NotCVE - vendor:"Apple" product:"Safari" version:" <= 6.1.3"

Page 6 of 1387 results (0.010 seconds)

CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-32885 – webkitgtk: Memory corruption issue when processing web content

https://notcve.org/view.php?id=CVE-2022-32885

03 May 2023 — A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation. • https://support.apple.com/en-us/HT213341 • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 1

CVE-2023-28205 – Apple Multiple Products WebKit Use-After-Free Vulnerability

https://notcve.org/view.php?id=CVE-2023-28205

10 Apr 2023 — A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. A flaw was found in the webkitgtk package. • https://github.com/ntfargo/uaf-2023-28205 • CWE-416: Use After Free •

CVSS: 5.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2023-27932 – webkitgtk: Same Origin Policy bypass via crafted web content

https://notcve.org/view.php?id=CVE-2023-27932

28 Mar 2023 — This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy. A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may bypass the same-origin Policy. • https://support.apple.com/en-us/HT213670 • CWE-942: Permissive Cross-domain Policy with Untrusted Domains •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2023-27954 – webkitgtk: Website may be able to track sensitive user information

https://notcve.org/view.php?id=CVE-2023-27954

28 Mar 2023 — The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information. A vulnerability was found in WebKitGTK. This security issue leads to tracking sensitive user information via a website. • https://support.apple.com/en-us/HT213670 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2022-46705 – webkitgtk: Visiting a malicious website may lead to address bar spoofing

https://notcve.org/view.php?id=CVE-2022-46705

27 Feb 2023 — A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing. A vulnerability was found in WebKitGTK. • http://www.openwall.com/lists/oss-security/2023/11/15/1 • CWE-20: Improper Input Validation •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

CVE-2023-23529 – Apple Multiple Products WebKit Type Confusion Vulnerability

https://notcve.org/view.php?id=CVE-2023-23529

15 Feb 2023 — A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. A vulnerability was found in WebKitGTK. • https://support.apple.com/en-us/HT213633 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-42826 – webkitgtk: use-after-free issue leading to arbitrary code execution

https://notcve.org/view.php?id=CVE-2022-42826

07 Feb 2023 — A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution. A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. • https://security.gentoo.org/glsa/202305-32 • CWE-416: Use After Free •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

CVE-2023-23496

https://notcve.org/view.php?id=CVE-2023-23496

24 Jan 2023 — The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. • https://support.apple.com/en-us/HT213531 •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2023-23517 – webkitgtk: memory corruption issue leading to arbitrary code execution

https://notcve.org/view.php?id=CVE-2023-23517

24 Jan 2023 — The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. • https://support.apple.com/en-us/HT213599 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

CVE-2023-23518 – webkitgtk: memory corruption issue leading to arbitrary code execution

https://notcve.org/view.php?id=CVE-2023-23518

1...4 5 6 7 8