CVE-2018-4443

CVE-2018-4443 is a memory corruption issue in WebKit linked to Apple products. The description in the initial document notes a memory corruption vulnerability that was addressed with improved memory handling and affected versions before the corresponding patches: iOS 12.1.1, tvOS 12.1.1, watchOS ...

CVE-2010-4494

CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...

CVE-2018-4262

CVE-2018-4262 affects Safari (pre-11.1.2), iTunes for Windows (pre-12.8), iOS (pre-11.4.1), tvOS (pre-11.4.1), and iCloud for Windows (pre-7.6). The issue is described as memory corruption addressed with improved memory handling. The connected documents confirm these products/versions and the nat...

CVE-2018-4438

CVE-2018-4438 is a memory-corruption vulnerability in WebKit/Safari affecting devices with iOS < 12.1.1, tvOS < 12.1.1, watchOS

CVE-2018-4315

CVE-2018-4315 is a use-after-free vulnerability in WebKit-related components that affected iOS 12-, tvOS 12-, Safari 12-, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The issue was addressed with improved memory management. Published Apple advisories (HT209106/HT209140/HT209141) document ...

CVE-2019-6234

CVE-2019-6234 is a memory corruption issue affecting WebKit components used by Safari and related Apple platforms. The vulnerability’s impact is arbitrary code execution when processing maliciously crafted web content. It was addressed by memory handling improvements and patching in iOS 12.1.3, i...

CVE-2026-65351

CVE-2026-65351 is a WebKit state management flaw in Apple's browser engine; processing malicious web content can crash Safari. It is fixed in Safari 26.6.1, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2. No exploitation reported; CISA assesses technical impact as partial. Users should apply the relev...

CVE-2008-3529

No additional technical details about CVE-2008-3529 are present in the provided documents. Public details appear in the Initial Description, but no connected documents confirm affected products/versions/root cause/fixes. Monitor for updates.

CVE-2018-4263

CVE-2018-4263 affects Apple platforms (iOS <11.4.1, tvOS

CVE-2018-4267

CVE-2018-4267 refers to multiple memory corruption issues in Apple WebKit affecting Apple platforms (iOS before 11.4.1, tvOS before 11.4.1, Safari before 11.1.2, iTunes for Windows, iCloud for Windows). The available documents confirm a memory handling/root-cause issue but do not supply concrete ...

CVE-2018-4314

CVE-2018-4314 describes a use-after-free in memory handling that affected WebKit-based components and several Apple platforms. The affected products/versions, per sources, include iOS 12 and earlier, tvOS 12 and earlier, Safari 12 and earlier, iTunes 12.9 for Windows, and iCloud for Windows 7.7. ...

CVE-2018-4375

CVE-2018-4375 involves multiple memory corruption flaws that Apple addressed with improved memory handling. Affected products/lines include iOS versions before 12.1, watchOS before 5.1, Safari before 12.0.1, iTunes before 12.9.1, and iCloud for Windows before 7.8. Public details from Apple securi...

CVE-2018-4441

CVE-2018-4441 is a memory corruption issue reported in WebKit/Safari components, affecting Apple platforms prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, and iCloud for Windows 7.9. The public Apple advisories document a memory handling improvement as t...

CVE-2024-23226

CVE-2024-23226 affects Apple OS stack and is about improper memory handling during processing of web content, leading to arbitrary code execution. Connected advisories corroborate the issue and note fixes in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and tvOS 17.4. The ...

CVE-2024-23280

The CVE-2024-23280 entry concerns an injection issue in WebKitGTK/WebKit2GTK where maliciously crafted web content could fingerprint a user. The core detail from connected sources shows the vulnerability affects WebKitGTK/WebKit2GTK components used in Linux/macOS ecosystems, with the underlying c...

CVE-2024-54505

CVE-2024-54505 is a memory corruption vulnerability in WebKitGTK (WebKit2GTK) caused by a type confusion when processing malicious web content. Public advisories confirm fixes in WebKitGTK/WebKit packages: Debian 11 bullseye 2.46.5-1~deb11u1 and Debian 12 bookworm 2.46.5-1~deb12u1; AlmaLinux 8/9 ...

CVE-2026-64778

CVE-2026-64778 affects WebKit History in Apple platforms: a logic issue allowed visiting a malicious website to leak sensitive data. Fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 via improved checks. No in-the-wild exploitation reported; CVSS 6.5 (Medium).

CVE-2018-4165

CVE-2018-4165 affects Apple WebKit components across multiple Apple platforms. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, via memory corruption in WebKit. Affected products include iOS prior to 11.3, Safari prior to 11.1, iCloud...

CVE-2018-4209

CVE-2018-4209 affects multiple Apple platforms (iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, and iTunes before 12.7.4 for Windows). Description: an unexpected interaction can trigger an ASSERT failure in WebKit. Root cause: an input/int...

CVE-2018-4359

CVE-2018-4359 affects WebKit components used by Safari on iOS/macOS (and related iOS 12/Safari 12). The issue was described as multiple memory corruption issues that were addressed with improved memory handling, with affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 fo...

CVE-2024-23213

CVE-2024-23213 is a memory-handling vulnerability in WebKit (as used by WebKitGTK/WebKit in various OS ecosystems) that may allow arbitrary code execution when processing web content. Public disclosures in connected documents show fixes across multiple platforms: Apple family (watchOS/iOS/macOS/S...

CVE-2025-24208

CVE-2025-24208 affects WebKitGTK (webkitgtk) where loading a malicious iframe may lead to a cross-site scripting (XSS) attack. Public advisories confirm the issue and list it among fixed CVEs in multiple distro advisories (e.g., Debian DSA-5899-1 and AlmaLinux/ALSA advisories) with remediation vi...

CVE-2018-4163

CVE-2018-4163 affects WebKit components in Apple platforms (iOS <11.3, Safari <11.1, iCloud <7.4 on Windows, iTunes <12.7.4 on Windows, tvOS <11.3, watchOS

CVE-2018-4312

CVE-2018-4312 refers to a use-after-free memory corruption issue that affected multiple Apple software components (iOS 12 and earlier, tvOS 12 and earlier, Safari 12 and earlier, iTunes 12.9 for Windows, iCloud for Windows 7.7). The root cause is a use-after-free related to memory handling, addre...

CVE-2018-4358

CVE-2018-4358 affects multiple Apple platforms (iOS 12 and earlier, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7). The description in the initial document notes “Multiple memory corruption issues were addressed with improved memory handling,” and the connected Ap...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2018-4207

CVE-2018-4207 affects WebKit/Apple platforms (iOS Safari, iCloud for Windows, tvOS, watchOS, iTunes for Windows) where an unexpected interaction caused an ASSERT failure. The issue was mitigated by improved checks, as documented in the NVD entry and corroborated by Apple advisories. Affected prod...

CVE-2018-4442

CVE-2018-4442 describes a memory corruption issue in WebKit affecting Safari on macOS/iOS and related Apple platforms. The initial entry notes memory handling improvements to address the vulnerability, with affected versions including iOS prior to 12.1.1, tvOS prior to 12.1.1, watchOS prior to 5....

CVE-2018-4191

CVE-2018-4191 is a memory corruption issue that Apple fixed by improving input/memory validation. Affects older releases prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes enumerate multiple components (CFNetwork, CoreFoundati...

CVE-2018-4316

CVE-2018-4316 is a WebKit/Safari memory corruption issue that affects iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows. The root cause is memory corruption with improved state management, and the Apple security pages indicate it could allow arbitrary code execution when...

CVE-2018-4328

CVE-2018-4328 is an Apple vulnerability where multiple memory corruption issues were addressed with improved memory handling. The entry applies to versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Connected documents confirm concrete details, listi...

CVE-2022-32832

CVE-2022-32832: Apple security issue tied to memory handling that could allow an app with root privileges to execute arbitrary code with kernel privileges. The vulnerability is addressed via updates across Apple operating systems, including iOS 15.6/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monter...

CVE-2024-23263

CVE-2024-23263 is a WebKitGTK/WebKitGTK4 vulnerability observed in multiple Linux package advisories (webkit2gtk, webkitgtk4) and Debian Fedora Amazon Linux updates. The issue arises from processing maliciously crafted web content that may prevent Content Security Policy from being enforced. Conn...

CVE-2024-44187

Summary of CVE-2024-44187 (Cross-origin iframe data exfiltration) A cross-origin issue existed involving iframe elements in WebKitGTK/WebKit2GTK, allowing a malicious site to exfiltrate data across origins. The root cause is stated as inadequate tracking of security origins for iframes. Affected ...

CVE-2024-54479

CVE-2024-54479 is documented in Debian security advisories as affecting WebKitGTK/webkit2gtk, where processing maliciously crafted web content may lead to an unexpected process crash. Debian reports this under webkit2gtk in both Debian 11 (bookworm) and LTS context, fixed in webkit2gtk version 2....

CVE-2017-13866

CVE-2017-13866 affects Apple WebKit across multiple Apple platforms (iOS <11.2, Safari <11.0.2, tvOS <11.2, iCloud for Windows <7.2, iTunes for Windows

CVE-2018-4392

CVE-2018-4392 refers to multiple memory corruption issues in Apple products that were addressed by improved memory handling. Public details show impact on iOS, tvOS, watchOS, Safari, iTunes, and iCloud for Windows before the corresponding patches. Affected versions (per sources) include iOS < ...

CVE-2019-6233

CVE-2019-6233 is a memory corruption issue resolved by Apple in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, and iCloud for Windows 7.10. The vulnerability could allow arbitrary code execution when processing maliciously crafted web content, as described in the initial CVE e...

CVE-2024-23206

CVE-2024-23206 is a WebKitGTK fingerprinting vulnerability observed across multiple ecosystems. The connected documents show an access issue where a maliciously crafted webpage can fingerprint the user, with fixes implemented in WebKit-derived GTK ports. Affected components include webkitgtk/webk...

CVE-2016-1834

CVE-2016-1834 describes a heap-based buffer overflow in libxml2's xmlStrncat function prior to 2.9.4, affecting Apple iOS/tvOS/watchOS and OS X before patched versions. Exploitation could lead to remote code execution or memory corruption and potential denial of service when processing crafted XM...

CVE-2018-4117

CVE-2018-4117 is a cross-origin fetch vulnerability in WebKit that could allow a crafted web site to bypass Same Origin Policy and exfiltrate data. Public references indicate affected products include Apple’s iOS Safari, watchOS, iCloud for Windows, and iTunes on Windows, with WebKit underlies th...

CVE-2018-4210

CVE-2018-4210 concerns WebKit’s JavaScriptCore on Apple platforms (iOS, Safari, tvOS, watchOS) and iTunes on Windows. The vulnerability is an array indexing issue in the handling of a function within JavaScriptCore, which could lead to memory corruption if exploited. Apple’s references indicate t...

CVE-2018-4323

CVE-2018-4323 relates to multiple memory corruption issues that were addressed in Apple’s ecosystem. Affected products include iOS 12 and later, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. The root cause is described as memory corruption issues that were mitigated thr...

CVE-2022-32923

CVE-2022-32923 is a correctness issue in the JIT that may disclose internal app states when processing malicious web content. Affected products include tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. The vulnerability is fixed in these ...

CVE-2022-32947

CVE-2022-32947 affects Apple platforms (iOS/iPadOS/macOS) and is tied to memory handling issues in GPU/Kernel components that could allow an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability could enable kernel-level code execution and that patc...

CVE-2025-24141

Apple fixed an authentication issue in iOS 18.3 and iPadOS 18.3 that could allow an attacker with physical access to an unlocked device to access Photos when the app is locked. The vulnerability (CVE-2025-24141) is tied to improved state management in the Accessibility flow, with the impact descr...

CVE-2018-4202

CVE-2018-4202 affects Apple iBooks in macOS High Sierra 10.13.4 and iOS before 11.4. The issue is an input-validation flaw in iBooks that could allow a privileged network-position attacker to spoof a password prompt. Apple’s security entries (HT208849, HT208848) note this vulnerability in the iBo...

CVE-2022-42823

CVE-2022-42823 describes a type confusion vulnerability in WebKit (affecting WebKitGTK/WebKit2GTK and related WebKit variants) that could allow arbitrary code execution when processing maliciously crafted web content. The issue is addressed by memory-management improvements and fixes are listed f...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2025-31278

CVE-2025-31278 is a WebKitGTK/WebKit2GTK memory corruption issue triggered by processing malicious web content. The connected documents confirm the vulnerability affecting WebKitGTK/WebKit in multiple ecosystems and provide concrete fixes: Debian/Ubuntu-style advisories fix webkit2gtk to version ...