CVE-2017-2481

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

CVE-2017-2464

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2392

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2017-2378

CVE-2017-2378 affects WebKit in Apple iOS and Safari prior to updates: iOS < 10.3 and Safari

CVE-2017-2392

CVE-2017-2392 is a memory corruption/ arbitrary code execution issue in WebKit used by Safari (macOS OS X) before Safari 10.1. The security entry notes that the WebKit component could be exploited via a crafted app to execute arbitrary code or cause a memory corruption leading to a denial of serv...

CVE-2017-2405

The CVE-2017-2405 entry concerns WebKit Web Inspector in WebKit used by Apple Safari and iOS. A memory-corruption vulnerability could allow remote code execution or a denial of service via a crafted web page. Affected products include iOS prior to 10.3 and Safari prior to 10.1. Apple addresses th...

CVE-2017-2442

CVE-2017-2442 affects WebKit components (WebKit JavaScript Bindings) in Apple Safari/iOS and WebKitGTK+ ecosystems. Root cause: bypass of Same Origin Policy via crafted web content, enabling potential disclosure of sensitive data. Affected products include iOS <10.3 and Safari

CVE-2017-2445

CVE-2017-2445 is a UXSS/ cross-site scripting issue in WebKit used by Safari on iOS (and Safari/tvOS WebKit variants). The root cause is a validation/memory handling weakness in frame objects that can be triggered by crafted web content, enabling remote UXSS attacks. Affected platforms include iO...

CVE-2017-2446

CVE-2017-2446 affects Apple's WebKit components on iOS <10.3, Safari <10.1 and tvOS

CVE-2017-2463

CVE-2017-2463 affects Apple WebKit in multiple products: iOS before 10.3, Safari before 10.1, iCloud on Windows, iTunes on Windows, and tvOS before 10.2. The issue is a memory-corruption/use-after-free weakness in WebKit that could allow remote code execution or a denial of service via a crafted ...

CVE-2017-2466

CVE-2017-2466 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Apple patches are documented in HT207600 (Sa...

CVE-2017-2471

CVE-2017-2471 is a use-after-free in WebKit affecting Apple WebKit-based components (iOS 10.3, Safari 10.1, watchOS 3.2). It allows remote code execution via a crafted web site. Public evidence includes an exploitation entry (Exploit-DB) and multiple advisories linking WebKitGTK+ variants. Remedi...

CVE-2017-2475

CVE-2017-2475 affects WebKitGTK+ (and WebKit in related builds) with UXSS via crafted frames on malicious websites. Public docs in connected sources describe CVE-2017-2475 as a cross-site scripting/UXSS issue in WebKit components. Mitigation as per Gentoo and Arch Linux advisories is to upgrade W...

CVE-2017-2486

CVE-2017-2486 is a WebKit-based spoofing vulnerability affecting Apple devices. The description confirms that iOS < 10.3 and Safari

CVE-2017-2367

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2396

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2433

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2442

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

CVE-2017-2455

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...