Vulnerabilities

TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2023-20826 CVE-2023-39928 · GHSA-7245-jcxv-7q52

Use after free in Webkit

MEDIUM 41

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01446 Published 2023-10-06 Partial fix CWE-416

TI-2023-21216 CVE-2023-40397 · GHSA-6x6m-3789-2cmw

Apple macOS: A remote attacker may be able to cause arbitrary javascript code execution

MEDIUM 45

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2023-09-06 Partial fix · 13.5

TI-2023-15661 CVE-2023-32370 · GHSA-m6rg-hrc7-fqpj

Apple macOS: Content Security Policy to block domains with wildcards may fail

LOW 31

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00787 Published 2023-09-06 Partial fix · 13.3

TI-2023-12762 CVE-2023-28198 · GHSA-p6rj-wprj-c52h

Use after free in Apple macOS

MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2023-08-14 Partial fix · 13.3, 16.4 CWE-416

TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119

TI-2023-10722 CVE-2023-25363 · GHSA-m6fv-rjwf-hmj9

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2023-03-02 Partial fix CWE-416

TI-2023-10721 CVE-2023-25362 · GHSA-wjwh-3f92-h6f4

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2023-03-02 Partial fix CWE-416

TI-2023-10720 CVE-2023-25361 · GHSA-w5w3-546h-h8fc

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2023-03-02 Partial fix CWE-416

TI-2023-10719 CVE-2023-25360 · GHSA-hqcm-rrgq-jv8q

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2023-03-02 Partial fix CWE-416

TI-2023-10718 CVE-2023-25358 · GHSA-xcc8-3vrq-wjg2

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before…

MEDIUM 42

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01062 Published 2023-03-02 Partial fix CWE-416

TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787

TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787

TI-2022-12529 CVE-2022-30293 · GHSA-vmhh-gfrw-g264

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in…

LOW 37

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02221 Published 2022-05-06 Fixed CWE-787

TI-2022-06857 CVE-2022-22590 · GHSA-8gq6-m624-5hx9

Use after free in Apple iOS and iPadOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01555 Published 2022-03-18 Partial fix · 15.3, 12.2 +1 CWE-416

TI-2021-20568 CVE-2021-45481 · GHSA-p53f-pm5m-wpj7

In WebKitGTK before 2.32.4, there is incorrect memory allocation in…

LOW 32

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01532 Published 2021-12-25 Partial fix CWE-401

Vulnerabilities

Filters