Apple

Safari

1591 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-54479

  • EPSS 0.64%
  • Veröffentlicht 12.12.2024 02:15:29
  • Zuletzt bearbeitet 02.04.2026 19:18:42

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected...

5.3

CVE-2024-44246

  • EPSS 0.17%
  • Veröffentlicht 12.12.2024 02:15:24
  • Zuletzt bearbeitet 02.04.2026 19:18:27

The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. On a device with Private Relay enabled, adding a website to the Safari Readi...

5.3

CVE-2024-44212

  • EPSS 0.18%
  • Veröffentlicht 12.12.2024 02:15:23
  • Zuletzt bearbeitet 02.04.2026 19:18:21

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Cookies belonging to one origin may be sent to another or...

8.8

CVE-2024-44308

Warnung
  • EPSS 0.77%
  • Veröffentlicht 20.11.2024 00:15:17
  • Zuletzt bearbeitet 03.04.2026 11:43:36

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary cod...

6.3

CVE-2024-44309

Warnung
  • EPSS 0.71%
  • Veröffentlicht 20.11.2024 00:15:17
  • Zuletzt bearbeitet 03.04.2026 11:43:50

A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content...

5.4

CVE-2024-44296

  • EPSS 0.8%
  • Veröffentlicht 28.10.2024 21:15:08
  • Zuletzt bearbeitet 02.04.2026 19:18:37

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing maliciously crafted web content may preven...

7.5

CVE-2024-44259

  • EPSS 0.24%
  • Veröffentlicht 28.10.2024 21:15:07
  • Zuletzt bearbeitet 02.04.2026 19:18:30

This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to downlo...

6.5

CVE-2024-44155

  • EPSS 0.13%
  • Veröffentlicht 28.10.2024 21:15:05
  • Zuletzt bearbeitet 02.04.2026 19:18:06

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 18, iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. Maliciously crafted web content may violate iframe sa...

5.5

CVE-2024-44185

  • EPSS 0.04%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 02.04.2026 19:18:16

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

9.3

CVE-2024-44206

  • EPSS 0.54%
  • Veröffentlicht 24.10.2024 17:15:16
  • Zuletzt bearbeitet 02.04.2026 19:18:20

An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. A user may be able to bypass some web content restric...