Vulnerabilities

TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787

TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416

TI-2023-12768 CVE-2023-28204 · GHSA-m85j-wjrj-c4rg

Out-of-bounds read in Apple macOS

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.14292 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-125

TI-2022-20838 CVE-2022-42826 · GHSA-8hhw-p6vr-v3wv

Use after free in Apple macOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2023-02-27 Partial fix · 13, 16.1 CWE-416

TI-2020-16974 CVE-2020-27918 · GHSA-w4gf-42f5-463m

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01425 Published 2020-12-08 Partial fix · 7.1, 14.2 +4 CWE-416

TI-2016-04111 CVE-2016-4761 · GHSA-342r-hgrw-rv65

WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS

MEDIUM 41

WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0139 Published 2020-01-22 Partial fix · 2.14.0 CWE-416

TI-2019-06374 CVE-2019-8813 · GHSA-36c3-vq66-wvcg

Cross-site scripting in Apple iOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0132 Published 2019-12-18 Partial fix · iOS 13.2 and iPadOS 13.2, tvOS 13.2 +3 CWE-79

TI-2019-06283 CVE-2019-8719 · GHSA-wxv5-c92p-cgm8

Cross-site scripting in Apple tvOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01252 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-79

TI-2019-06327 CVE-2019-8764 · GHSA-8g88-79gg-9jfg

Cross-site scripting in Apple watchOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00974 Published 2019-12-18 Partial fix · watchOS 6.1 CWE-79

TI-2019-06199 CVE-2019-8625 · GHSA-23gq-523p-hvrg

Cross-site scripting in Apple tvOS

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0122 Published 2019-12-18 Partial fix · tvOS 13, iTunes for Windows 12.10.1 +2 CWE-79

TI-2019-04432 CVE-2019-6234 · GHSA-9xvg-x75r-p5hp

Out-of-bounds write in Apple iOS

MEDIUM 42

A memory corruption issue was addressed with improved memory handling.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01799 Published 2019-03-05 Fixed in iOS 12.1.3, tvOS 12.1.2 +3 CWE-787

TI-2019-06009 CVE-2019-8375 · GHSA-f6vf-7m59-gfmp

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+…

MEDIUM 58

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote atta…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15697 Published 2019-02-24 No fix listed CWE-119

TI-2018-03168 CVE-2018-4213 · GHSA-p6hh-6rh4-v28w

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02017 Published 2019-01-11 No fix listed CWE-20

TI-2018-03167 CVE-2018-4212 · GHSA-v279-g494-j4v4

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02064 Published 2019-01-11 No fix listed

TI-2018-03165 CVE-2018-4210 · GHSA-2mw9-fq32-5hx4

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02246 Published 2019-01-11 No fix listed CWE-129

TI-2018-03163 CVE-2018-4208 · GHSA-w77w-5j57-wjc7

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02056 Published 2019-01-11 No fix listed CWE-20

TI-2018-03162 CVE-2018-4207 · GHSA-q3v5-364x-95m9

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3…

MEDIUM 42

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02045 Published 2019-01-11 No fix listed CWE-20

TI-2018-09276 CVE-2018-12911 · GHSA-jc5j-6mrr-7p3r

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the…

MEDIUM 46

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01728 Published 2018-07-19 No fix listed CWE-787

TI-2018-08810 CVE-2018-12293 · GHSA-g7g2-cvmj-5ppx

The getImageData function in the ImageBufferCairo class in…

MEDIUM 50

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerab…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.10033 Published 2018-06-19 No fix listed CWE-190

TI-2018-08377 CVE-2018-11713 · GHSA-q6g9-cxvx-7pq9

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network…

LOW 32

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy sett…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01555 Published 2018-06-04 Partial fix

TI-2018-08376 CVE-2018-11712 · GHSA-2c7h-c396-x7rf

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network…

LOW 35

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connec…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01159 Published 2018-06-04 Partial fix CWE-295

Vulnerabilities

Filters