cbcvebase.

Apple Safari vulnerabilities

1,654 known vulnerabilities affecting apple/safari.

Total CVEs
1,654
CISA KEV
31
actively exploited
Public exploits
168
Exploited in wild
51
Severity breakdown
CRITICAL211HIGH626MEDIUM792LOW20UNKNOWN5

Vulnerabilities

Page 17 of 83
CVE-2017-7161P3HIGHCVSS 8.8fixed in 11.0.22018-04-03
CVE-2017-7161 [HIGH] CWE-77 CVE-2017-7161: An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue invol An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.
nvdapple
CVE-2019-8535P3HIGHCVSS 8.8fixed in 12.1≥ unspecified, < Safari 12.12019-12-18
CVE-2019-8535 [HIGH] CWE-787 CVE-2019-8535: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 1 A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8536P3HIGHCVSS 8.8fixed in 12.1≥ unspecified, < Safari 12.12019-12-18
CVE-2019-8536 [HIGH] CWE-787 CVE-2019-8536: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12 A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8735P3HIGHCVSS 8.8v132019-09-19
CVE-2019-8735 [HIGH] CVE-2019-8735: Safari 13 Apple Security Update: About the security content of Safari 13 Product: Safari Version: 13 CVE: CVE-2019-8735 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2019-6212P3HIGHCVSS 8.8fixed in 12.0.3≥ unspecified, < Safari 12.0.32019-03-05
CVE-2019-6212 [HIGH] CWE-787 CVE-2019-6212: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-6217P3HIGHCVSS 8.8fixed in 12.0.3≥ unspecified, < Safari 12.0.32019-03-05
CVE-2019-6217 [HIGH] CWE-787 CVE-2019-6217: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-6216P3HIGHCVSS 8.8fixed in 12.0.3≥ unspecified, < Safari 12.0.32019-03-05
CVE-2019-6216 [HIGH] CWE-787 CVE-2019-6216: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-6226P3HIGHCVSS 8.8fixed in 12.0.3≥ unspecified, < Safari 12.0.32019-03-05
CVE-2019-6226 [HIGH] CWE-787 CVE-2019-6226: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2018-4088P3HIGHCVSS 8.8fixed in 11.0.32018-04-03
CVE-2018-4088 [HIGH] CWE-119 CVE-2018-4088: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows
nvdapple
CVE-2018-4096P3HIGHCVSS 8.8fixed in 11.0.32018-04-03
CVE-2018-4096 [HIGH] CWE-119 CVE-2018-4096: An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13 An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "WebKit" component. It allows
nvdapple
CVE-2019-8609P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8609 [HIGH] CWE-787 CVE-2019-8609: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8596P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8596 [HIGH] CWE-787 CVE-2019-8596: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8610P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8610 [HIGH] CWE-416 CVE-2019-8610: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8733P3HIGHCVSS 8.8v132019-09-19
CVE-2019-8733 [HIGH] CVE-2019-8733: Safari 13 Apple Security Update: About the security content of Safari 13 Product: Safari Version: 13 CVE: CVE-2019-8733 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2019-8707P3HIGHCVSS 8.8v132019-09-19
CVE-2019-8707 [HIGH] CVE-2019-8707: Safari 13 Apple Security Update: About the security content of Safari 13 Product: Safari Version: 13 CVE: CVE-2019-8707 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2019-8726P3HIGHCVSS 8.8v132019-09-19
CVE-2019-8726 [HIGH] CVE-2019-8726: Safari 13 Apple Security Update: About the security content of Safari 13 Product: Safari Version: 13 CVE: CVE-2019-8726 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling.
apple
CVE-2011-3046P3CRITICALCVSS 10.0fixed in 5.1.72012-03-09
CVE-2011-3046 [CRITICAL] CWE-79 CVE-2011-3046: The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigat The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a "Universal XSS (UXSS)" issue.
nvd
CVE-2019-8571P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8571 [HIGH] CWE-787 CVE-2019-8571: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8587P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8587 [HIGH] CWE-129 CVE-2019-8587: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
CVE-2019-8594P3HIGHCVSS 8.8fixed in 12.1.1≥ unspecified, < Safari 12.1.12019-12-18
CVE-2019-8594 [HIGH] CWE-787 CVE-2019-8594: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
nvdapple
Apple Safari vulnerabilities | cvebase