Red Hat Security Advisory

RHSA-2025:10364

webkitgtk4 security update

Released 2025-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.48.3-2.el7_9, webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-jsc-2.48.3-2.el7_9 +1
Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-doc-2.48.3-2.el7_9, webkitgtk4-jsc-devel-2.48.3-2.el7_9

Fixes 228 records

TI-2025-17951 CVE-2025-24201 · GHSA-2j99-5q75-3f57

Out-of-bounds write in Apple Safari

CRITICAL 100KEV

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03847 Published 2025-03-11 Partial fix · 18.3.1, 15.8.4 +6 CWE-787

TI-2021-01573 CVE-2021-1871 · GHSA-hvr3-8pvc-577j

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07002 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-01572 CVE-2021-1870 · GHSA-f8fh-g8mv-p7hh

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0771 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2024-29863 CVE-2024-44308 · GHSA-6wpw-4vr3-6744

Apple Safari: Processing maliciously crafted web content may lead to arbitrary code…

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09852 Published 2024-11-19 Fixed in 18.1.1, 17.7.2 +2

TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843

TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416

TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15722 CVE-2023-32435 · GHSA-xqxr-jq6f-63f9

Out-of-bounds write in Apple macOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22951 Published 2023-06-23 Partial fix · 13.3, 15.7 +1 CWE-787

TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416

TI-2023-12769 CVE-2023-28205 · GHSA-6qjh-p74q-89mv

Use after free in Apple iOS and iPadOS

CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27076 Published 2023-04-10 Partial fix · 15.7, 16.4 +1 CWE-416

TI-2023-09361 CVE-2023-23529 · GHSA-c5hw-5p2j-xqg7

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09426 Published 2023-02-27 Partial fix · 16.3, 13.2 +1 CWE-843

TI-2022-24081 CVE-2022-48503 · GHSA-hqf2-wqhm-8v23

Improper array index validation in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03213 Published 2023-08-14 Partial fix · 12.5, 15.6 +1 CWE-129

TI-2022-20866 CVE-2022-42856 · GHSA-qh2r-8xvg-hm24

Type confusion in Apple tvOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08523 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-843

TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787

TI-2022-06885 CVE-2022-22620 · GHSA-2886-x646-53fj

Use after free in Apple Safari

CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.16342 Published 2022-03-18 Fixed in 15.3, 12.2 CWE-416

TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190

TI-2021-11140 CVE-2021-30762 · GHSA-gj4g-95xx-7pc7

Use after free in Apple iOS

CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10986 Published 2021-09-08 Partial fix · 12.5 CWE-416

TI-2021-11139 CVE-2021-30761 · GHSA-6qp6-2ggr-xv6x

Out-of-bounds write in Apple iOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10545 Published 2021-09-08 Partial fix · 12.5 CWE-787

TI-2021-11051 CVE-2021-30666 · GHSA-4cx8-frpf-fjc3

Memory corruption in Apple iOS

CRITICAL 97KEV

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02998 Published 2021-09-08 Partial fix · 12.5 CWE-119

TI-2021-11050 CVE-2021-30665 · GHSA-fgq5-6x94-h566

Out-of-bounds write in Apple macOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03706 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-787

TI-2021-11048 CVE-2021-30663 · GHSA-5g93-pf3w-6f59

Integer overflow in Apple macOS

CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03521 Published 2021-09-08 Partial fix · 11.3, 14.5 +3 CWE-190

TI-2021-11046 CVE-2021-30661 · GHSA-79qq-9x66-f5r5

Use after free in Apple iOS and iPadOS

CRITICAL 97KEV

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04491 Published 2021-09-08 Partial fix · 14.5, 14.1 +3 CWE-416

TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843

TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125

TI-2023-12768 CVE-2023-28204 · GHSA-m85j-wjrj-c4rg

Out-of-bounds read in Apple macOS

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.14292 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-125

TI-2024-29864 CVE-2024-44309 · GHSA-6cpp-mpjx-cx8v

Cross-site scripting in Apple Safari

CRITICAL 85KEV

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.21948 Published 2024-11-19 Partial fix · 18.1.1, 17.7.2 +2 CWE-79

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2020-07926 CVE-2020-9850 · GHSA-4jv4-fxjp-hmm7

Apple iOS: A remote attacker may be able to cause arbitrary code execution

HIGH 81

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77398 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5

TI-2022-20876 CVE-2022-42867 · GHSA-jhmj-whj3-74pr

Use after free in Apple tvOS

HIGH 66

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.34815 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-416

TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400

TI-2024-27164 CVE-2024-40782 · GHSA-4rw8-cxgp-9r2g

Use after free in Apple Safari

MEDIUM 51

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416

TI-2020-07880 CVE-2020-9802 · GHSA-x2r8-x6h4-39jq

Apple iOS: Processing maliciously crafted web content may lead to arbitrary code execution

MEDIUM 51

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08273 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5

TI-2022-09957 CVE-2022-26700 · GHSA-6mqr-f9rh-mggr

Out-of-bounds write in Apple macOS

MEDIUM 49

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01472 Published 2022-09-23 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-06888 CVE-2022-22624 · GHSA-w76j-g6q7-46hq

Use after free in Apple Safari

MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01321 Published 2022-09-23 Partial fix · 15.4, 12.3 CWE-416

TI-2020-10749 CVE-2020-13753 · GHSA-7vvx-4whv-jg73

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly…

MEDIUM 49

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03266 Published 2020-07-14 Fixed CWE-20

TI-2020-07969 CVE-2020-9895 · GHSA-j4v5-6jrm-p9fx

Use after free in Apple iOS

MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04491 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2024-18434 CVE-2024-27820 · GHSA-qvvc-v3mj-qch5

Memory corruption in Apple Safari

MEDIUM 48

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01016 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-119

TI-2022-06893 CVE-2022-22629 · GHSA-pp63-cgj5-h996

Out-of-bounds write in Apple Safari

MEDIUM 48

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05046 Published 2022-09-23 Partial fix · 15.4, 12.3 +2 CWE-787

TI-2023-21698 CVE-2023-41074 · GHSA-xq9m-9whg-jv3m

Code injection in Apple iOS and iPadOS

MEDIUM 47

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04122 Published 2023-09-26 Partial fix · 17, 14 +1 CWE-94

TI-2024-36579 CVE-2024-54502 · GHSA-w64q-ccr3-358g

Out-of-bounds read in Apple Safari

MEDIUM 46

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17137 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-04244 CVE-2024-4558 · GHSA-r4j8-j63p-24j8

Use after free in Google Chrome

MEDIUM 46

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01533 Published 2024-05-07 Partial fix · 124.0.6367.155 CWE-416

TI-2023-22971 CVE-2023-42890 · GHSA-mw7v-292c-8697

Code injection in Apple Safari

MEDIUM 46

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03208 Published 2023-12-12 Partial fix · 17.2, 14.2 +1 CWE-94

TI-2020-10662 CVE-2020-13584 · GHSA-w3wx-pfgj-qgv3

Use after free in Webkit

MEDIUM 46

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04938 Published 2020-12-03 Partial fix CWE-416

TI-2025-17906 CVE-2025-24150 · GHSA-qmjg-q5x7-48p2

Command injection in Apple Safari

MEDIUM 45

A privacy issue was addressed with improved handling of files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0294 Published 2025-01-27 Partial fix · 18.3, 15.3 CWE-77

TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2023-21233 CVE-2023-40414 · GHSA-rvwq-r5pc-g3h9

Use after free in Apple iOS and iPadOS

MEDIUM 45

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2024-01-10 Partial fix · 17, 14 +1 CWE-416

TI-2023-21216 CVE-2023-40397 · GHSA-6x6m-3789-2cmw

Apple macOS: A remote attacker may be able to cause arbitrary javascript code execution

MEDIUM 45

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2023-09-06 Partial fix · 13.5

TI-2023-22939 CVE-2023-42852 · GHSA-jmh8-4h3g-x5g5

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 44

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01979 Published 2023-10-25 Partial fix · 16.7, 17.1 +2

TI-2022-20835 CVE-2022-42823 · GHSA-rjj4-r4wr-cjq8

Type confusion in Apple macOS

MEDIUM 44

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0183 Published 2022-11-01 Partial fix · 13, 16.1 +1 CWE-843

TI-2022-14413 CVE-2022-32886 · GHSA-rm7v-mc66-6r49

Out-of-bounds write in Apple iOS

MEDIUM 44

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01867 Published 2022-09-20 Partial fix · 16, 15.7 CWE-787

TI-2022-14332 CVE-2022-32792 · GHSA-p8vh-mwc9-r3jw

Out-of-bounds write in Apple macOS

MEDIUM 44

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02302 Published 2022-09-23 Partial fix · 12.5, 15.6 +1 CWE-787

TI-2022-09972 CVE-2022-26717 · GHSA-53cf-5qp4-7jrr

Use after free in Apple macOS

MEDIUM 44

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02035 Published 2022-11-01 Partial fix · 12.4, 15.5 +2 CWE-416

TI-2020-10621 CVE-2020-13543 · GHSA-mqwf-vg2c-5ch3

Use after free in Webkit

MEDIUM 44

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03487 Published 2020-12-03 Partial fix CWE-416

TI-2024-15320 CVE-2024-23213 · GHSA-3h6x-952r-xr8p

Memory corruption in Apple Safari

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.015 Published 2024-01-23 Partial fix · 17.3, 16.7.5 +2 CWE-119

TI-2023-19972 CVE-2023-38600 · GHSA-p785-479c-32q6

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 43

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0143 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-17546 CVE-2023-35074 · GHSA-6xcr-xqjv-c7jp

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01584 Published 2023-09-26 Partial fix · 17, 14 +1

TI-2022-23090 CVE-2022-46700 · GHSA-9qwf-rgvm-3vxv

Out-of-bounds write in Apple tvOS

MEDIUM 43

A memory corruption issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01319 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787

TI-2022-23089 CVE-2022-46699 · GHSA-vpx9-p4q4-3hhh

Out-of-bounds write in Apple tvOS

MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01303 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-787

TI-2022-23081 CVE-2022-46691 · GHSA-p4fx-x9cg-v98g

Out-of-bounds write in Apple tvOS

MEDIUM 43

A memory consumption issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01623 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-787

TI-2022-20872 CVE-2022-42863 · GHSA-34j8-gp4f-rgwg

Out-of-bounds write in Apple tvOS

MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01236 Published 2022-12-15 Partial fix · 16.2, 13.1 +1 CWE-787

TI-2022-14438 CVE-2022-32912 · GHSA-5qf8-w237-g9xq

Out-of-bounds read in Apple iOS

MEDIUM 43

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01474 Published 2022-09-20 Partial fix · 16, 15.7 CWE-125

TI-2022-14415 CVE-2022-32888 · GHSA-c3gw-7267-x4wq

Out-of-bounds write in Apple macOS

MEDIUM 43

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01535 Published 2022-11-01 Partial fix · 13, 16 +4 CWE-787

TI-2022-09974 CVE-2022-26719 · GHSA-98pr-6p46-3665

Out-of-bounds write in Apple macOS

MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0124 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-06892 CVE-2022-22628 · GHSA-f8p7-rhpm-pg98

Use after free in Apple Safari

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01321 Published 2022-09-23 Partial fix · 15.4, 12.3 +1 CWE-416

TI-2021-11301 CVE-2021-30934

Buffer overflow in Apple watchOS

MEDIUM 43

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02641 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-120

TI-2021-11223 CVE-2021-30851

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 43

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02394 Published 2021-08-24 Partial fix · 15, 8 CWE-787

TI-2021-04851 CVE-2021-21806 · GHSA-x2v5-56r3-vrw9

Use after free in Webkit

MEDIUM 43

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02835 Published 2021-07-08 Partial fix CWE-416

TI-2021-04825 CVE-2021-21779 · GHSA-fvf7-58x3-4492

Use after free in Webkit

MEDIUM 43

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02924 Published 2021-07-08 Partial fix CWE-416

TI-2021-01551 CVE-2021-1844 · GHSA-7j8f-prmh-229c

Out-of-bounds write in Apple macOS

MEDIUM 43

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02377 Published 2021-04-02 Partial fix · 11.2, 14.4 +2 CWE-787

TI-2020-08024 CVE-2020-9951 · GHSA-mv2h-wfgr-5q32

Use after free in Apple Safari

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02333 Published 2020-10-16 Partial fix · Safari 14.0 CWE-416

TI-2020-07967 CVE-2020-9893 · GHSA-8m3c-93m2-83h7

Use after free in Apple iOS

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02949 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-416

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

Type confusion in Apple Safari

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-18464 CVE-2024-27851 · GHSA-7x84-wx2f-425f

Memory corruption in Apple Safari

MEDIUM 42

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-119

TI-2024-18447 CVE-2024-27833 · GHSA-984g-34ww-rvq9

Integer overflow in Apple Safari

MEDIUM 42

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +1 CWE-190

TI-2024-18422 CVE-2024-27808 · GHSA-pwf2-5r2p-9c9w

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0118 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-786

TI-2023-23047 CVE-2023-43010 · GHSA-4v27-f65g-fr6x

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2026-03-12 Partial fix · 17.2, 14.2 +2 CWE-787

TI-2023-23026 CVE-2023-42950 · GHSA-6cvp-282g-6jp8

Use after free in Apple Safari

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2024-03-28 Partial fix · 17.2, 14.2 +1 CWE-416

TI-2023-22922 CVE-2023-42833 · GHSA-q6j4-xjv3-96rj

Code injection in Apple iOS and iPadOS

MEDIUM 42

A correctness issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00993 Published 2024-01-10 Partial fix · 17, 14 CWE-94

TI-2023-21269 CVE-2023-40451 · GHSA-p489-ffhp-rw3f

Apple Safari: An attacker with JavaScript execution may be able to execute arbitrary code

MEDIUM 42

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01085 Published 2023-09-26 Partial fix · 17

TI-2023-10718 CVE-2023-25358 · GHSA-xcc8-3vrq-wjg2

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01062 Published 2023-03-02 Partial fix CWE-416

TI-2023-09351 CVE-2023-23518 · GHSA-9cf9-qjr8-c7jw

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00902 Published 2023-02-27 Partial fix · 16.3, 11.7 +3 CWE-787

TI-2023-09350 CVE-2023-23517 · GHSA-vjc5-4hxh-h2rw

Memory corruption in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00902 Published 2023-02-27 Partial fix · 16.3, 11.7 +3 CWE-119

TI-2022-09971 CVE-2022-26716 · GHSA-q548-f4xm-m4gm

Out-of-bounds write in Apple macOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01141 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-09966 CVE-2022-26710 · GHSA-qm8r-pwq4-p842

Use after free in Apple macOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01109 Published 2022-11-01 Partial fix · 12.4, 8.6 +1 CWE-416

TI-2022-09965 CVE-2022-26709 · GHSA-xcg6-3xh5-6m77

Use after free in Apple macOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01109 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-416

TI-2021-11320 CVE-2021-30953

Out-of-bounds read in Apple watchOS

MEDIUM 42

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01952 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-125

TI-2021-11318 CVE-2021-30951

Use after free in Apple watchOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0202 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-416

TI-2021-11303 CVE-2021-30936

Use after free in Apple watchOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01992 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-416

TI-2021-11258 CVE-2021-30889

Buffer overflow in Apple iOS and iPadOS

MEDIUM 42

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01932 Published 2021-08-24 Partial fix · 15.1, 12.0 +1 CWE-120

TI-2021-11176 CVE-2021-30799 · GHSA-rh3c-99q9-27v6

Out-of-bounds write in Apple Security Update - Catalina

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02263 Published 2021-09-08 Partial fix · 2021, 14.7 +1 CWE-787

TI-2021-11174 CVE-2021-30797 · GHSA-q239-wm45-8mwc

Apple iOS: Processing maliciously crafted web content may lead to code execution

MEDIUM 42

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01867 Published 2021-09-08 Partial fix · 14.7, 11.5 +2

TI-2021-11172 CVE-2021-30795 · GHSA-mq98-f72q-hfx8

Use after free in Apple iOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-416

TI-2021-11115 CVE-2021-30734 · GHSA-6h5w-63g9-w5m9

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02023 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-787

TI-2021-01528 CVE-2021-1817 · GHSA-wm9j-fw55-hv9g

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01939 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-787

TI-2020-10636 CVE-2020-13558 · GHSA-qhvm-2jxc-mqxw

Use after free in Webkit

MEDIUM 42

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01857 Published 2021-03-03 Partial fix CWE-416

TI-2020-08053 CVE-2020-9983 · GHSA-6c43-4qm7-f3r6

Out-of-bounds write in Apple Safari

MEDIUM 42

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02201 Published 2020-10-16 Partial fix · Safari 14.0 CWE-787

TI-2020-08020 CVE-2020-9947 · GHSA-xvmv-wg5c-7x3w

Use after free in Apple tvOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01789 Published 2020-12-08 Partial fix · 14.0, 7.0 +2 CWE-416

TI-2020-07885 CVE-2020-9807 · GHSA-3w5h-qwww-3fff

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01848 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-787

TI-2020-07884 CVE-2020-9806 · GHSA-6m96-8rvh-6274

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01863 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-787

TI-2020-07881 CVE-2020-9803 · GHSA-7367-6vqq-q8g3

Improper input validation in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01845 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-20

TI-2025-22444 CVE-2025-31204 · GHSA-9wc3-7frf-f65v

Memory corruption in Apple Safari

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119

TI-2024-36617 CVE-2024-54543 · GHSA-j23p-p7c9-5hm5

Out-of-bounds write in Apple Safari

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00801 Published 2025-01-27 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2023-23039 CVE-2023-42970 · GHSA-9v5v-qfv2-66qp

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00571 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-416

TI-2023-20826 CVE-2023-39928 · GHSA-7245-jcxv-7q52

Use after free in Webkit

MEDIUM 41

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01446 Published 2023-10-06 Partial fix CWE-416

TI-2023-19983 CVE-2023-38611 · GHSA-pxp9-4fx7-v479

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01264 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-19967 CVE-2023-38595 · GHSA-xf6p-jxqp-mvh4

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01264 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-19966 CVE-2023-38594 · GHSA-rv3f-cww5-rv8r

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01243 Published 2023-07-26 Partial fix · 16.6, 13.5 +2

TI-2022-20838 CVE-2022-42826 · GHSA-8hhw-p6vr-v3wv

Use after free in Apple macOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2023-02-27 Partial fix · 13, 16.1 CWE-416

TI-2022-14412 CVE-2022-32885

Out-of-bounds write in Apple macOS

MEDIUM 41

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00799 Published 2023-05-08 Partial fix · 12.5, 15.6 CWE-787

TI-2022-06901 CVE-2022-22637 · GHSA-p38h-v883-px7v

Origin validation error in Apple Safari

MEDIUM 41

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00761 Published 2022-09-23 Partial fix · 15.4, 12.3 +1 CWE-346

TI-2022-06857 CVE-2022-22590 · GHSA-8gq6-m624-5hx9

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01555 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-416

TI-2021-11192 CVE-2021-30818 · GHSA-rx33-r3jc-7m3x

Type confusion in Apple iOS and iPadOS

MEDIUM 41

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01618 Published 2021-10-28 Partial fix · 14.8, 15 +1 CWE-843

TI-2021-11184 CVE-2021-30809 · GHSA-6gcj-5f9m-97rp

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01511 Published 2021-10-28 Partial fix · 15, 8 CWE-416

TI-2021-11136 CVE-2021-30758 · GHSA-7qcx-m2gc-9659

Type confusion in Apple iOS

MEDIUM 41

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01658 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-843

TI-2021-11128 CVE-2021-30749 · GHSA-7477-545w-5xj3

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01677 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-787

TI-2021-01501 CVE-2021-1788 · GHSA-7xrr-c599-c43j

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01676 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-416

TI-2020-08021 CVE-2020-9948 · GHSA-f937-gh67-6x56

Type confusion in Apple Safari

MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01694 Published 2020-10-16 Partial fix · Safari 14.0 CWE-843

TI-2024-36622 CVE-2024-54551 · GHSA-hrw4-vr8h-245c

Memory corruption in Apple Safari

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2025-03-20 Partial fix · 17.6, 14.6 +2 CWE-119

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2023-19969 CVE-2023-38597 · GHSA-xqh8-5mp7-f6qr

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 40

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01211 Published 2023-07-26 Partial fix · 16.6, 13.5 +1

TI-2023-19964 CVE-2023-38592 · GHSA-959x-mqwc-q2fp

Apple tvOS: Processing web content may lead to arbitrary code execution

MEDIUM 40

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01211 Published 2023-07-28 Partial fix · 16.6, 13.5 +1

TI-2023-15683 CVE-2023-32393 · GHSA-9hxv-f7q5-4j7c

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00952 Published 2023-07-27 Partial fix · 16.3, 13.2 +1

TI-2023-12762 CVE-2023-28198 · GHSA-p6rj-wprj-c52h

Use after free in Apple macOS

MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2023-08-14 Partial fix · 13.3, 16.4 CWE-416

TI-2022-14351 CVE-2022-32816 · GHSA-jjrw-xpw9-v3qh

Apple macOS: Visiting a website that frames malicious content may lead to UI spoofing

MEDIUM 40

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.08191 Published 2022-09-23 Partial fix · 12.5, 15.6 +1 CWE-451

TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

Out-of-bounds read in Apple Safari

LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125

TI-2025-28182 CVE-2025-43480 · GHSA-wg34-qg7p-mhvv

Apple Safari: A malicious website may exfiltrate data cross-origin

LOW 38

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00491 Published 2025-11-04 Partial fix · 26.1 CWE-942

TI-2021-11221 CVE-2021-30849 · GHSA-4jcp-gxvj-75jh

Out-of-bounds write in Apple iOS and iPadOS

LOW 38

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01904 Published 2021-10-19 Partial fix · 14.8, 15 +2 CWE-787

TI-2020-07938 CVE-2020-9862 · GHSA-qv6h-hj4m-385f

Improper output encoding in Apple iOS

LOW 38

A command injection issue existed in Web Inspector.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01922 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-116

TI-2025-17972 CVE-2025-24223 · GHSA-7mch-v7x5-pxc4

Cross-site request forgery in Apple Safari

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00329 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352

TI-2024-18468 CVE-2024-27856 · GHSA-55ww-9933-hhf5

Code injection in Apple Safari

LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00622 Published 2025-01-15 Partial fix · 17.5, 16.7.8 +3 CWE-94

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2022-12529 CVE-2022-30293 · GHSA-vmhh-gfrw-g264

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in…

LOW 37

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02221 Published 2022-05-06 Fixed CWE-787

TI-2021-11321 CVE-2021-30954

Type confusion in Apple watchOS

LOW 37

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01452 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-843

TI-2021-11220 CVE-2021-30848 · GHSA-wj2m-cc2g-mxw2

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0127 Published 2021-10-19 Partial fix · 14.8, 15 CWE-787

TI-2021-11218 CVE-2021-30846 · GHSA-28cj-vpvc-jgj6

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01355 Published 2021-10-19 Partial fix · 14.8, 15 +1 CWE-787

TI-2021-04821 CVE-2021-21775 · GHSA-ghh6-x87m-6qjh

Use after free in Webkit

LOW 37

A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01274 Published 2021-07-07 Partial fix CWE-416

TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416

TI-2025-17963 CVE-2025-24213 · GHSA-p7wf-qqfr-f6xp

Type confusion in Apple Safari

LOW 36

This issue was addressed with improved handling of floats.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0043 Published 2025-03-31 Partial fix · 18.5, 17.7.7 +3 CWE-843

TI-2021-11349 CVE-2021-30984

Race condition in Apple watchOS

LOW 36

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0167 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-362

TI-2021-11257 CVE-2021-30888

Open redirect in Apple iOS and iPadOS

LOW 36

An information leakage issue was addressed.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.01729 Published 2021-08-24 Partial fix · 15.1, 14.8 +2 CWE-601

TI-2024-36585 CVE-2024-54508 · GHSA-rq2m-fjrh-fqx7

Out-of-bounds read in Apple Safari

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2023-22959 CVE-2023-42875 · GHSA-5892-jw8m-4684

Code injection in Apple iOS and iPadOS

LOW 35

Processing web content may lead to arbitrary code execution.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00555 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-94

TI-2023-19947 CVE-2023-38572 · GHSA-qfg5-2446-wqxx

Apple Safari: A website may be able to bypass Same Origin Policy

LOW 35

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01168 Published 2023-07-27 Partial fix · 16.6, 13.5 +2

TI-2023-15650 CVE-2023-32359 · GHSA-m58q-xcxc-4q6h

Apple iOS and iPadOS: A user's password may be read aloud by VoiceOver

LOW 35

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01129 Published 2023-10-25 Partial fix · 16.7

TI-2014-01356 CVE-2014-1745 · GHSA-pr96-m2pj-3g36

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome…

LOW 35

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01681 Published 2014-05-21 Partial fix CWE-399

TI-2020-08025 CVE-2020-9952 · GHSA-2hf4-pxq2-63h5

Cross-site scripting in Apple iOS

LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01497 Published 2020-10-16 Partial fix · iOS 14.0 and iPadOS 14.0, tvOS 14.0 +4 CWE-79

TI-2020-07920 CVE-2020-9843 · GHSA-9c59-pwqp-c9gc

Cross-site scripting in Apple iOS

LOW 34

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01156 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-79

TI-2020-07883 CVE-2020-9805 · GHSA-8v3h-22p7-j9pw

Cross-site scripting in Apple iOS

LOW 34

A logic issue was addressed with improved restrictions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01214 Published 2020-06-09 Partial fix · iOS 13.5 and iPadOS 13.5, tvOS 13.4.5 +5 CWE-79

TI-2025-17959 CVE-2025-24209 · GHSA-j8gc-8grp-vffr

Buffer overflow in Apple Safari

LOW 33

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00903 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +2 CWE-120

TI-2024-15376 CVE-2024-23271 · GHSA-c7hr-m654-77g5

Improper access control in Apple Safari

LOW 33

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00801 Published 2024-04-24 Partial fix · 17.3, 14.3 +1 CWE-284

TI-2021-11196 CVE-2021-30823 · GHSA-fmvg-g54p-g6qj

Apple iOS and iPadOS: An attacker in a privileged network position may be able to bypass…

LOW 33

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02231 Published 2021-10-28 Partial fix · 14.8, 15 +2

TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2023-22365 CVE-2023-41983 · GHSA-ch8m-5863-fcr7

Memory corruption in Apple iOS and iPadOS

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2023-10-25 Partial fix · 16.7, 17.1 +1 CWE-119

TI-2022-06924 CVE-2022-22662 · GHSA-83p3-v4fm-fxh5

Apple macOS: Processing maliciously crafted web content may disclose sensitive user…

LOW 32

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01417 Published 2022-05-26 Partial fix · 11.6, 2022

TI-2022-06859 CVE-2022-22592 · GHSA-4r4q-3gg9-w59h

Apple iOS and iPadOS: Processing maliciously crafted web content may prevent Content…

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01623 Published 2022-03-18 Partial fix · 15.3, 12.2 +1

TI-2021-20570 CVE-2021-45483 · GHSA-h8mj-hhrj-rvh6

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a…

LOW 32

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0152 Published 2021-12-25 Partial fix CWE-416

TI-2021-20569 CVE-2021-45482 · GHSA-73cm-q45j-cwwr

In WebKitGTK before 2.32.4, there is a use-after-free in…

LOW 32

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01532 Published 2021-12-25 Partial fix CWE-416

TI-2021-20568 CVE-2021-45481 · GHSA-p53f-pm5m-wpj7

In WebKitGTK before 2.32.4, there is incorrect memory allocation in…

LOW 32

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01532 Published 2021-12-25 Partial fix CWE-401

TI-2021-11264 CVE-2021-30897

An issue existed in the specification for the resource timing API.

LOW 32

An issue existed in the specification for the resource timing API.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01714 Published 2021-08-24 Partial fix · 12.0

TI-2021-11256 CVE-2021-30887

Apple iOS and iPadOS: Processing maliciously crafted web content may lead to unexpectedly…

LOW 32

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01784 Published 2021-08-24 Partial fix · 15.1, 12.0 +1

TI-2021-01530 CVE-2021-1820 · GHSA-g25v-ch2q-jp7c

Apple iOS and iPadOS: Processing maliciously crafted web content may result in the…

LOW 32

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01339 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-665

TI-2021-01513 CVE-2021-1801 · GHSA-99vx-wqpw-hqrq

Apple iOS and iPadOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01515 Published 2021-04-02 Partial fix · 14.4, 11.2 +1

TI-2021-01511 CVE-2021-1799 · GHSA-94v4-v74g-2hx6

Apple iOS and iPadOS: A malicious website may be able to access restricted ports on…

LOW 32

A port redirection issue was addressed with additional port validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01763 Published 2021-04-02 Partial fix · 14.4, 11.2 +2

TI-2021-01478 CVE-2021-1765 · GHSA-872w-fg9q-jgjx

Apple macOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01413 Published 2021-04-02 Partial fix · 11.2

TI-2020-07988 CVE-2020-9915 · GHSA-9p56-8h6v-343m

An access issue existed in Content Security Policy.

LOW 32

An access issue existed in Content Security Policy.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01504 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5

TI-2024-27245 CVE-2024-40866 · GHSA-h9cp-5vvc-8wqc

Apple Safari: Visiting a malicious website may lead to address bar spoofing

LOW 31

The issue was addressed with improved UI.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00933 Published 2024-09-16 Partial fix · 18, 15

TI-2024-27171 CVE-2024-40789 · GHSA-6mp9-hrx8-6ffg

Out-of-bounds read in Apple Safari

LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01148 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125

TI-2024-27158 CVE-2024-40776 · GHSA-4645-h4xp-pj82

Use after free in Apple Safari

LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01006 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2023-23032 CVE-2023-42956 · GHSA-jprr-pf4r-gvp5

Apple Safari: Processing web content may lead to a denial-of-service

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00981 Published 2024-03-28 Partial fix · 17.2, 14.2

TI-2023-19971 CVE-2023-38599 · GHSA-c9g8-3cc3-422m

Apple Safari: A website may be able to track sensitive user information

LOW 31

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01043 Published 2023-07-28 Partial fix · 16.6, 13.5 +2

TI-2023-19556 CVE-2023-38133 · GHSA-57gp-c4c9-4j3c

Apple Safari: Processing web content may disclose sensitive information

LOW 31

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01043 Published 2023-07-26 Partial fix · 16.6, 13.5 +2

TI-2023-15661 CVE-2023-32370 · GHSA-m6rg-hrc7-fqpj

Apple macOS: Content Security Policy to block domains with wildcards may fail

LOW 31

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00787 Published 2023-09-06 Partial fix · 13.3

TI-2023-12544 CVE-2023-27954 · GHSA-2q9c-qj72-94fh

Incorrect authorization in Apple macOS

LOW 31

The issue was addressed by removing origin information.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00926 Published 2023-05-08 Partial fix · 13.3, 16.4 +2 CWE-863

TI-2022-23088 CVE-2022-46698 · GHSA-3mmq-4r29-8xqf

Protection mechanism failure in Apple iCloud for Windows

LOW 31

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01004 Published 2022-12-15 Partial fix · 14.1, 16.2 +2 CWE-693

TI-2022-20862 CVE-2022-42852 · GHSA-3p9p-h6x6-85gg

Information disclosure in Apple tvOS

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01042 Published 2022-12-15 Partial fix · 16.2, 13.1 +2 CWE-200

TI-2022-20815 CVE-2022-42799 · GHSA-mjhv-4xgh-4wx2

Clickjacking in Apple macOS

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01671 Published 2022-11-01 Partial fix · 13, 16.1 +1 CWE-1021

TI-2022-14448 CVE-2022-32923 · GHSA-4w5x-gxff-8vr4

Cross-site scripting in Apple macOS

LOW 31

A correctness issue in the JIT was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01163 Published 2022-11-01 Partial fix · 13, 16.1 +2 CWE-79

TI-2022-06856 CVE-2022-22589 · GHSA-4c33-fwgf-qv6r

Apple iOS and iPadOS: Processing a maliciously crafted mail message may lead to running…

LOW 31

A validation issue was addressed with improved input sanitization.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02005 Published 2022-03-18 Partial fix · 15.3, 12.2 +1

TI-2022-00054 CVE-2022-0108 · GHSA-mq88-wc55-whqv

Origin validation error in Google Chrome

LOW 31

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01147 Published 2022-02-11 Fixed in 97.0.4692.71 CWE-346

TI-2025-22454 CVE-2025-31215 · GHSA-3jpv-h4fh-v8h9

Improper input validation in Apple Safari

LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00654 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-20

TI-2025-17900 CVE-2025-24143 · GHSA-23h9-xj7q-3m7r

Missing authorization in Apple Safari

LOW 30

The issue was addressed with improved access restrictions to the file system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00811 Published 2025-01-27 Partial fix · 18.3, 15.3 +1 CWE-862

TI-2024-36632 CVE-2024-54658 · GHSA-rf6c-m595-cvc8

Uncontrolled resource consumption in Apple Safari

LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00536 Published 2025-02-10 Partial fix · 17.4, 14.4 +2 CWE-400

TI-2024-36551 CVE-2024-54467 · GHSA-fvpp-8m58-5wxr

Information disclosure in Apple Safari

LOW 30

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00632 Published 2025-03-10 Partial fix · 18, 15 +2 CWE-200

TI-2024-29753 CVE-2024-44187 · GHSA-xmf6-p99q-898v

Origin validation error in Apple Safari

LOW 30

A cross-origin issue existed with "iframe" elements.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00646 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-346

TI-2024-27162 CVE-2024-40780 · GHSA-j573-cwg3-wh35

Out-of-bounds read in Apple Safari

LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.007 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125

TI-2024-18452 CVE-2024-27838 · GHSA-j24x-6m7r-h4gp

Cross-site scripting in Apple Safari

LOW 30

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00732 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-79

TI-2022-06861 CVE-2022-22594 · GHSA-3xf9-qwxv-r3r4

Origin validation error in Apple iOS and iPadOS

LOW 30

A cross-origin issue in the IndexDB API was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00821 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-346

TI-2021-11259 CVE-2021-30890

Cross-site scripting in Apple iOS and iPadOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01456 Published 2021-08-24 Partial fix · 15.1, 12.0 +1 CWE-79

TI-2021-11125 CVE-2021-30744 · GHSA-6gqw-9w99-v9gq

Cross-site scripting in Apple iOS and iPadOS

LOW 30

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01155 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-01535 CVE-2021-1826 · GHSA-868x-c2ph-qm3r

Cross-site scripting in Apple iOS and iPadOS

LOW 30

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01144 Published 2021-09-08 Partial fix · 14.5, 7.4 +1 CWE-79

TI-2021-01534 CVE-2021-1825 · GHSA-7gx9-m7c6-98gf

Cross-site scripting in Apple iOS and iPadOS

LOW 30

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01364 Published 2021-09-08 Partial fix · 14.5, 14.1 +4 CWE-79

TI-2020-07998 CVE-2020-9925 · GHSA-mqp2-6xg4-x69p

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01274 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-79

TI-2025-22445 CVE-2025-31205 · GHSA-jfxw-jpwh-7j8j

Cross-site request forgery in Apple Safari

LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00394 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352

TI-2024-29758 CVE-2024-44192 · GHSA-4j4j-rc2f-g9m5

Uncontrolled resource consumption in Apple Safari

LOW 29

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00447 Published 2025-03-10 Partial fix · 18, 15 +2 CWE-400

TI-2021-11073 CVE-2021-30689 · GHSA-2mm2-42pq-5qmv

Cross-site scripting in Apple iOS and iPadOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.011 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2025-17958 CVE-2025-24208 · GHSA-vwcg-r7w2-v8qc

Cross-site scripting in Apple Safari

LOW 28

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00583 Published 2025-03-31 Partial fix · 18.4 CWE-79

TI-2022-14418 CVE-2022-32891 · GHSA-3r34-xx92-673h

Clickjacking in Apple iOS

LOW 28

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00711 Published 2023-02-27 Partial fix · 16, 9 CWE-1021

TI-2021-11066 CVE-2021-30682 · GHSA-w85p-6q9m-866x

Apple iOS and iPadOS: A malicious application may be able to leak sensitive user…

LOW 28

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01666 Published 2021-09-08 Partial fix · 14.6, 11.4 +2

TI-2021-11209 CVE-2021-30836 · GHSA-92w6-fxxp-58w5

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01104 Published 2021-10-28 Partial fix · 14.8, 15 +1 CWE-125

TI-2021-11103 CVE-2021-30720 · GHSA-f2jw-679f-6726

Improper authentication in Apple iOS and iPadOS

LOW 27

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01372 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-287

TI-2024-29852 CVE-2024-44296 · GHSA-vhv3-639r-j6rp

Apple Safari: Processing maliciously crafted web content may prevent Content Security…

LOW 26

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00662 Published 2024-10-28 Partial fix · 18.1, 17.7.1 +3

TI-2023-22965 CVE-2023-42883 · GHSA-r8h5-fm59-g356

Apple Safari: Processing an image may lead to a denial-of-service

LOW 26

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00721 Published 2023-12-12 Partial fix · 17.2, 16.7 +2

TI-2024-29751 CVE-2024-44185 · GHSA-xjj4-3gwf-mwqh

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00289 Published 2024-10-24 Partial fix · 17.6, 14.6 +2

TI-2024-27161 CVE-2024-40779 · GHSA-7j6x-9hgr-mv7c

Out-of-bounds read in Apple Safari

LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00337 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125

TI-2022-20836 CVE-2022-42824 · GHSA-cjwx-h5pw-chvg

Apple macOS: Processing maliciously crafted web content may disclose sensitive user…

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00359 Published 2022-11-01 Partial fix · 13, 16.1 +1

TI-2022-14457 CVE-2022-32933 · GHSA-h9rg-mrq2-9rc6

Information disclosure in Apple macOS

LOW 25

An information disclosure issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00487 Published 2024-06-10 Partial fix · 12.5 CWE-200

TI-2021-18966 CVE-2021-42762 · GHSA-4ch5-gr7v-q6wq

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox…

LOW 25

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox,…

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00539 Published 2021-10-20 Fixed

TI-2020-07968 CVE-2020-9894 · GHSA-cgf9-hgh6-4hrm

Out-of-bounds read in Apple iOS

LOW 25

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.02837 Published 2020-10-16 Partial fix · iOS 13.6 and iPadOS 13.6, tvOS 13.4.8 +5 CWE-125

TI-2025-22494 CVE-2025-31257 · GHSA-289j-qjv7-62fr

Memory corruption in Apple Safari

LOW 24

This issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01099 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119

TI-2023-12522 CVE-2023-27932 · GHSA-j4q3-cq76-4p2r

Origin validation error in Apple macOS

LOW 24

This issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00202 Published 2023-05-08 Partial fix · 13.3, 16.4 +1 CWE-346

TI-2022-23082 CVE-2022-46692 · GHSA-gg8p-2j6g-g8mc

Insufficient verification of data authenticity in Apple iCloud for Windows

LOW 24

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00208 Published 2022-12-15 Partial fix · 14.1, 16.2 +3 CWE-345

TI-2021-11254 CVE-2021-30884

The issue was resolved with additional restrictions on CSS compositing.

LOW 24

The issue was resolved with additional restrictions on CSS compositing.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0115 Published 2021-08-24 Partial fix · 15, 8

TI-2025-22446 CVE-2025-31206 · GHSA-wv7w-fgmw-6vg2

Type confusion in Apple Safari

LOW 22

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01004 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-843

TI-2025-21727 CVE-2025-30427 · GHSA-62f2-58pp-q2wg

Use after free in Apple Safari

LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00833 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-416

TI-2025-17966 CVE-2025-24216 · GHSA-8mq7-j2hp-g76j

Memory corruption in Apple Safari

LOW 22

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00815 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-119

TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

Out-of-bounds write in Apple Safari

LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787

TI-2022-23095 CVE-2022-46705 · GHSA-wx4m-4gqh-j3gc

A spoofing issue existed in the handling of URLs.

LOW 22

A spoofing issue existed in the handling of URLs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00973 Published 2023-02-27 Partial fix · 13.1, 16.2

TI-2022-14445 CVE-2022-32919 · GHSA-4m5w-jr92-m987

Clickjacking in Apple macOS

LOW 22

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00588 Published 2024-01-10 Partial fix · 13.1, 16.2 CWE-1021

TI-2022-23110 CVE-2022-46725 · GHSA-43qx-6r5f-7vgw

A spoofing issue existed in the handling of URLs.

LOW 21

A spoofing issue existed in the handling of URLs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.006 Published 2023-08-14 Partial fix · 16.4

TI-2022-06939 CVE-2022-22677 · GHSA-q4jh-7c38-fcx6

Apple macOS: Video self-preview in a webRTC call may be interrupted if the user answers a…

LOW 21

A logic issue in the handling of concurrent media was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00779 Published 2022-11-01 Fixed in 12.4, 15.5

TI-2020-17803 CVE-2020-29623 · GHSA-9723-8v87-36qm

"Clear History and Website Data" did not clear the history.

LOW 16

"Clear History and Website Data" did not clear the history.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0036 Published 2021-04-02 Partial fix · 14.3, 11.1