CVE-2015-1069

CVE-2015-1069 affects WebKit used by Apple Safari: memory‑corruption path in WebKit allows remote code execution or memory corruption leading to app crash when visiting crafted sites. Affected Safari versions are before 6.2.4 (Mac) / 7.x before 7.1.4 / 8.x before 8.0.4. The description indicates ...

CVE-2015-1078

CVE-2015-1078 affects WebKit as used by Apple Safari: memory corruption in WebKit could be triggered by a crafted website, allowing remote arbitrary code execution or a denial of service. Impact is tied to Safari versions before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. Remediation is to upd...

CVE-2015-1068

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1084

CVE-2015-1084 affects WebKit as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. The UI may display URLs inconsistently, allowing remote attackers to conduct phishing attacks via a crafted URL. The connected documents confirm the affected product/section and the describe...

CVE-2015-1073

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1080

CVE-2015-1080 affects WebKit used in Apple Safari (Windows/macOS) across multiple versions: Safari before 6.2.4, Safari on 7.x before 7.1.4, and Safari 8.x before 8.0.4. The issue allows remote attackers to trigger memory corruption via a crafted web site, enabling arbitrary code execution or a d...

CVE-2015-1077

CVE-2015-1077 is a WebKit/Apple Safari vulnerability affecting WebKit in Safari versions prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4, enabling remote code execution or memory corruption leading to DoS via a crafted site. The connected Mageia advisory MGASA-2016-0116 notes a fix: we...

CVE-2015-1069

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1078

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1082

CVE-2015-1082 involves a WebKit memory corruption vulnerability in Apple Safari prior to versions 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4. A crafted website could remotely execute arbitrary code or cause a denial of service. The issue is triggered by memory corruption within WebKit, enablin...

CVE-2015-1072

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1081

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1075

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1081

CVE-2015-1081 affects WebKit as used in Apple Safari prior to versions 6.2.4 (Mac), 7.x prior to 7.1.4, and 8.x prior to 8.0.4. A crafted website can trigger memory corruption, allowing remote code execution or a denial of service (application crash). The issue is documented across multiple sourc...

CVE-2015-1073

The CVE-2015-1073 entry affects WebKit as used in Apple Safari. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Affected Safari/WebKit versions include Safari before 6.2.4, Safari 7....

CVE-2015-1084

The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL...

CVE-2015-1079

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1080

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2015-1070

CVE-2015-1070 refers to a WebKit vulnerability in Apple Safari prior to 6.2.4, 7.x prior to 7.1.4, and 8.x prior to 8.0.4, where a crafted web site could cause memory corruption leading to remote arbitrary code execution or a crash/DoS. The vulnerability is rooted in the WebKit component used by ...

Apple Safari WebKit Vulnerabilities Patched

Apple on Tuesday pushed out new versions of its Safari browser that address 17 security vulnerabilities in the WebKit engine. Safari 8.04, 7.14 and 6.24 patch multiple memory corruption issues in WebKit, Apple said. “These issues were addressed through improved memory handling,” Apple said in its...