CVE-2017-2433

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2457

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2465

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

CVE-2017-2476

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2470

CVE-2017-2470 affects WebKit components across Apple devices (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote arbitrary code execution or memory corruption via a crafted web site, potentially crashing the application. Root cause involves memory corruption in WebKi...

CVE-2017-2469

CVE-2017-2469 affects Apple’s WebKit components in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). A memory corruption issue in WebKit may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Exploitation was observed in public disclosures ...

CVE-2017-2386

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2480

The CVE-2017-2480 entry concerns WebKit in multiple Apple platforms (iOS before 10.3, Safari before 10.1, iCloud/iTunes on Windows, tvOS before 10.2). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Connected documents co...

CVE-2017-2479

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2455

CVE-2017-2455 affects WebKit components in Apple products (iOS < 10.3, Safari < 10.1, tvOS

CVE-2017-2454

CVE-2017-2454 affects WebKit in Apple products (iOS 10.x, Safari 10.x, tvOS 10.x). A crafted web site could execute arbitrary code or cause memory corruption and a crash. Apple released fixes in iOS 10.3, tvOS 10.2, and Safari/macOS security updates (per HT207600/HT207617). Remediation: update to...

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2457

CVE-2017-2457 affects WebKit in Apple products (notably iOS up to 10.3 and Safari up to 10.1). The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and a denial of service via a crafted web page. Connected documents indicate WebKit/WebKitGTK+ variants and...

CVE-2017-2447

CVE-2017-2447 concerns WebKit in Apple products (iOS, Safari, tvOS) with impact described as information disclosure and potential memory corruption. Connected sources confirm a WebKit issue that could allow remote attackers to obtain sensitive information or cause a denial of service via crafted ...

CVE-2017-2465

CVE-2017-2465 affects WebKitGTK+ (WebKitGTK+ before 2.16.1) with remote arbitrary code execution via crafted web content. Upstream fix is in WebKitGTK+ 2.16.1; distributions (e.g., Arch/Ubuntu/Gentoo advisories) note multiple WebKit GTK+ vulnerabilities and require upgrading to the fixed version ...

CVE-2017-2465

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2464

CVE-2017-2464 affects WebKit components used by Apple iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). Root cause is memory corruption/validation issues in WebKit leading to arbitrary code execution or memory corruption with crafted web content. Apple patched this in iOS 10.3, Saf...

CVE-2017-2395

CVE-2017-2395 is a WebKit vulnerability affecting multiple Apple platforms (iOS 10.3-, Safari 10.1-, tvOS 10.2-) where crafted web content can cause memory corruption leading to arbitrary code execution or a denial of service. Connected docs show broader WebKit exposure across WebKitGTK+/WebKitJS...