CVE-2016-7640

CVE-2016-7640 affects Apple WebKit-based components across iOS (pre-10.2), Safari (pre-10.0.2), iCloud (pre-6.1), and iTunes (pre-12.5.4). The issue is described as memory-corruption in WebKit that can be triggered by processing crafted web content, enabling remote arbitrary code execution or cau...

CVE-2017-2363

CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...

CVE-2016-4613

CVE-2016-4613 affects Apple WebKit components in Safari (<10.0.1), iCloud (<6.0.1), iTunes (<12.5.2), and tvOS (

CVE-2017-2350

Affected products: iOS <10.2.1, Safari <10.0.3, tvOS

CVE-2016-7642

CVE-2016-7642 affects WebKit in Apple products (notably iOS before 10.2 and Safari before 10.0.2). The issue allows remote code execution or memory corruption/host denial of service via a crafted web site, caused by memory handling issues in WebKit when processing web content. The vulnerability i...

CVE-2016-7623

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site...

CVE-2017-2355

CVE-2017-2355 affects WebKit in Apple ecosystems (iOS before 10.2.1; Safari before 10.0.3; iCloud before 6.1.1; iTunes before 12.5.5; tvOS before 10.1.1). The issue enables remote code execution or a denial of service via crafted web content, due to multiple memory corruption and related reliabil...

CVE-2016-7639

CVE-2016-7639 is a WebKit/WebKitGTK+ memory-corruption type vulnerability that could allow remote code execution or DoS when visiting a crafted website. Public advisories tie this CVE to Apple products (iOS Safari, iCloud, iTunes, Safari) and to WebKit components, with reported impacts including ...

CVE-2016-7599

CVE-2016-7599 affects WebKit in Apple products (iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, iTunes before 12.5.4). Root cause: bypass of Same Origin Policy via crafted web content using HTTP redirects, enabling potential access to sensitive information. Implications align with a cro...

CVE-2017-2369

The CVE-2017-2369 entry affects WebKit in Apple products (iOS < 10.2.1, Safari < 10.0.3, tvOS

CVE-2016-7762

CVE-2016-7762 describes a WebKit-based cross-site scripting vulnerability impacting Apple iOS prior to 10.2, enabling XSS in Safari via malicious WebKit content. The connected Apple security note (iOS 10.2) confirms the issue was addressed in iOS 10.2. The vulnerability affects WebKit components ...

CVE-2016-7652

CVE-2016-7652 is a WebKit vulnerability reported for Apple products that could allow remote code execution or memory corruption via a crafted web site. Affected software includes iOS (pre-10.2) and Safari (pre-10.0.2), and related components (WebKit). The CVE is listed among WebKit fixes in SUSE/...

CVE-2017-2366

CVE-2017-2366 affects WebKit in Apple products (iOS <10.2.1, Safari <10.0.3, iCloud <6.1.1, iTunes

CVE-2016-7599

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2016-7641

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7646

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2364

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

CVE-2017-2366

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial ...

CVE-2017-2371

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site...

CVE-2016-7639

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...