CVE-2016-4734

CVE-2016-4734 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The connected Nessus entries describe the vulnerable component as WebKit and state that exploitation via a crafted web site can lead to remote code execution or memory corruption resulting in a denial of se...

CVE-2016-4731

CVE-2016-4731 is associated with WebKit in Apple iOS before 10 and Safari before 10, with the vulnerability described as a memory corruption issue in a crafted web site that could allow remote code execution or cause a denial of service. Connected sources confirm this CVE is part of a set of WebK...

CVE-2016-4737

CVE-2016-4737 affects WebKit-based components in Apple platforms: iOS prior to 10, Safari prior to 10, tvOS prior to 10, and watchOS prior to 3. The vulnerability is a memory corruption issue in WebKit that could allow a remote attacker to execute arbitrary code or cause a denial of service via a...

CVE-2016-4735

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734...

CVE-2016-4763

WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-4759

CVE-2016-4759 affects WebKit in Apple iOS prior to 10, tvOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) through a crafted web site. It is described as a...

CVE-2016-4766

CVE-2016-4766 affects WebKit-based components in Apple iOS (before 10), tvOS (before 10), iTunes (before 12.5.1 on Windows), and Safari (before 10). The issue allows an attacker to trigger remote code execution or a memory corruption-based denial of service via a crafted web site. The vulnerabili...

CVE-2016-4765

CVE-2016-4765 is described in the initial document as affecting WebKit components across multiple Apple platforms: iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10. The vulnerability enables an attacker to remotely execute arbitrary code or cause a denial of se...

CVE-2016-4758

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site...

CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...

CVE-2016-4762

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4760

CVE-2016-4760 concerns WebKit in Apple iOS (pre-10), iTunes for Windows (pre-12.5.1), and Safari (pre-10). The vulnerability allows remote attackers to perform DNS rebinding against non-HTTP Safari sessions by exploiting HTTP/0.9 support. Public references indicate multiple WebKit-related CVEs ar...

CVE-2016-4730

CVE-2016-4730 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Root cause: memory corruption in WebKit when handling web c...

CVE-2016-4728

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site...

UBUNTU-CVE-2016-4733

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-5170

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified oth...

CVE-2016-4759

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767,...

CVE-2016-4762

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4765

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4766, CVE-2016-4767,...

CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...