Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Apple Safari 18.3 Clear all filters
TI-2025-17906 CVE-2025-24150 · GHSA-qmjg-q5x7-48p2

Command injection in Apple Safari

Priority MEDIUM 45

A privacy issue was addressed with improved handling of files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0294 Published 2025-01-27 Partial fix · 18.3, 15.3 CWE-77
TI-2025-17900 CVE-2025-24143 · GHSA-23h9-xj7q-3m7r

Missing authorization in Apple Safari

Priority LOW 30

The issue was addressed with improved access restrictions to the file system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00811 Published 2025-01-27 Partial fix · 18.3, 15.3 +1 CWE-862
TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

Out-of-bounds read in Apple Safari

Priority LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125
TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

Priority LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79