Apple

WebKit

258 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-3818

  • EPSS 8.09%
  • Published 22.11.2010 13:00:18
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via v...

9.3

CVE-2010-3819

  • EPSS 2.58%
  • Published 22.11.2010 13:00:18
  • Last modified 11.04.2025 00:51:21

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote...

9.3

CVE-2010-3820

  • EPSS 2.25%
  • Published 22.11.2010 13:00:18
  • Last modified 11.04.2025 00:51:21

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a...

9.3

CVE-2010-3821

  • EPSS 2.42%
  • Published 22.11.2010 13:00:18
  • Last modified 11.04.2025 00:51:21

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attacker...

9.3

CVE-2010-3803

  • EPSS 10.1%
  • Published 22.11.2010 13:00:17
  • Last modified 11.04.2025 00:51:21

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted str...

5

CVE-2010-3804

  • EPSS 13.89%
  • Published 22.11.2010 13:00:17
  • Last modified 11.04.2025 00:51:21

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attacke...

9.3

CVE-2010-3805

  • EPSS 7.13%
  • Published 22.11.2010 13:00:17
  • Last modified 11.04.2025 00:51:21

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors invo...

10

CVE-2010-1386

  • EPSS 1.85%
  • Published 19.08.2010 22:00:01
  • Last modified 11.04.2025 00:51:21

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.

10

CVE-2010-1760

  • EPSS 1.63%
  • Published 19.08.2010 22:00:01
  • Last modified 11.04.2025 00:51:21

loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rd...

9.3

CVE-2010-1784

  • EPSS 5.36%
  • Published 30.07.2010 20:30:02
  • Last modified 11.04.2025 00:51:21

The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allows remote attackers to ...