CVE-2010-3824

The CVE-2010-3824 issue is a Use-After-Free in WebKit used by Apple Safari. Affected: Safari prior to 5.0.3 on macOS X 10.5–10.6 and Windows, and prior to 4.1.3 on macOS X 10.4. Root cause: use-after-free in WebKit when processing SVG use elements. Impact: remote code execution or denial of servi...

CVE-2011-0167

CVE-2011-0167 is a WebKit/WebKit-based vulnerability in Apple Safari affecting Safari before 5.0.4. The issue allows remote attackers to bypass the Same Origin Policy and force the upload of arbitrary local files from a client computer via a crafted website. The condition is a cross-origin/contro...

CVE-2010-0656

WebKit before r51295 (as used in Google Chrome before 4.0.249.78) may respond to a local file:// XMLHttpRequest targeting a directory with a directory listing, potentially exposing sensitive information or causing other impact via a crafted local HTML document. The mitigation is to update to the ...

CVE-2010-1391

CVE-2010-1391 is a WebKit (Safari) directory-traversal vulnerability affecting WebKit’s Local Storage and Web SQL components. The issue allows remote attackers to create arbitrary database files by crafting URLs containing sequences like a leading slash with .. or backslash variants (e.g., %2f.. ...

CVE-2010-1417

CVE-2010-1417 affects the WebKit CSS implementation in Apple Safari (before 5.0 on Mac OS X 10.5–10.6 and Windows; before 4.1 on Mac OS X 10.4). It allows remote attackers to trigger arbitrary code execution or a denial of service via HTML content that uses multiple :after pseudo-selectors. The p...

CVE-2010-3823

CVE-2010-3823 is a use-after-free in WebKit affecting Apple Safari prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1.3 on Mac OS X 10.4, exploitable via Geolocation object vectors. The vulnerability can allow remote code execution or cause an application crash (DoS). The issue is...

CVE-2011-0128

Technical details of CVE-2011-0128 are not publicly provided in the supplied documents. No explicit affected product versions or fixes are confirmed here. Monitor for updates from vendor/security advisories; current sources reference WebKit/iTunes exposure but lack concrete specifics.

CVE-2011-2341

CVE-2011-2341 affects WebKit as used in Apple iTunes before 10.5. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause memory corruption and an application crash via iTunes Store browsing related vectors. The OpenVAS/Nessus entries in the connected data corrobor...

CVE-2011-3237

CVE-2011-3237 affects WebKit as used by Apple iTunes before version 10.5. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The connected Nessus entry no...

CVE-2013-5199

CVE-2013-5199 affects WebKit as used by Apple Safari , where memory corruption could be triggered by a crafted website, allowing remote code execution or a browser crash. The description specifies vulnerable targets as WebKit in Safari before 6.1.1 and 7.x before 7.0.1. Remediation available in A...

CVE-2014-1268

CVE-2014-1268 concerns WebKit as used in Apple Safari, specifically versions affected by memory corruption via a crafted web site that can lead to remote code execution or a denial of service. The vulnerability is described as affecting Safari before 6.1.2 and Safari 7.x before 7.0.2. The underly...

CVE-2016-4585

CVE-2016-4585 targets WebKit Page Loading in Apple platforms: iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2. Root cause is mishandling of HTTP redirect responses by Safari, enabling cross-site scripting (XSS) via injected web script or HTML in the redirected page. The vulnerability...

CVE-2010-1404

CVE-2010-1404 is a WebKit use-after-free vulnerability exploited via an SVG document containing recursive Use elements. In Safari (pre-5.0 on Mac OS X 10.5–10.6 and Windows) and pre-4.1 on Mac OS X 10.4, this can allow remote code execution or cause a denial of service (application crash) during ...

CVE-2011-2814

CVE-2011-2814 affects WebKit as used in Apple iTunes before 10.5. It allows a man-in-the-middle attacker to cause arbitrary code execution or a denial of service via vectors related to iTunes Store browsing, tied to memory corruption and application crashes. The provided documents do not specify ...

CVE-2010-1397

CVE-2010-1397 is a use-after-free in WebKit used by Safari (and related WebKit deployments) that can allow remote code execution or a crash through a layout-change during selection rendering and the DOCUMENT_POSITION_DISCONNECTED attribute in an unspecified container. Affected: Safari before 5.0 ...

CVE-2010-1774

CVE-2010-1774 affects WebKit used by Apple Safari (before 5.0 on Mac OS X 10.5–10.6 and Windows, and before 4.1 on Mac OS X 10.4). The root cause is an out-of-bounds memory access during HTML table processing, enabling remote attackers to execute arbitrary code or cause a denial of service (appli...

CVE-2010-3810

Affected software: Apple Safari/WebKit. Vulnerability: improper handling of the History object in WebKit, enabling cross-origin manipulation to spoof the location bar URL or add URLs to history. Affected versions: Safari before 5.0.3 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1.3 on Mac O...

CVE-2011-0253

CVE-2011-0253 is tied to WebKit in Apple Safari (pre-5.0.6) and is described as allowing remote code execution or memory corruption/DoS via a crafted site. Connected documents confirm WebKit-related vulnerability in Apple software (notably iTunes/WebKit entries) but do not specify exact patch ver...

CVE-2011-2354

CVE-2011-2354 affects WebKit as used in Apple iTunes before 10.5. The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. No specific vendor/version patch details ar...

CVE-2010-1389

CVE-2010-1389 describes a cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari on Windows and macOS. It allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2) drag‑and‑drop operation for a selection. Affected versio...

CVE-2010-1398

CVE-2010-1398 : WebKit in Safari before 5.0 on Mac OS X 10.5–10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions due to the insertion of an unspecified element into an editable container and access of an uninitialized element. This can allow remote...

CVE-2010-1405

CVE-2010-1405 is a use-after-free in WebKit that affects Apple Safari before 5.0 on Windows/macOS (and Safari

CVE-2010-1409

CVE-2010-1409 is a WebKit vulnerability described as an incomplete blacklist that could allow data disclosure via IRC-related vectors. Affected products include Apple Safari prior to version 5.0 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1 on Mac OS X 10.4. The root cause is an incomp...

CVE-2010-1415

WebKit vulnerability CVE-2010-1415 affects Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It stems from improper handling of libxml contexts in WebKit, described as an API abuse issue. Consequences described: remote attackers could execute arbitrary code...

CVE-2010-1778

Apple Safari contains an XSS in RSS feed handling (CVE-2010-1778). Affected: Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1.1 on Mac OS X 10.4. Remote attackers could inject arbitrary script via a malicious RSS feed. Impact: possible script/HTML execution and data exposu...

CVE-2011-0254

WebKit used by Apple Safari before version 5.0.6 is affected by CVE-2011-0254. A crafted web site can cause memory corruption, allowing remote code execution or a denial of service (application crash). The issue is documented across multiple sources (Apple advisories and third-party vulnerability...

CVE-2011-2339

The CVE-2011-2339 entry concerns WebKit as used in Apple iTunes prior to v10.5. The vulnerability enables man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and crash) via iTunes Store browsing-related vectors. This is tied to WebKit/Apple iTunes...

CVE-2011-3236

CVE-2011-3236 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows man-in-the-middle attackers to cause memory corruption and an application crash, enabling arbitrary code execution or denial of service via iTunes Store browsing vectors. The provided documents do not inc...

CVE-2010-1399

CVE-2010-1399 affects WebKit used by Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. The vulnerability arises when WebKit accesses uninitialized memory during a selection change on a form input element, which can let remote attackers execute arbitra...

CVE-2010-1403

CVE-2010-1403 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It arises from uninitialized memory access during processing of a use element in an SVG document (related to ProcessInstruction), allowing remote attackers to execute ar...

CVE-2010-1408

WebKit in Apple Safari vulnerable to bypassing outbound-port restrictions. Affected: Safari before 5.0 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1 on Mac OS X 10.4. Issue: integer truncation that allows remote attackers to reach non-default TCP ports via crafted port numbers. This CVE ma...

CVE-2010-1418

Technical details for CVE-2010-1418 are not publicly provided in the connected documents; monitor for updates.

CVE-2010-1761

CVE-2010-1761 is a use-after-free vulnerability in WebKit that can allow remote code execution or a denial of service (application crash) via vectors involving HTML document subtrees. Affected are Apple Safari before 5.0 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1 on Mac OS X 10.4. T...

CVE-2010-1764

CVE-2010-1764 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. The vulnerability arises from following multiple redirections during form submission, enabling remote servers to record form data and access sensitive information. Conne...

CVE-2011-0130

CVE-2011-0130 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows memory corruption during iTunes Store browsing, enabling a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (application crash). The description mentions a memory...

CVE-2014-1270

Technical details for CVE-2014-1270 are not present in the provided connected documents; no explicit root cause, affected versions, or fixes are disclosed. Monitor ENISA EUVD entries and Nessus plugins for any concrete information.

CVE-2010-1386

The concrete details in connected documents show CVE-2010-1386 affects WebKit/WebCore: page/Geolocation.cpp did not properly restrict access to the lastPosition function, with unspecified impact and remote attack vectors. Root cause is insufficient access control in Geolocation.lastPosition. Affe...

CVE-2010-1412

CVE-2010-1412 affects WebKit in Safari (pre-5.0 on Mac OS X 10.5–10.6 and Windows; pre-4.1 on Mac OS X 10.4). The issue is a use-after-free in hover-event handling that can allow remote code execution or cause an application crash (DoS). The description and related Nessus/OpenVAS entries confirm ...

CVE-2010-1760

CVE-2010-1760 affects loader/DocumentThreadableLoader.cpp in the WebKit WebCore XMLHttpRequest implementation, before r58409. The vulnerability arises because credentials are not properly handled during a cross-origin synchronous request. The description specifies an unspecified impact with poten...

CVE-2010-1791

Technical details for CVE-2010-1791 are not publicly available in the provided documents. Monitor for updates; the connected sources list CVE references but do not provide affected product/version, root cause, impact, or remediation specifics.

CVE-2011-0112

CVE-2011-0112 affects WebKit as used in Apple iTunes prior to version 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. Root cause: is...

CVE-2011-0149

CVE-2011-0149 concerns WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability arises from improper parsing of HTML elements related to document namespaces, enabling a man-in-the-middle attacker to trigger arbitrary code execution or cause a denial of service (memory corruption a...

CVE-2011-2809

CVE-2011-2809 affects WebKit as used in Apple iTunes before 10.5. The vulnerability allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. The provided connected documents co...

CVE-2013-5228

CVE-2013-5228 affects WebKit as used in Apple Safari before 6.1.1 and in Safari 7.x before 7.0.1 . It allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted website, with memory corruption and an application crash as outcomes. This CVE is described as distin...

CVE-2007-3944

CVE-2007-3944 describes multiple heap-based buffer overflows in the PCRE library used by the JavaScript engine in Apple Safari (WebKit) and iPhone Safari, allowing remote code execution via crafted JavaScript regex. Affected: Safari 3 Beta before Update 3.0.3 and iPhone before 1.0.1. Root cause: ...

CVE-2010-1410

CVE-2010-1410 affects WebKit in Apple Safari: vulnerable when rendering SVG documents with nested use elements, causing memory corruption that can lead to remote code execution or a crash. Affected platforms include Mac OS X 10.4–10.6 and Windows, with Safari prior to 5.0 on 10.5–10.6 and prior t...

CVE-2011-0164

CVE-2011-0164 affects WebKit as used by Apple iTunes before version 10.2 on Windows. The vulnerability stems from memory corruption in WebKit related to iTunes Store browsing, allowing a MITM attacker to cause an arbitrary code execution or a denial of service (application crash). The description...

CVE-2011-0225

CVE-2011-0225 affects WebKit as used in Apple Safari prior to 5.0.6. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service through a crafted website, via memory corruption that can crash the application. The connected sources corroborate that this is a ...

CVE-2011-0233

The CVE-2011-0233 entry affects WebKit as used by Apple Safari prior to version 5.0.6. A crafted web site could trigger memory corruption in WebKit, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is attributed to WebKit’s ha...

CVE-2011-0234

CVE-2011-0234 affects WebKit as used by Apple Safari prior to 5.0.6. A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service (application crash). Mitigation noted in public Apple advisories; remedy is to update Safari/WebKit to 5.0.6 or la...