CVE-2010-1761

CVE-2010-1761 is a use-after-free vulnerability in WebKit that can allow remote code execution or a denial of service (application crash) via vectors involving HTML document subtrees. Affected are Apple Safari before 5.0 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1 on Mac OS X 10.4. T...

CVE-2011-0125

CVE-2011-0125 affects WebKit as used in Apple iTunes before 10.2 on Windows. The underlying flaw is a memory corruption issue in WebKit triggered during iTunes Store/browsing flows, which can allow a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (application cr...

CVE-2013-5197

CVE-2013-5197 affects WebKit as used in Apple Safari before 6.1.1 and 7.x before 7.0.1. The vulnerability allows remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a crash/DoS. The description in the connected Nessus references c...

CVE-2010-1389

CVE-2010-1389 describes a cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari on Windows and macOS. It allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2) drag‑and‑drop operation for a selection. Affected versio...

CVE-2010-1760

CVE-2010-1760 affects loader/DocumentThreadableLoader.cpp in the WebKit WebCore XMLHttpRequest implementation, before r58409. The vulnerability arises because credentials are not properly handled during a cross-origin synchronous request. The description specifies an unspecified impact with poten...

CVE-2010-3820

CVE-2010-3820 affects WebKit/Apple Safari targets: Safari prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1.3 on Mac OS X 10.4. The issue is an uninitialized memory access during processing of editable elements, enabling remote attackers to execute arbitrary code or cause a ...

CVE-2010-3826

CVE-2010-3826 affects WebKit used by Apple Safari on Mac OS X (10.5–10.6) and Windows, and Safari for Mac OS X 10.4. The flaw stems from an improper cast of an unspecified variable while processing colors in an SVG document, enabling remote attackers to run arbitrary code or cause a denial of ser...

CVE-2011-0122

CVE-2011-0122 affects WebKit used by Apple iTunes on Windows prior to version 10.2. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service via iTunes Store browsing-related vectors. Root cause: memory corruption/unsafe handling in WebKit when ...

CVE-2011-1462

CVE-2011-1462 affects WebKit as used by Apple Safari up to version 5.0.5, with a memory-corruption vulnerability that could be exploited by a crafted web site to execute arbitrary code or cause a denial of service. The linked NASL notes Safari before 5.0.6 as vulnerable and implies the fix is a S...

CVE-2011-2820

CVE-2011-2820 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through vectors related to iTunes Store browsing. This is documented in the CV...

CVE-2013-5196

CVE-2013-5196 : WebKit used by Apple Safari (pre-6.1.1 and pre-7.0.1 for 7.x) is vulnerable to a crafted site that can cause memory corruption, enabling remote code execution or a denial of service (application crash). The provided documents do not specify exploit details or in‑the‑wild occurrenc...

CVE-2010-0659

Summary: CVE-2010-0659 affects WebKit’s image decoder used by Google Chrome before 4.0.249.78. The flaw is in memory-allocation failure handling, allowing remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF that specifies a large size. Affected software/component:...

CVE-2010-1415

WebKit vulnerability CVE-2010-1415 affects Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It stems from improper handling of libxml contexts in WebKit, described as an API abuse issue. Consequences described: remote attackers could execute arbitrary code...

CVE-2010-1418

Technical details for CVE-2010-1418 are not publicly provided in the connected documents; monitor for updates.

CVE-2014-1269

CVE-2014-1269 affects WebKit as used in Apple Safari before 6.1.2 and in Safari 7.x before 7.0.2. A crafted web site can cause remote code execution or memory corruption with an application crash; this is a separate issue from CVE-2014-1268/1270. The provided documents identify the affected platf...

CVE-2010-1410

CVE-2010-1410 affects WebKit in Apple Safari: vulnerable when rendering SVG documents with nested use elements, causing memory corruption that can lead to remote code execution or a crash. Affected platforms include Mac OS X 10.4–10.6 and Windows, with Safari prior to 5.0 on 10.5–10.6 and prior t...

CVE-2010-1729

CVE-2010-1729 affects WebKit.dll used by Apple Safari (Safari.exe 4.531.9.1). The vulnerability arises from JavaScript that writes sequences in an infinite loop, enabling remote attackers to cause a denial of service (application crash). The provided documents reiterate the same description acro...

CVE-2010-1791

Technical details for CVE-2010-1791 are not publicly available in the provided documents. Monitor for updates; the connected sources list CVE references but do not provide affected product/version, root cause, impact, or remediation specifics.

CVE-2010-3809

CVE-2010-3809 affects WebKit in Apple Safari prior to 5.0.3 (Mac OS X 10.5–10.6 and Windows) and prior to 4.1.3 on Mac OS X 10.4, where an improper cast of an unspecified variable during processing of inline styling can allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2011-0117

CVE-2011-0117 affects WebKit as used by Apple iTunes on Windows prior to 10.2. The vulnerability enables man‑in‑the‑middle attackers to trigger memory corruption, leading to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing related vectors. Root cause i...

CVE-2011-0233

The CVE-2011-0233 entry affects WebKit as used by Apple Safari prior to version 5.0.6. A crafted web site could trigger memory corruption in WebKit, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is attributed to WebKit’s ha...

CVE-2011-0235

The CVE-2011-0235 entry affects WebKit as used by Apple Safari prior to 5.0.6. It enables remote attackers to trigger memory corruption via a crafted website, potentially allowing arbitrary code execution or causing a crash/DoS. The vulnerability is tied to WebKit in Safari; remediation exists in...

CVE-2011-0244

WebKit in Apple Safari before 5.0.6 is vulnerable due to improper canonicalization of URLs within RSS feeds, enabling a user-assisted remote attacker to read arbitrary files. Impact: partial disclosure of data; exploit requires user interaction. Remediation: upgrade to Safari 5.0.6 or newer (as n...

CVE-2016-4588

CVE-2016-4588 concerns WebKit in Apple tvOS prior to 9.2.2. The vulnerability is a memory corruption issue triggered by processing a crafted website in WebKit, allowing a remote attacker to execute arbitrary code or cause a denial of service on affected devices. Apple tvOS 9.2.2 addresses this is...

CVE-2010-1406

CVE-2010-1406 affects WebKit used by Apple Safari on Mac OS X 10.4–10.6 and Windows. The issue arises when Safari/WebKit sends an HTTPS URL in the Referer header of an HTTP request in scenarios involving HTTPS-to-HTTP redirection, allowing remote HTTP servers to log potentially sensitive informat...

CVE-2010-1413

CVE-2010-1413 affects WebKit in Apple Safari prior to 5.0 on Windows and macOS (and Safari before 4.1 on Mac OS X 10.4). The flaw allows NTLM credentials to be sent in cleartext under unspecified circumstances, enabling man-in-the-middle attackers to access sensitive information via unspecified v...

CVE-2010-3803

CVE-2010-3803 — Integer overflow in WebKit used by Apple Safari (before 5.0.3 on macOS 10.5–10.6 and Windows; before 4.1.3 on macOS 10.4) may allow remote code execution or cause denial of service via a crafted string. Connected documents confirm the vulnerability in WebKit/Safari and reference v...

CVE-2011-0115

CVE-2011-0115 concerns the WebKit DOM Level 2 implementation as used by Apple Safari and iTunes before 10.2 on Windows. The vulnerability stems from improper handling of DOM manipulations tied to event listeners while processing range objects, enabling a remote attacker to trigger arbitrary code ...

CVE-2011-0129

The CVE-2011-0129 entry affects WebKit as used by Apple iTunes before version 10.2 on Windows. The vulnerability arises in WebKit and can be triggered via iTunes Store browsing, enabling memory corruption that may lead to arbitrary code execution or a denial of service (application crash). The de...

CVE-2011-0139

CVE-2011-0139 is described in the provided records as a WebKit-based vulnerability in Apple iTunes before 10.2 on Windows, allowing a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing vectors. The ...

CVE-2011-0153

CVE-2011-0153 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows MITM attackers to execute arbitrary code or cause memory corruption and application crash via iTunes Store browsing. Connected documents provide concrete details: affected component WebKit, attac...

CVE-2011-0234

CVE-2011-0234 affects WebKit as used by Apple Safari prior to 5.0.6. A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service (application crash). Mitigation noted in public Apple advisories; remedy is to update Safari/WebKit to 5.0.6 or la...

CVE-2011-3239

CVE-2011-3239 affects WebKit as used by Apple iTunes prior to version 10.5. The vulnerability allows a man-in-the-middle to either execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The description does not spec...

CVE-2011-4692

The CVE-2011-4692 issue affects WebKit as used by Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier. The root cause is that the browser does not prevent timing-based data leakage when loading images, allowing remote attackers to infer whether an image is cached via crafted JavaScrip...

CVE-2010-1388

CVE-2010-1388 affects WebKit in Apple Safari prior to 5.0 on macOS X 10.5–10.6 and prior to 4.1 on OS X 10.4. The vulnerability arises from how the clipboard handles URLs during drag and paste, enabling user-assisted remote attackers to read arbitrary files via a crafted HTML document. Public ref...

CVE-2010-1421

CVE-2010-1421 refers to a vulnerability in WebKit used by Safari and the libwebkit component, where execCommand could be misused to modify the clipboard via a crafted HTML document. The connected data shows this CVE being addressed as part of openSUSE libwebkit updates (examples include openSUSE-...

CVE-2011-0121

CVE-2011-0121 affects WebKit as used by Apple iTunes prior to version 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing vectors. Exploita...

CVE-2011-0138

The CVE-2011-0138 entry concerns WebKit usage in Apple iTunes for Windows prior to version 10.2. The underlying issue, as described in the available documents, is a memory corruption vulnerability in WebKit triggered via iTunes Store browsing vectors, which could allow an attacker to execute arbi...

CVE-2011-0219

CVE-2011-0219 affects Apple Safari prior to 5.0.6, where a Java applet loading fonts can bypass the Same Origin Policy and alter the rendering of text from arbitrary websites. The issue is described in the Apple advisory as part of Safari’s vulnerabilities fixed by Safari 5.0.6 and in later 5.1 u...

CVE-2011-2815

CVE-2011-2815 affects WebKit as used in Apple iTunes before 10.5. The vulnerability allows a man-in-the-middle to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The connected Nessus/OpenVAS references descri...

CVE-2016-4592

CVE-2016-4592 affects WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2. The issue allows a remote attacker to cause a denial of service via memory consumption when visiting a crafted website. Public sources describe the vulnerability as a memory‑consumption/DoS issue i...

CVE-2010-1392

CVE-2010-1392 is associated with WebKit/libwebkit in Open/Safari environments. Connected documents show that libwebkit updates (e.g., openSUSE openSUSE-SU-2010:0458-1 and openSUSE-SU-2011:0024-1) address multiple WebKit-related flaws including CVE-2010-1392, indicating a fixed in patched library ...

CVE-2010-3817

CVE-2010-3817 affects WebKit/Safari: an improper cast during CSS 3D transforms in Safari < 5.0.3 (Mac OS X 10.5–10.6, Windows) and

CVE-2010-3822

CVE-2010-3822 affects WebKit used by Apple Safari: uninitialized pointer accessed during CSS counter styles processing, allowing remote code execution or a crash. Impact is high (remote code execution/DoS) across Safari versions before 5.0.3 on macOS 10.5–10.6 and Windows, and before 4.1.3 on mac...

CVE-2011-0111

CVE-2011-0111 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle to cause memory corruption, enabling arbitrary code execution or a denial of service (application crash) via vectors related to iTunes Store browsing. The provided documents i...

CVE-2011-0136

CVE-2011-0136 affects WebKit as used in Apple iTunes prior to 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via vectors related to iTunes Store browsing. The i...

CVE-2011-0141

CVE-2011-0141 affects WebKit used by Apple iTunes on Windows prior to 10.2. The vulnerability arises from memory corruption in WebKit during iTunes Store browsing, which can enable arbitrary code execution or cause a denial of service when loading certain content. Exploitation could lead to a com...

CVE-2011-0161

CVE-2011-0161 affects WebKit as used in Apple Safari before 5.0.4 and iOS before 4.3. The vulnerability arises from how the Attr.style accessor is handled, allowing remote attackers to bypass the Same Origin Policy and inject CSS token sequences via a crafted website. The described impact is that...

CVE-2011-0232

CVE-2011-0232 affects WebKit as used by Apple Safari prior to 5.0.6. The vulnerability enables remote attackers to cause memory corruption and potentially execute arbitrary code or trigger a crash via a crafted website, per multiple sources in the connected documents. The issue is rooted in WebKi...

CVE-2011-0237

CVE-2011-0237 affects WebKit as used in Apple Safari before 5.0.6. The issue permits remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. Root cause, as described in the sources, is memory corruption within WebKit...