Apple

Safari

1536 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2016-7152

  • EPSS 2.28%
  • Veröffentlicht 06.09.2016 10:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-par...

6.1

CVE-2016-4651

  • EPSS 0.18%
  • Veröffentlicht 22.07.2016 03:00:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a "cross-protocol ...

8.8

CVE-2016-4624

  • EPSS 1.41%
  • Veröffentlicht 22.07.2016 02:59:44
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-...

8.8

CVE-2016-4623

  • EPSS 0.82%
  • Veröffentlicht 22.07.2016 02:59:43
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-...

8.8

CVE-2016-4622

  • EPSS 71.48%
  • Veröffentlicht 22.07.2016 02:59:42
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-...

5.8

CVE-2016-4604

  • EPSS 0.37%
  • Veröffentlicht 22.07.2016 02:59:28
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.

5.4

CVE-2016-4590

  • EPSS 0.72%
  • Veröffentlicht 22.07.2016 02:59:13
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

8.8

CVE-2016-4586

  • EPSS 0.67%
  • Veröffentlicht 22.07.2016 02:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

8.8

CVE-2016-4584

  • EPSS 0.77%
  • Veröffentlicht 22.07.2016 02:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

5

CVE-2016-1864

  • EPSS 0.55%
  • Veröffentlicht 19.06.2016 20:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.