CVE-2017-2424

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site...

CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2470

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2395

CVE-2017-2395 is a WebKit vulnerability affecting multiple Apple platforms (iOS 10.3-, Safari 10.1-, tvOS 10.2-) where crafted web content can cause memory corruption leading to arbitrary code execution or a denial of service. Connected docs show broader WebKit exposure across WebKitGTK+/WebKitJS...

CVE-2017-2433

CVE-2017-2433 concerns the WebKit component in Apple products (iOS before 10.3; Safari before 10.1) and allows an attacker to execute arbitrary code or cause a denial of service via a crafted website. The connected Nessus/NVL/OSV entries corroborate this, listing WebKit/WebKitGTK+ contexts with a...

CVE-2017-2394

CVE-2017-2394 affects Apple WebKit components used by Safari, iOS before 10.3, tvOS before 10.2. A crafted web page can cause remote arbitrary code execution or memory corruption leading to a crash. Apple addresses include Safari 10.1, iOS 10.3, and tvOS 10.2 security updates. If exploiting statu...

CVE-2017-2481

CVE-2017-2481 is an Apple WebKit/WebKitGTK+ related issue involving a type confusion/memory handling bug in WebKit that could allow remote code execution or memory corruption via a crafted web site. Affected products include iOS prior to 10.3, Safari prior to 10.1, and tvOS prior to 10.2. Mitigat...

CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2468

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2405

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a...

CVE-2017-2464

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2415

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code by leveraging an unspecifie...

CVE-2017-2466

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2017-2469

CVE-2017-2469 affects Apple’s WebKit components in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). A memory corruption issue in WebKit may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Exploitation was observed in public disclosures ...

CVE-2017-2470

CVE-2017-2470 affects WebKit components across Apple devices (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote arbitrary code execution or memory corruption via a crafted web site, potentially crashing the application. Root cause involves memory corruption in WebKi...

CVE-2017-2447

CVE-2017-2447 concerns WebKit in Apple products (iOS, Safari, tvOS) with impact described as information disclosure and potential memory corruption. Connected sources confirm a WebKit issue that could allow remote attackers to obtain sensitive information or cause a denial of service via crafted ...

CVE-2017-2480

The CVE-2017-2480 entry concerns WebKit in multiple Apple platforms (iOS before 10.3, Safari before 10.1, iCloud/iTunes on Windows, tvOS before 10.2). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Connected documents co...

CVE-2017-2464

CVE-2017-2464 affects WebKit components used by Apple iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). Root cause is memory corruption/validation issues in WebKit leading to arbitrary code execution or memory corruption with crafted web content. Apple patched this in iOS 10.3, Saf...