16465 matches found
CVE-2018-4165
CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...
CVE-2018-4118
CVE-2018-4118 affects Apple's WebKit stack used by iOS ≤11.2/11.2.x and related components on macOS/tvOS, iCloud for Windows, and iTunes for Windows. Affected: WebKit-based rendering; vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted websit...
CVE-2018-4128
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...
CVE-2018-4163
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4122
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2017-7071
CVE-2017-7071 affects Apple Safari prior to 10.1 via the WebKit component. The issue enables remote attackers to execute arbitrary code or trigger memory corruption and an application crash when visiting a crafted site. The NVD entry confirms a WebKit-based concern with both code execution and me...
CVE-2018-4088
The CVE-2018-4088 entry maps to memory-corruption flaws in WebKit that could allow remote code execution via crafted web content in Apple platforms. Affected products include iOS before 11.2.5, macOS before 10.13.3, Safari before 11.0.3, iCloud/iTunes on Windows, tvOS before 11.2.5, and watchOS b...
CVE-2018-4113
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore...
CVE-2018-4130
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attacker...
CVE-2017-7071
An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...
CVE-2018-4125
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
CVE-2018-4133
CVE-2018-4133 affects Safari/WebKit prior to Safari 11.1. A cross-site scripting (XSS) vulnerability in WebKit could allow a remote attacker to inject arbitrary web script or HTML via a crafted URL. Exploitation requires a user to visit a malicious page; impact is remote script execution within t...
CVE-2018-4133
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2017-13885
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2018-4113
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves a JavaScriptCore...
CVE-2017-13885
CVE-2017-13885 affects WebKit in several Apple products: iOS before 11.2, Safari before 11.0.2, iCloud on Windows before 7.2, iTunes for Windows before 12.7.2, and tvOS before 11.2. Root cause is memory corruption in WebKit that could allow remote attackers to execute arbitrary code or cause a de...
CVE-2018-4089
CVE-2018-4089 involves the WebKit component in several Apple platforms. According to Apple security content, affected products include iOS prior to 11.2.5, macOS prior to 10.13.3, Safari prior to 11.0.3, and tvOS prior to 11.2.5. The issue allows remote attackers to execute arbitrary code or caus...
CVE-2017-2493
CVE-2017-2493 corresponds to a WebKit/Safari vulnerability where loading an HTMLObjectElement could bypass Same Origin Policy via crafted objects and JavaScript URLs, enabling potential cross-origin information leakage. The Seebug writeup provides a PoC and notes SOP checks in HTMLPlugInImageElem...
CVE-2017-13884
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...