Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Safari
(Apple)| Repositories | https://github.com/WebKit/webkit |
| #Vulnerabilities | 1503 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-01-27 | CVE-2024-54543 | The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption. | Ipados, Iphone_os, Macos, Safari, Tvos, Visionos, Watchos | 8.8 | ||
| 2025-01-27 | CVE-2025-24150 | A privacy issue was addressed with improved handling of files. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Copying a URL from Web Inspector may lead to command injection. | Ipados, Iphone_os, Macos, Safari | 8.8 | ||
| 2025-01-27 | CVE-2025-24143 | The issue was addressed with improved access restrictions to the file system. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user. | Ipados, Macos, Safari, Visionos | 6.5 | ||
| 2025-01-27 | CVE-2025-24113 | The issue was addressed with improved UI. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3, visionOS 2.3. Visiting a malicious website may lead to user interface spoofing. | Ipados, Iphone_os, Macos, Safari, Visionos | 4.3 | ||
| 2025-01-27 | CVE-2025-24128 | The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.3, Safari 18.3, iOS 18.3 and iPadOS 18.3. Visiting a malicious website may lead to address bar spoofing. | Ipados, Iphone_os, Macos, Safari | 4.3 | ||
| 2025-01-27 | CVE-2025-24169 | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.3, Safari 18.3. A malicious app may be able to bypass browser extension authentication. | Macos, Safari | 7.5 | ||
| 2023-05-08 | CVE-2023-27932 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy. | Ipados, Iphone_os, Macos, Safari, Tvos, Watchos, Debian_linux | 5.5 | ||
| 2023-05-08 | CVE-2022-32885 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution | Ipados, Iphone_os, Macos, Safari | 8.8 | ||
| 2023-05-08 | CVE-2023-27954 | The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information. | Ipados, Iphone_os, Macos, Safari, Tvos, Watchos, Debian_linux | 6.5 | ||
| 2023-05-08 | CVE-2023-28201 | This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution. | Ipados, Iphone_os, Macos, Safari | 9.8 |