CVE-2017-2476

CVE-2017-2476 affects WebKit in Apple products (iOS pre-10.3, Safari pre-10.1, tvOS pre-10.2). Root cause: type confusion in WebKit; exploit via crafted web content can trigger remote code execution, memory corruption, or application crash. Remediation: update to patched versions per Apple adviso...

CVE-2017-2468

CVE-2017-2468 affects WebKit on iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). It permits remote attackers to execute arbitrary code or cause memory corruption and application crashes via a crafted web site. Root cause: memory corruption in WebKit components leading to code exec...

CVE-2017-2459

CVE-2017-2459 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote code execution or memory corruption leading to application crashes via a crafted webpage. Root cause described as memory corruption in WebKit/component handling of web ...

CVE-2017-2460

CVE-2017-2460 affects WebKit on Apple platforms (iOS <10.3, Safari <10.1, tvOS

CVE-2017-2367

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2480

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2481

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2378

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark by leveraging mishandling of links during...

CVE-2017-2396

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2455

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2476

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2442

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2017-2486

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site...

CVE-2017-2433

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2486

CVE-2017-2486 is a WebKit-based spoofing vulnerability affecting Apple devices. The description confirms that iOS < 10.3 and Safari

CVE-2017-2475

CVE-2017-2475 affects WebKitGTK+ (and WebKit in related builds) with UXSS via crafted frames on malicious websites. Public docs in connected sources describe CVE-2017-2475 as a cross-site scripting/UXSS issue in WebKit components. Mitigation as per Gentoo and Arch Linux advisories is to upgrade W...

CVE-2017-2464

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2392

CVE-2017-2392 is a memory corruption/ arbitrary code execution issue in WebKit used by Safari (macOS OS X) before Safari 10.1. The security entry notes that the WebKit component could be exploited via a crafted app to execute arbitrary code or cause a memory corruption leading to a denial of serv...

CVE-2017-2405

The CVE-2017-2405 entry concerns WebKit Web Inspector in WebKit used by Apple Safari and iOS. A memory-corruption vulnerability could allow remote code execution or a denial of service via a crafted web page. Affected products include iOS prior to 10.3 and Safari prior to 10.1. Apple addresses th...