CVE-2010-3820

CVE-2010-3820 affects WebKit/Apple Safari targets: Safari prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1.3 on Mac OS X 10.4. The issue is an uninitialized memory access during processing of editable elements, enabling remote attackers to execute arbitrary code or cause a ...

CVE-2011-0115

CVE-2011-0115 concerns the WebKit DOM Level 2 implementation as used by Apple Safari and iTunes before 10.2 on Windows. The vulnerability stems from improper handling of DOM manipulations tied to event listeners while processing range objects, enabling a remote attacker to trigger arbitrary code ...

CVE-2011-0122

CVE-2011-0122 affects WebKit used by Apple iTunes on Windows prior to version 10.2. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service via iTunes Store browsing-related vectors. Root cause: memory corruption/unsafe handling in WebKit when ...

CVE-2011-0125

CVE-2011-0125 affects WebKit as used in Apple iTunes before 10.2 on Windows. The underlying flaw is a memory corruption issue in WebKit triggered during iTunes Store/browsing flows, which can allow a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (application cr...

CVE-2011-0166

CVE-2011-0166 applies to WebKit in Apple Safari up to version 5.0.3, where HTML5 drag-and-drop could bypass Same Origin Policy and leak sensitive data. Root cause: drag-and-drop handling in WebKit. Impact: user-assisted remote information disclosure with no explicit exploit details provided. Reme...

CVE-2007-3944

CVE-2007-3944 describes multiple heap-based buffer overflows in the PCRE library used by the JavaScript engine in Apple Safari (WebKit) and iPhone Safari, allowing remote code execution via crafted JavaScript regex. Affected: Safari 3 Beta before Update 3.0.3 and iPhone before 1.0.1. Root cause: ...

CVE-2010-1126

CVE-2010-1126 targets WebKit’s JavaScript implementation. The vulnerability allows remote attackers to cause keystrokes intended for a visible frame to be sent to a form field in a hidden frame by certain focus() calls in WebKit. Affected component is the WebKit browser engine; impact is partial ...

CVE-2010-1397

CVE-2010-1397 is a use-after-free in WebKit used by Safari (and related WebKit deployments) that can allow remote code execution or a crash through a layout-change during selection rendering and the DOCUMENT_POSITION_DISCONNECTED attribute in an unspecified container. Affected: Safari before 5.0 ...

CVE-2010-1408

WebKit in Apple Safari vulnerable to bypassing outbound-port restrictions. Affected: Safari before 5.0 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1 on Mac OS X 10.4. Issue: integer truncation that allows remote attackers to reach non-default TCP ports via crafted port numbers. This CVE ma...

CVE-2011-0114

WebKit, as used in Apple iTunes before 10.2 on Windows, is vulnerable to memory corruption that lets MITM attackers execute arbitrary code or cause a denial of service via vectors related to iTunes Store browsing.

CVE-2011-3239

CVE-2011-3239 affects WebKit as used by Apple iTunes prior to version 10.5. The vulnerability allows a man-in-the-middle to either execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The description does not spec...

CVE-2012-0637

Technical details for CVE-2012-0637 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-0225

CVE-2011-0225 affects WebKit as used in Apple Safari prior to 5.0.6. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service through a crafted website, via memory corruption that can crash the application. The connected sources corroborate that this is a ...

CVE-2011-2820

CVE-2011-2820 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through vectors related to iTunes Store browsing. This is documented in the CV...

CVE-2010-1761

CVE-2010-1761 is a use-after-free vulnerability in WebKit that can allow remote code execution or a denial of service (application crash) via vectors involving HTML document subtrees. Affected are Apple Safari before 5.0 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1 on Mac OS X 10.4. T...

CVE-2010-3809

CVE-2010-3809 affects WebKit in Apple Safari prior to 5.0.3 (Mac OS X 10.5–10.6 and Windows) and prior to 4.1.3 on Mac OS X 10.4, where an improper cast of an unspecified variable during processing of inline styling can allow remote attackers to execute arbitrary code or cause a denial of service...

CVE-2010-3826

CVE-2010-3826 affects WebKit used by Apple Safari on Mac OS X (10.5–10.6) and Windows, and Safari for Mac OS X 10.4. The flaw stems from an improper cast of an unspecified variable while processing colors in an SVG document, enabling remote attackers to run arbitrary code or cause a denial of ser...

CVE-2011-0121

CVE-2011-0121 affects WebKit as used by Apple iTunes prior to version 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing vectors. Exploita...

CVE-2011-0161

CVE-2011-0161 affects WebKit as used in Apple Safari before 5.0.4 and iOS before 4.3. The vulnerability arises from how the Attr.style accessor is handled, allowing remote attackers to bypass the Same Origin Policy and inject CSS token sequences via a crafted website. The described impact is that...

CVE-2011-1462

CVE-2011-1462 affects WebKit as used by Apple Safari up to version 5.0.5, with a memory-corruption vulnerability that could be exploited by a crafted web site to execute arbitrary code or cause a denial of service. The linked NASL notes Safari before 5.0.6 as vulnerable and implies the fix is a S...

CVE-2010-1388

CVE-2010-1388 affects WebKit in Apple Safari prior to 5.0 on macOS X 10.5–10.6 and prior to 4.1 on OS X 10.4. The vulnerability arises from how the clipboard handles URLs during drag and paste, enabling user-assisted remote attackers to read arbitrary files via a crafted HTML document. Public ref...

CVE-2010-1418

Technical details for CVE-2010-1418 are not publicly provided in the connected documents; monitor for updates.

CVE-2010-1729

CVE-2010-1729 affects WebKit.dll used by Apple Safari (Safari.exe 4.531.9.1). The vulnerability arises from JavaScript that writes sequences in an infinite loop, enabling remote attackers to cause a denial of service (application crash). The provided documents reiterate the same description acro...

CVE-2011-0145

CVE-2011-0145 affects WebKit as used by Apple iTunes before 10.2 on Windows. It allows a man-in-the-middle to cause memory corruption and application crash or execute arbitrary code via iTunes Store browsing. Root cause and specific exploit vectors are described as tied to WebKit memory handling ...

CVE-2011-0233

The CVE-2011-0233 entry affects WebKit as used by Apple Safari prior to version 5.0.6. A crafted web site could trigger memory corruption in WebKit, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). The vulnerability is attributed to WebKit’s ha...

CVE-2011-0234

CVE-2011-0234 affects WebKit as used by Apple Safari prior to 5.0.6. A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service (application crash). Mitigation noted in public Apple advisories; remedy is to update Safari/WebKit to 5.0.6 or la...

CVE-2011-0244

WebKit in Apple Safari before 5.0.6 is vulnerable due to improper canonicalization of URLs within RSS feeds, enabling a user-assisted remote attacker to read arbitrary files. Impact: partial disclosure of data; exploit requires user interaction. Remediation: upgrade to Safari 5.0.6 or newer (as n...

CVE-2011-4692

The CVE-2011-4692 issue affects WebKit as used by Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier. The root cause is that the browser does not prevent timing-based data leakage when loading images, allowing remote attackers to infer whether an image is cached via crafted JavaScrip...

CVE-2013-5196

CVE-2013-5196 : WebKit used by Apple Safari (pre-6.1.1 and pre-7.0.1 for 7.x) is vulnerable to a crafted site that can cause memory corruption, enabling remote code execution or a denial of service (application crash). The provided documents do not specify exploit details or in‑the‑wild occurrenc...

CVE-2013-5197

CVE-2013-5197 affects WebKit as used in Apple Safari before 6.1.1 and 7.x before 7.0.1. The vulnerability allows remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a crash/DoS. The description in the connected Nessus references c...

CVE-2016-4588

CVE-2016-4588 concerns WebKit in Apple tvOS prior to 9.2.2. The vulnerability is a memory corruption issue triggered by processing a crafted website in WebKit, allowing a remote attacker to execute arbitrary code or cause a denial of service on affected devices. Apple tvOS 9.2.2 addresses this is...

CVE-2010-1796

The CVE-2010-1796 issue affects Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows, and before 4.1.1 on Mac OS X 10.4. An implementation flaw in AutoFill lets a malicious website trigger AutoFill without user action, exposing Address Book Card data via JavaScript keystroke events. The security...

CVE-2011-0117

CVE-2011-0117 affects WebKit as used by Apple iTunes on Windows prior to 10.2. The vulnerability enables man‑in‑the‑middle attackers to trigger memory corruption, leading to arbitrary code execution or a denial of service (application crash) via iTunes Store browsing related vectors. Root cause i...

CVE-2011-0139

CVE-2011-0139 is described in the provided records as a WebKit-based vulnerability in Apple iTunes before 10.2 on Windows, allowing a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing vectors. The ...

CVE-2011-0153

CVE-2011-0153 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows MITM attackers to execute arbitrary code or cause memory corruption and application crash via iTunes Store browsing. Connected documents provide concrete details: affected component WebKit, attac...

CVE-2011-0235

The CVE-2011-0235 entry affects WebKit as used by Apple Safari prior to 5.0.6. It enables remote attackers to trigger memory corruption via a crafted website, potentially allowing arbitrary code execution or causing a crash/DoS. The vulnerability is tied to WebKit in Safari; remediation exists in...

CVE-2011-3235

CVE-2011-3235 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows man-in-the-middle attackers to trigger memory corruption and an application crash, potentially enabling arbitrary code execution via iTunes Store browsing vectors. The description notes a single, distinct...

CVE-2014-1269

CVE-2014-1269 affects WebKit as used in Apple Safari before 6.1.2 and in Safari 7.x before 7.0.2. A crafted web site can cause remote code execution or memory corruption with an application crash; this is a separate issue from CVE-2014-1268/1270. The provided documents identify the affected platf...

CVE-2010-1791

Technical details for CVE-2010-1791 are not publicly available in the provided documents. Monitor for updates; the connected sources list CVE references but do not provide affected product/version, root cause, impact, or remediation specifics.

CVE-2011-0138

The CVE-2011-0138 entry concerns WebKit usage in Apple iTunes for Windows prior to version 10.2. The underlying issue, as described in the available documents, is a memory corruption vulnerability in WebKit triggered via iTunes Store browsing vectors, which could allow an attacker to execute arbi...

CVE-2011-0141

CVE-2011-0141 affects WebKit used by Apple iTunes on Windows prior to 10.2. The vulnerability arises from memory corruption in WebKit during iTunes Store browsing, which can enable arbitrary code execution or cause a denial of service when loading certain content. Exploitation could lead to a com...

CVE-2011-0219

CVE-2011-0219 affects Apple Safari prior to 5.0.6, where a Java applet loading fonts can bypass the Same Origin Policy and alter the rendering of text from arbitrary websites. The issue is described in the Apple advisory as part of Safari’s vulnerabilities fixed by Safari 5.0.6 and in later 5.1 u...

CVE-2011-2866

Technical details for CVE-2011-2866 are not publicly available in the provided documents. No explicit affected products, root cause, or remediation are shown here. Monitor for updates.

CVE-2012-0648

Technical details for CVE-2012-0648 are not provided in the connected documents. No affected product/version, root cause, or remediation is specified. Monitor for updates.

CVE-2010-1410

CVE-2010-1410 affects WebKit in Apple Safari: vulnerable when rendering SVG documents with nested use elements, causing memory corruption that can lead to remote code execution or a crash. Affected platforms include Mac OS X 10.4–10.6 and Windows, with Safari prior to 5.0 on 10.5–10.6 and prior t...

CVE-2010-1421

CVE-2010-1421 refers to a vulnerability in WebKit used by Safari and the libwebkit component, where execCommand could be misused to modify the clipboard via a crafted HTML document. The connected data shows this CVE being addressed as part of openSUSE libwebkit updates (examples include openSUSE-...

CVE-2011-0116

CVE-2011-0116 relates to a use-after-free in the WebKit htmlelement setOuterText method, used by Apple iTunes prior to 10.2 on Windows. The underlying issue is a use-after-free during DOM manipulations in the iTunes Store browsing flow, which can lead to arbitrary code execution or memory corrupt...

CVE-2011-0136

CVE-2011-0136 affects WebKit as used in Apple iTunes prior to 10.2 on Windows. The vulnerability allows man-in-the-middle attackers to trigger memory corruption that can lead to arbitrary code execution or a denial of service (application crash) via vectors related to iTunes Store browsing. The i...

CVE-2011-0232

CVE-2011-0232 affects WebKit as used by Apple Safari prior to 5.0.6. The vulnerability enables remote attackers to cause memory corruption and potentially execute arbitrary code or trigger a crash via a crafted website, per multiple sources in the connected documents. The issue is rooted in WebKi...

CVE-2011-0237

CVE-2011-0237 affects WebKit as used in Apple Safari before 5.0.6. The issue permits remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. Root cause, as described in the sources, is memory corruption within WebKit...