Apple

Safari

1622 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2010-3818

  • EPSS 5.83%
  • Veröffentlicht 22.11.2010 13:00:18
  • Zuletzt bearbeitet 16.06.2026 23:23:35

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via v...

9.3

CVE-2010-3819

  • EPSS 4.45%
  • Veröffentlicht 22.11.2010 13:00:18
  • Zuletzt bearbeitet 16.06.2026 23:23:35

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote...

9.3

CVE-2010-3820

  • EPSS 4.45%
  • Veröffentlicht 22.11.2010 13:00:18
  • Zuletzt bearbeitet 16.06.2026 23:23:36

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a...

9.3

CVE-2010-3821

  • EPSS 4.36%
  • Veröffentlicht 22.11.2010 13:00:18
  • Zuletzt bearbeitet 16.06.2026 23:23:36

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attacker...

9.3

CVE-2010-3803

  • EPSS 5.83%
  • Veröffentlicht 22.11.2010 13:00:17
  • Zuletzt bearbeitet 16.06.2026 23:23:33

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted str...

5

CVE-2010-3804

  • EPSS 9.13%
  • Veröffentlicht 22.11.2010 13:00:17
  • Zuletzt bearbeitet 16.06.2026 23:23:34

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attacke...

9.3

CVE-2010-3805

  • EPSS 5.86%
  • Veröffentlicht 22.11.2010 13:00:17
  • Zuletzt bearbeitet 16.06.2026 23:23:34

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors invo...

4.3

CVE-2010-4008

Exploit
  • EPSS 3.13%
  • Veröffentlicht 17.11.2010 01:00:02
  • Zuletzt bearbeitet 16.06.2026 23:23:58

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to ca...

8.8

CVE-2010-1822

Exploit
  • EPSS 2.18%
  • Veröffentlicht 04.10.2010 21:00:03
  • Zuletzt bearbeitet 16.06.2026 23:19:24

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service...

9.3

CVE-2010-1823

  • EPSS 3.28%
  • Veröffentlicht 24.09.2010 19:00:04
  • Zuletzt bearbeitet 16.06.2026 23:19:24

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as doc...