CVE-2017-2459

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2470

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2469

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2476

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2457

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web si...

CVE-2017-2465

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

CVE-2017-2378

CVE-2017-2378 affects WebKit in Apple iOS and Safari prior to updates: iOS < 10.3 and Safari

CVE-2017-2463

CVE-2017-2463 affects Apple WebKit in multiple products: iOS before 10.3, Safari before 10.1, iCloud on Windows, iTunes on Windows, and tvOS before 10.2. The issue is a memory-corruption/use-after-free weakness in WebKit that could allow remote code execution or a denial of service via a crafted ...

CVE-2017-2392

CVE-2017-2392 is a memory corruption/ arbitrary code execution issue in WebKit used by Safari (macOS OS X) before Safari 10.1. The security entry notes that the WebKit component could be exploited via a crafted app to execute arbitrary code or cause a memory corruption leading to a denial of serv...

CVE-2017-2466

CVE-2017-2466 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Apple patches are documented in HT207600 (Sa...

CVE-2017-2445

CVE-2017-2445 is a UXSS/ cross-site scripting issue in WebKit used by Safari on iOS (and Safari/tvOS WebKit variants). The root cause is a validation/memory handling weakness in frame objects that can be triggered by crafted web content, enabling remote UXSS attacks. Affected platforms include iO...

CVE-2017-2446

CVE-2017-2446 affects Apple's WebKit components on iOS <10.3, Safari <10.1 and tvOS

CVE-2017-2471

CVE-2017-2471 is a use-after-free in WebKit affecting Apple WebKit-based components (iOS 10.3, Safari 10.1, watchOS 3.2). It allows remote code execution via a crafted web site. Public evidence includes an exploitation entry (Exploit-DB) and multiple advisories linking WebKitGTK+ variants. Remedi...

CVE-2017-2442

CVE-2017-2442 affects WebKit components (WebKit JavaScript Bindings) in Apple Safari/iOS and WebKitGTK+ ecosystems. Root cause: bypass of Same Origin Policy via crafted web content, enabling potential disclosure of sensitive data. Affected products include iOS <10.3 and Safari

CVE-2017-2479

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2386

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2419

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors...

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2465

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...