-2017-6984

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause...

CVE-2017-2515

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2544

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2514

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2528

The CVE-2017-2528 issue affects Apple’s WebKit in iOS before 10.3.2 and Safari before 10.1.1, enabling universal XSS (UXSS) via a crafted site that interacts with cached frames. Root cause is described as a WebKit caching/frame interaction flaw exploitable by remote attackers through malicious we...