Vulnerabilities

TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

Memory corruption in Apple Safari

MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

Improper input validation in Apple Safari

MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-05957 CVE-2025-6558 · GHSA-5w32-633g-38jh

Improper input validation in Google Chrome

CRITICAL 97KEV

Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10927 Published 2025-07-15 Partial fix · 138.0.7204.157 CWE-20

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

Improper input validation in Apple Safari

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

Injection in Apple Safari

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

Apple Safari: A malicious website may exfiltrate audio data cross-origin

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

Protection mechanism failure in Apple Safari

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2023-21216 CVE-2023-40397 · GHSA-6x6m-3789-2cmw

Apple macOS: A remote attacker may be able to cause arbitrary javascript code execution

MEDIUM 45

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2023-09-06 Partial fix · 13.5

TI-2023-15661 CVE-2023-32370 · GHSA-m6rg-hrc7-fqpj

Apple macOS: Content Security Policy to block domains with wildcards may fail

LOW 31

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00787 Published 2023-09-06 Partial fix · 13.3

TI-2023-12762 CVE-2023-28198 · GHSA-p6rj-wprj-c52h

Use after free in Apple macOS

MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2023-08-14 Partial fix · 13.3, 16.4 CWE-416

TI-2019-06284 CVE-2019-8720 · GHSA-5cgp-g38q-m4xj

Memory corruption in webkitgtk

CRITICAL 97KEV

A vulnerability was found in WebKit.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01556 Published 2023-03-06 Partial fix CWE-119

TI-2022-14420 CVE-2022-32893 · GHSA-qjpw-c5xf-g33j

Out-of-bounds write in Apple Safari

CRITICAL 97KEV

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09931 Published 2022-08-24 Partial fix · 15.6, 12.5 CWE-787

TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787

TI-2021-18966 CVE-2021-42762 · GHSA-4ch5-gr7v-q6wq

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox…

LOW 25

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox,…

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00539 Published 2021-10-20 Fixed

TI-2021-11319 CVE-2021-30952

Integer overflow in Apple watchOS

CRITICAL 97KEV

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06964 Published 2021-08-24 Partial fix · 8.3, 15.2 +1 CWE-190

TI-2020-10749 CVE-2020-13753 · GHSA-7vvx-4whv-jg73

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly…

MEDIUM 49

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03266 Published 2020-07-14 Fixed CWE-20

TI-2020-09470 CVE-2020-11793 · GHSA-9rmm-vmrf-4wgf

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via…

MEDIUM 43

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2020-04-17 Partial fix CWE-416

TI-2020-08086 CVE-2020-10018 · GHSA-37vm-m2gx-6h3h

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right…

MEDIUM 50

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04987 Published 2020-03-02 Partial fix CWE-416

TI-2019-08278 CVE-2019-11070 · GHSA-jcch-9vxr-f9mg

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP…

LOW 30

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03294 Published 2019-04-10 Partial fix CWE-19

TI-2019-04449 CVE-2019-6251 · GHSA-w36c-w6x2-gj2r

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing…

MEDIUM 42

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.04258 Published 2019-01-14 Partial fix

TI-2018-08810 CVE-2018-12293 · GHSA-g7g2-cvmj-5ppx

The getImageData function in the ImageBufferCairo class in…

MEDIUM 50

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerab…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.10033 Published 2018-06-19 No fix listed CWE-190

Vulnerabilities

Filters