Apple Safari vulnerabilities

1,592 known vulnerabilities affecting apple/safari.

Total CVEs

1,592

CISA KEV

actively exploited

Public exploits

157

Exploited in wild

Severity breakdown

CRITICAL211HIGH603MEDIUM757LOW20UNKNOWN1

Vulnerabilities

Page 67 of 80

CVE-2011-1115HIGHCVSS 7.5fixed in 5.0.62011-03-01

CVE-2011-1115 [HIGH] CVE-2011-1115: Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to c Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2011-1109HIGHCVSS 7.5fixed in 5.0.62011-03-01

CVE-2011-1109 [HIGH] CWE-20 CVE-2011-1109: Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) sty Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2011-1107MEDIUMCVSS 4.3fixed in 5.0.62011-03-01

CVE-2011-1107 [MEDIUM] CVE-2011-1107: Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the U Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors.

nvd

CVE-2011-0981HIGHCVSS 7.5fixed in 5.0.62011-02-10

CVE-2011-0981 [HIGH] CWE-20 CVE-2011-0981: Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allow Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2011-0983HIGHCVSS 7.5fixed in 5.0.62011-02-10

CVE-2011-0983 [HIGH] CWE-20 CVE-2011-0983: Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attac Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."

nvd

CVE-2010-4494HIGHCVSS 7.5fixed in 5.0.42010-12-07

CVE-2010-4494 [HIGH] CWE-415 CVE-2010-4494: Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.5 Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

nvd

CVE-2010-3817CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3817 [CRITICAL] CVE-2010-3817: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted w

nvd

CVE-2010-3820CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3820 [CRITICAL] CWE-399 CVE-2010-3820: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

nvd

CVE-2010-3805CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3805 [CRITICAL] CVE-2010-3805: Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.

nvd

CVE-2010-3821CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3821 [CRITICAL] CWE-119 CVE-2010-3821: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) vi

nvd

CVE-2010-3823CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3823 [CRITICAL] CVE-2010-3823: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 an Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Geolocation objects. NOTE: this might overlap CVE-2010-3415.

nvd

CVE-2010-3803CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3803 [CRITICAL] CWE-189 CVE-2010-3803: Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, a Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string.

nvd

CVE-2010-3822CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3822 [CRITICAL] CWE-119 CVE-2010-3822: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

nvd

CVE-2010-3809CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3809 [CRITICAL] CWE-94 CVE-2010-3809: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

nvd

CVE-2010-3824CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3824 [CRITICAL] CWE-399 CVE-2010-3824: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 an Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving SVG use elements.

nvd

CVE-2010-3812CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3812 [CRITICAL] CWE-189 CVE-2010-3812: Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari be Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors

nvd

CVE-2010-3811CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3811 [CRITICAL] CWE-399 CVE-2010-3811: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 an Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes.

nvd

CVE-2010-3819CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3819 [CRITICAL] CWE-94 CVE-2010-3819: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted we

nvd

CVE-2010-3816CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3816 [CRITICAL] CWE-399 CVE-2010-3816: Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 an Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.

nvd

CVE-2010-3808CRITICALCVSS 9.3≤ 5.0.2v5.0+51 more2010-11-22

CVE-2010-3808 [CRITICAL] CWE-94 CVE-2010-3808: WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on M WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

nvd

← Previous67 / 80Next →