CVE-2017-2447

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a...

CVE-2017-2468

CVE-2017-2468 affects WebKit on iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). It permits remote attackers to execute arbitrary code or cause memory corruption and application crashes via a crafted web site. Root cause: memory corruption in WebKit components leading to code exec...

CVE-2017-2468

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2460

CVE-2017-2460 affects WebKit on Apple platforms (iOS <10.3, Safari <10.1, tvOS

CVE-2017-2463

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2479

CVE-2017-2479 affects Apple's WebKit stack across several OSes (iOS, Safari, iCloud/Windows, iTunes/Windows, tvOS). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. The connected Apple security entries indicate remediation...

CVE-2017-2457

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2367

CVE-2017-2367 is documented as a WebKit/Safari family issue affecting Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The description states a remote attacker can bypass the Same Origin Policy and obtain sensitive information via a crafted website. Connected docs enumerat...

CVE-2017-2386

CVE-2017-2386 is a WebKit issue affecting Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2) that allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Root cause: memory corruption/validation issues in WebKit compon...

CVE-2017-2424

CVE-2017-2424 affects WebKit (Apple iOS and Safari components) due to mishandling of OpenGL shaders, enabling remote attackers to read sensitive information from process memory via a crafted webpage. Public details in connected sources indicate the issue impacts iOS 10.3 and Safari 10.1 (and earl...

CVE-2017-2392

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2017-2377

CVE-2017-2377 affects Apple WebKit Web Inspector in iOS 10.x and Safari 10.1. Root cause: memory corruption when closing a window during a debugger-pause state, leading to a potential denial of service. Public details indicate updates exist for Safari 10.1 and iOS 10.3 (patches released as part o...

CVE-2017-2377

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service memory corruption and application crash by leveraging a window-close action...

CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2396

CVE-2017-2396 affects Apple WebKit in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). Remote code execution or memory corruption leading to application crash via a crafted web site is described; root cause is memory corruption in WebKit when handling web content. Remediation is available:...

CVE-2017-2419

CVE-2017-2419 is a WebKit CSP bypass affecting Apple products (iOS <10.3, Safari

CVE-2017-2405

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a...

CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

CVE-2017-2476

CVE-2017-2476 affects WebKit in Apple products (iOS pre-10.3, Safari pre-10.1, tvOS pre-10.2). Root cause: type confusion in WebKit; exploit via crafted web content can trigger remote code execution, memory corruption, or application crash. Remediation: update to patched versions per Apple adviso...