Code injection

The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL...

UBUNTU-CVE-2015-1072

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1068

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1082

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2015-1070

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2015-1080

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

UBUNTU-CVE-2015-1082

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1072

CVE-2015-1072 affects WebKit as used in Apple Safari: remote attackers can trigger memory corruption via a crafted website, leading to arbitrary code execution or a DoS/crash. Affected Safari versions are before 6.2.4 (Mac) and before 7.1.4 (7.x) and 8.x before 8.0.4. Root cause is memory corrupt...

CVE-2015-1079

CVE-2015-1079 pertains to WebKit used by Apple Safari. The vulnerability arises from memory corruption in WebKit that can be triggered by a crafted website, allowing a remote attacker to execute arbitrary code or cause a denial of service (application crash). The issue affects Safari versions: be...

CVE-2015-1068

CVE-2015-1068 affects WebKit as used in Apple Safari prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4. A crafted web site could cause remote code execution or memory corruption leading to an application crash (DoS). This entry is tied to Apple Safari/WebKit, and is described as a distin...

CVE-2015-1083

CVE-2015-1083 affects WebKit as used by Apple Safari: remote attackers can cause arbitrary code execution or memory corruption leading to a potential crash via a crafted website. The vulnerability is cited for Safari versions before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. Remediation is to...

CVE-2015-1071

CVE-2015-1071 affects WebKit as used by Apple Safari (before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption and app crashes. Connected documents corroborate that...

CVE-2015-1071

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1077

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1076

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1075

CVE-2015-1075 affects WebKit used by Apple Safari. The issue allows remote attackers to execute arbitrary code or cause a memory corruption/DoS crash via a crafted website. Vulnerable versions include Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. Mitigation: update Safari/WebKit to...

CVE-2015-1074

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1082

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1076

CVE-2015-1076 affects WebKit as used by Apple Safari (pre-6.2.4, pre-7.1.4, pre-8.0.4). The issue allows remote attackers to run arbitrary code or cause memory corruption and application crashes via a crafted website. Public details in the Initial document describe the vulnerability, while connec...

CVE-2015-1074

CVE-2015-1074 affects WebKit as used by Apple Safari prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4. The vulnerability arises from memory corruption in WebKit that can be exploited by visiting a crafted site to allow remote code execution or cause a denial of service. Connected source...