Safari Security Vulnerabilities and Issues — Safari CVE List

Lucene search

AppleSafari

188 matches found

CVE•added 2017/04/24 7:59 p.m.•342 views

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.

8.8CVSS8.8AI score0.00845EPSS

CVE•added 2017/04/02 1:59 a.m.•281 views

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.

8.8CVSS7.4AI score0.23334EPSS

CVE•added 2017/12/25 9:29 p.m.•154 views

CVE-2017-13870

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attacker...

8.8CVSS7.7AI score0.00947EPSS

CVE•added 2017/02/20 8:59 a.m.•135 views

CVE-2016-4764

An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (mem...

8.8CVSS9AI score0.00973EPSS

CVE•added 2017/02/20 8:59 a.m.•118 views

CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sen...

6.5CVSS5.7AI score0.22777EPSS

CVE•added 2017/12/25 9:29 p.m.•116 views

CVE-2017-13856

8.8CVSS7.7AI score0.00947EPSS

CVE•added 2017/02/20 8:59 a.m.•115 views

CVE-2017-2356

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arb...

8.8CVSS8.1AI score0.00584EPSS

CVE•added 2017/12/25 9:29 p.m.•111 views

CVE-2017-13866

8.8CVSS7.7AI score0.00947EPSS

CVE•added 2017/02/20 8:59 a.m.•109 views

CVE-2017-2364

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

6.5CVSS5.9AI score0.18057EPSS

CVE•added 2017/02/20 8:59 a.m.•109 views

CVE-2017-2369

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app...

8.8CVSS7.8AI score0.04575EPSS

CVE•added 2017/02/20 8:59 a.m.•108 views

CVE-2017-2350

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted w...

6.5CVSS5.6AI score0.00522EPSS

CVE•added 2017/10/23 1:29 a.m.•108 views

CVE-2017-7089

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandl...

6.1CVSS5.4AI score0.04871EPSS

CVE•added 2017/12/27 5:8 p.m.•108 views

CVE-2017-7156

8.8CVSS7.7AI score0.00947EPSS

CVE•added 2017/02/20 8:59 a.m.•106 views

CVE-2017-2365

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted w...

6.5CVSS5.7AI score0.19545EPSS

CVE•added 2017/02/20 8:59 a.m.•106 views

CVE-2017-2366

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

8.8CVSS8.1AI score0.00728EPSS

CVE•added 2017/02/20 8:59 a.m.•105 views

CVE-2017-2355

8.8CVSS7.9AI score0.00824EPSS

CVE•added 2017/02/20 8:59 a.m.•105 views

CVE-2017-2373

8.8CVSS7.5AI score0.06651EPSS

CVE•added 2017/02/20 8:59 a.m.•103 views

CVE-2017-2362

8.8CVSS7.5AI score0.04308EPSS

CVE•added 2017/12/27 5:8 p.m.•100 views

CVE-2017-7157

8.8CVSS7.7AI score0.00947EPSS

CVE•added 2017/02/20 8:59 a.m.•99 views

CVE-2017-2354

8.8CVSS8.1AI score0.00584EPSS

CVE•added 2017/07/20 4:29 p.m.•98 views

CVE-2017-7061

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote at...

8.8CVSS8.1AI score0.08109EPSS

CVE•added 2017/07/20 4:29 p.m.•96 views

CVE-2017-7049

8.8CVSS8.1AI score0.0481EPSS

CVE•added 2017/07/20 4:29 p.m.•95 views

CVE-2017-7037

8.8CVSS8.1AI score0.03473EPSS

CVE•added 2017/10/23 1:29 a.m.•94 views

CVE-2017-7117

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execu...

8.8CVSS7.7AI score0.05627EPSS

CVE•added 2017/10/23 1:29 a.m.•92 views

CVE-2017-7107

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/10/23 1:29 a.m.•92 views

CVE-2017-7109

6.1CVSS5.4AI score0.00723EPSS

CVE•added 2017/10/23 1:29 a.m.•91 views

CVE-2017-7111

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/04/03 5:59 a.m.•89 views

CVE-2017-5949

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory...

9.8CVSS9.9AI score0.01816EPSS

CVE•added 2017/07/20 4:29 p.m.•89 views

CVE-2017-7034

8.8CVSS8.1AI score0.00513EPSS

CVE•added 2017/10/23 1:29 a.m.•89 views

CVE-2017-7093

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/10/23 1:29 a.m.•89 views

CVE-2017-7102

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/07/20 4:29 p.m.•88 views

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-read ...

5.5CVSS5.5AI score0.03323EPSS

CVE•added 2017/02/20 8:59 a.m.•86 views

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbit...

8.8CVSS8.1AI score0.00702EPSS

CVE•added 2017/04/02 1:59 a.m.•86 views

CVE-2017-2367

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web sit...

6.5CVSS6.1AI score0.12422EPSS

CVE•added 2017/04/02 1:59 a.m.•86 views

CVE-2017-2396

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.00986EPSS

CVE•added 2017/04/02 1:59 a.m.•86 views

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.04294EPSS

CVE•added 2017/07/20 4:29 p.m.•86 views

CVE-2017-7056

8.8CVSS8.1AI score0.08109EPSS

CVE•added 2017/10/23 1:29 a.m.•86 views

CVE-2017-7087

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/10/23 1:29 a.m.•86 views

CVE-2017-7092

8.8CVSS7.7AI score0.29833EPSS

CVE•added 2017/10/23 1:29 a.m.•86 views

CVE-2017-7100

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/12/27 5:8 p.m.•86 views

CVE-2017-7160

8.8CVSS7.7AI score0.00365EPSS

CVE•added 2017/04/02 1:59 a.m.•85 views

CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.00986EPSS

CVE•added 2017/04/02 1:59 a.m.•85 views

CVE-2017-2470

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.02682EPSS

CVE•added 2017/04/02 1:59 a.m.•84 views

CVE-2017-2469

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.02682EPSS

CVE•added 2017/10/23 1:29 a.m.•84 views

CVE-2017-7098

8.8CVSS7.7AI score0.00513EPSS

CVE•added 2017/10/23 1:29 a.m.•84 views

CVE-2017-7142

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites.

5.3CVSS5.5AI score0.00254EPSS

CVE•added 2017/04/02 1:59 a.m.•83 views

CVE-2017-2481

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati...

8.8CVSS8AI score0.01255EPSS

CVE•added 2017/07/20 4:29 p.m.•83 views

CVE-2017-7039

8.8CVSS8.1AI score0.03473EPSS

CVE•added 2017/07/20 4:29 p.m.•83 views

CVE-2017-7048

8.8CVSS8.1AI score0.0481EPSS

CVE•added 2017/10/23 1:29 a.m.•83 views

CVE-2017-7104

8.8CVSS7.7AI score0.00513EPSS

Total number of security vulnerabilities188