Vulnerabilities

TI-2026-57696 CVE-2026-83596 · GHSA-xxgm-wv7m-9vch

Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

MEDIUM 41

A flaw was found in WebKitGTK.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00502 Published 2026-08-31 Partial fix · 2.54.0-1.el7_9, 2.54.0-1.el8_10 +6 CWE-120

TI-2026-54507 CVE-2026-78376 · GHSA-qcc7-6r53-qpph

Webkitgtk: use-after-free of jscvalue function parameters

MEDIUM 40

A flaw was found in WebKitGTK.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00469 Published 2026-08-24 Partial fix · 2.54.0-1.el7_9, 2.54.0-1.el8_10 +6 CWE-416

TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787

TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125

TI-2023-20826 CVE-2023-39928 · GHSA-7245-jcxv-7q52

Use after free in Webkit

MEDIUM 41

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01446 Published 2023-10-06 Partial fix CWE-416

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2023-21216 CVE-2023-40397 · GHSA-6x6m-3789-2cmw

Apple macOS: A remote attacker may be able to cause arbitrary javascript code execution

MEDIUM 45

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2023-09-06 Partial fix · 13.5

TI-2023-15661 CVE-2023-32370 · GHSA-m6rg-hrc7-fqpj

Apple macOS: Content Security Policy to block domains with wildcards may fail

LOW 31

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00787 Published 2023-09-06 Partial fix · 13.3

TI-2023-12762 CVE-2023-28198 · GHSA-p6rj-wprj-c52h

Use after free in Apple macOS

MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2023-08-14 Partial fix · 13.3, 16.4 CWE-416

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15664 CVE-2023-32373 · GHSA-3x5r-c923-f923

Use after free in Apple macOS

CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12172 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-416

TI-2023-12768 CVE-2023-28204 · GHSA-m85j-wjrj-c4rg

Out-of-bounds read in Apple macOS

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.14292 Published 2023-06-23 Partial fix · 13.4, 16.5 +2 CWE-125

TI-2023-02066 CVE-2023-2203 · GHSA-p2w5-xch3-v6pv

Use after free in WebKitGTK

MEDIUM 42

A flaw was found in the WebKitGTK package.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00934 Published 2023-05-17 Fixed CWE-416

TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119

Vulnerabilities

Filters