CVE-2017-2508

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly interacts with container nodes...

CVE-2017-2515

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2506

CVE-2017-2506 affects WebKit in Apple products (iOS before 10.3.2 and Safari before 10.1.1). The issue allows remote attackers to trigger memory corruption and potentially execute arbitrary code or crash the app via a crafted webpage. The root cause is a WebKit memory handling issue; Apple lists ...

CVE-2017-2510

CVE-2017-2510 concerns a UXSS flaw in WebKit used by iOS and Safari (iOS < 10.3.2; Safari

CVE-2017-6984

CVE-2017-6984 affects WebKit components in multiple Apple platforms (iOS before 10.3.2, Safari before 10.1.1, iTunes on Windows, tvOS before 10.2.1). The issue allows remote code execution or memory corruption via a crafted webpage or site, with the WebKit memory handling/logic vulnerabilities ci...

CVE-2017-2521

CVE-2017-2521 affects Apple WebKit in iOS, Safari, tvOS, and watchOS. Root cause is memory corruption in WebKit when rendering crafted web content, enabling remote code execution or memory corruption that can crash the app. Affected: iOS before 10.3.2; Safari before 10.1.1; tvOS before 10.2.1; wa...

CVE-2017-2505

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2538

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2530

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause ...

CVE-2017-2528

The CVE-2017-2528 issue affects Apple’s WebKit in iOS before 10.3.2 and Safari before 10.1.1, enabling universal XSS (UXSS) via a crafted site that interacts with cached frames. Root cause is described as a WebKit caching/frame interaction flaw exploitable by remote attackers through malicious we...

CVE-2017-2547

CVE-2017-2547 maps to a WebKit memory corruption vulnerability affecting Apple iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Root cause: memory corruption in WebKit components used b...

CVE-2017-2514

CVE-2017-2514 affects Apple’s WebKit stack in iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows a remote attacker to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption in WebKit. An exploit exists (Exploit-DB entry 42063) per CIRCL...

CVE-2017-2496

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-2508

CVE-2017-2508 relates to WebKit in Apple Safari/WebKit on iOS and macOS before patches: iOS <10.3.2 and Safari

CVE-2017-2526

The CVE-2017-2526 issue affects Apple WebKit components in iOS prior to 10.3.2 and Safari prior to 10.1.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via crafted web content due to memory corruption in WebKit. Apple’s advisories indicate affec...

CVE-2017-2526

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-2544

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...

CVE-2017-6980

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-6984

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTunes before 12.6.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause...