Apple

Safari

1572 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2016-4622

  • EPSS 74.79%
  • Veröffentlicht 22.07.2016 02:59:42
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-...

5.8

CVE-2016-4604

  • EPSS 0.37%
  • Veröffentlicht 22.07.2016 02:59:28
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.

5.4

CVE-2016-4590

  • EPSS 0.72%
  • Veröffentlicht 22.07.2016 02:59:13
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

8.8

CVE-2016-4586

  • EPSS 0.67%
  • Veröffentlicht 22.07.2016 02:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

8.8

CVE-2016-4584

  • EPSS 0.77%
  • Veröffentlicht 22.07.2016 02:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

5

CVE-2016-1864

  • EPSS 0.55%
  • Veröffentlicht 19.06.2016 20:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.

8.8

CVE-2016-1859

  • EPSS 0.59%
  • Veröffentlicht 20.05.2016 11:00:13
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

6.5

CVE-2016-1858

  • EPSS 1.33%
  • Veröffentlicht 20.05.2016 11:00:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.

8.8

CVE-2016-1857

  • EPSS 1.36%
  • Veröffentlicht 20.05.2016 11:00:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-...

8.8

CVE-2016-1856

  • EPSS 0.59%
  • Veröffentlicht 20.05.2016 11:00:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-...