CVE-2017-7142

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...

CVE-2017-7107

Technical details about CVE-2017-7107 are not publicly provided in the connected documents. The initial description mentions WebKit memory corruption via a crafted site affecting Apple platforms, but no vendor/product/version specifics or fixes are given here. Monitor for updates.

CVE-2017-7098

CVE-2017-7098 affects Apple WebKit components (iOS before 11, Safari before 11, tvOS before 11, iCloud for Windows before 7.0, iTunes before 12.7 on Windows). The issue enables remote attackers to execute arbitrary code or cause memory corruption and application crashes via a crafted web site. Ro...

CVE-2017-7144

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...

CVE-2017-7093

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7107

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7117

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7095

CVE-2017-7095: A memory corruption vulnerability in WebKit affects Apple devices including iOS, Safari, iCloud on Windows, iTunes on Windows, and tvOS (WebKit component). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Connected doc...

CVE-2017-7120

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7090

CVE-2017-7090 concerns WebKit in Apple products (iOS, Safari, iCloud/Win, iTunes/Win, tvOS) where a cookie-leak via a custom URL scheme could bypass Same Origin Policy and reveal sensitive cookies. Connected sources confirm the issue affects WebKit cookies handling and state that cookies from one...

CVE-2017-7091

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7102

CVE-2017-7102 affects Apple devices using WebKit: iOS before 11, Safari before 11, iCloud before 7.0 on Windows, iTunes before 12.7 on Windows, and tvOS before 11. The issue in WebKit allows remote attackers to execute arbitrary code or cause a memory corruption-based crash via a crafted website....

CVE-2017-7106

CVE-2017-7106 affects WebKit components in Apple platforms and is described as enabling address-bar spoofing when visiting malicious content. The affected products listed include iOS before 11, Safari before 11, and iCloud for Windows before 7.0. Apple security updates indicate that these issues ...

CVE-2017-7081

CVE-2017-7081 affects Apple WebKit components across multiple platforms (iOS, Safari, tvOS, iCloud for Windows, iTunes for Windows). The issue is a memory corruption vulnerability in WebKit that could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web ...

CVE-2017-7117

CVE-2017-7117 is a WebKit memory-corruption vulnerability that could allow remote code execution via a crafted web site. The initial description notes impact on Apple platforms (iOS before 11, Safari before 11, iCloud/iTunes on Windows, tvOS) and describes the flaw as a WebKit issue enabling arbi...

CVE-2017-7092

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that is mishandl...

CVE-2017-7091

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7099

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

CVE-2017-7100

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...