Skip to main content

Webkit

69 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2025-43535 Dec 17, 21:16 MEDIUM PATCH This Month

Processing maliciously crafted web content in WebKit-based Apple products can crash the browser or the underlying rendering process, producing a denial-of-service condition with no confidentiality or integrity impact. Affected are Safari before 26.2, iOS/iPadOS before 18.7.3 and before 26.2, macOS Tahoe before 26.2, and visionOS before 26.2; the attack is unauthenticated (CVSS PR:N) but gated on user interaction (UI:R), since the victim must navigate to or open the attacker's page. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is only 0.85% (56th percentile), which together with the crash-only outcome make this a genuinely low-priority issue despite the network attack vector. Apple addressed it through improved memory handling in its December 2025 platform updates.

Denial Of Service Apple Red Hat Ipados Iphone Os +2
NVD
CVSS 3.1
4.3
EPSS
0.8%
CVE-2020-9952 Oct 16, 17:15 HIGH This Week

An input validation issue was addressed with improved input validation. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Microsoft Ipados Iphone Os +6
NVD
CVSS 3.1
7.1
EPSS
1.5%
CVE-2020-9951 Oct 16, 17:15 HIGH This Week

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Denial Of Service Use After Free Memory Corruption Apple +11
NVD
CVSS 3.1
8.8
EPSS
2.3%
CVE-2020-9948 Oct 16, 17:15 HIGH This Week

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Memory Corruption Apple Debian Debian Linux +3
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2018-12294 Jun 19, 21:29 HIGH This Week

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free Memory Corruption Apple Webkitgtk +1
NVD
CVSS 3.0
8.8
EPSS
2.5%
CVE-2017-7160 Dec 27, 17:08 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +8
NVD
CVSS 3.0
8.8
EPSS
0.7%
CVE-2017-7157 Dec 27, 17:08 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
2.0%
CVE-2017-7156 Dec 27, 17:08 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
2.0%
CVE-2017-13870 Dec 25, 21:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
2.0%
CVE-2017-13866 Dec 25, 21:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
2.0%
CVE-2017-13856 Dec 25, 21:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
2.0%
CVE-2017-13803 Nov 13, 03:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
1.1%
CVE-2017-13802 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13798 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 18.6%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
18.6%
CVE-2017-13796 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
19.9%
CVE-2017-13795 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13794 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13793 Nov 13, 03:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
1.1%
CVE-2017-13792 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13791 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
19.9%
CVE-2017-13788 Nov 13, 03:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
1.1%
CVE-2017-13785 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13784 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
21.4%
CVE-2017-13783 Nov 13, 03:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
19.9%
CVE-2017-7061 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
8.1%
CVE-2017-7056 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
7.5%
CVE-2017-7055 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
1.0%
CVE-2017-7052 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
1.0%
CVE-2017-7049 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
4.8%
CVE-2017-7048 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
4.4%
CVE-2017-7046 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
4.8%
CVE-2017-7042 Jul 20, 16:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 14.4%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
14.4%
CVE-2017-7041 Jul 20, 16:29 HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 13.3%.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
13.3%
CVE-2017-7039 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
3.5%
CVE-2017-7038 Jul 20, 16:29 MEDIUM This Month

A DOMParser XSS issue was discovered in certain Apple products. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Iphone Os Safari Tvos +1
NVD
CVSS 3.0
6.1
EPSS
5.6%
CVE-2017-7037 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
3.5%
CVE-2017-7034 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
0.5%
CVE-2017-7030 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
0.5%
CVE-2017-7020 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
0.5%
CVE-2017-7019 Jul 20, 16:29 HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD
CVSS 3.0
8.8
EPSS
0.5%
CVE-2017-7018 Jul 20, 16:29 HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Microsoft +6
NVD Exploit-DB
CVSS 3.0
8.8
EPSS
3.5%
CVE-2017-7006 Jul 20, 16:29 MEDIUM This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Apple Iphone Os Safari Tvos +1
NVD
CVSS 3.0
5.3
EPSS
0.6%
CVE-2016-9643 Mar 07, 16:59 HIGH This Week

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Webkit
NVD
CVSS 3.0
7.5
EPSS
0.9%
CVE-2016-9642 Feb 03, 15:59 MEDIUM This Month

JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Apple Webkit
NVD
CVSS 3.0
5.5
EPSS
0.2%
CVE-2016-4592 Jul 22, 02:59 MEDIUM This Month

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Webkitgtk Webkit
NVD
CVSS 3.0
6.5
EPSS
1.7%
CVE-2016-4591 Jul 22, 02:59 HIGH This Week

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple Webkit
NVD
CVSS 3.0
7.5
EPSS
2.7%
CVE-2016-4590 Jul 22, 02:59 MEDIUM This Month

WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple Safari Webkit
NVD
CVSS 3.0
5.4
EPSS
0.7%
CVE-2016-4589 Jul 22, 02:59 HIGH This Week

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Webkit
NVD
CVSS 3.0
8.8
EPSS
0.4%
CVE-2016-4588 Jul 22, 02:59 HIGH This Week

WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Webkit
NVD
CVSS 3.0
8.8
EPSS
1.3%
CVE-2016-4587 Jul 22, 02:59 MEDIUM This Month

WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Webkit
NVD
CVSS 3.0
6.5
EPSS
0.7%
CVE-2016-4585 Jul 22, 02:59 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Webkit
NVD
CVSS 3.0
6.1
EPSS
1.0%
CVE-2016-4583 Jul 22, 02:59 LOW Monitor

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Apple Race Condition Webkitgtk Webkit
NVD
CVSS 3.0
3.1
EPSS
0.4%
CVE-2014-1270 Feb 27, 01:55 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +3
NVD
CVSS 2.0
6.8
EPSS
0.9%
CVE-2014-1269 Feb 27, 01:55 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +3
NVD
CVSS 2.0
6.8
EPSS
0.9%
CVE-2014-1268 Feb 27, 01:55 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +3
NVD
CVSS 2.0
6.8
EPSS
0.9%
CVE-2013-5228 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
0.9%
CVE-2013-5225 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
2.1%
CVE-2013-5199 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
2.8%
CVE-2013-5198 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
2.1%
CVE-2013-5197 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
2.1%
CVE-2013-5196 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Iphone Os +4
NVD
CVSS 2.0
6.8
EPSS
2.1%
CVE-2013-5195 Dec 18, 16:04 MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +2
NVD
CVSS 2.0
6.8
EPSS
1.3%
CVE-2012-5851 Nov 15, 11:58 MEDIUM POC This Month

html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Chrome Google Apple Safari +1
NVD Exploit-DB
CVSS 2.0
4.3
EPSS
0.3%
CVE-2012-0648 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Itunes +1
NVD
CVSS 2.0
7.6
EPSS
1.0%
CVE-2012-0639 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Itunes +1
NVD
CVSS 2.0
7.6
EPSS
1.0%
CVE-2012-0638 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Itunes +1
NVD
CVSS 2.0
7.6
EPSS
1.0%
CVE-2012-0637 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +2
NVD
CVSS 2.0
7.6
EPSS
1.0%
CVE-2012-0636 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Safari +2
NVD
CVSS 2.0
7.6
EPSS
1.0%
CVE-2012-0634 Mar 08, 22:55 HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service Apple Itunes +1
NVD
CVSS 2.0
7.6
EPSS
0.9%
CVE-2025-43535
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

Processing maliciously crafted web content in WebKit-based Apple products can crash the browser or the underlying rendering process, producing a denial-of-service condition with no confidentiality or integrity impact. Affected are Safari before 26.2, iOS/iPadOS before 18.7.3 and before 26.2, macOS Tahoe before 26.2, and visionOS before 26.2; the attack is unauthenticated (CVSS PR:N) but gated on user interaction (UI:R), since the victim must navigate to or open the attacker's page. There is no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is only 0.85% (56th percentile), which together with the crash-only outcome make this a genuinely low-priority issue despite the network attack vector. Apple addressed it through improved memory handling in its December 2025 platform updates.

Denial Of Service Apple Red Hat +4
NVD
CVE-2020-9952
EPSS 1% CVSS 7.1
HIGH This Week

An input validation issue was addressed with improved input validation. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Microsoft +8
NVD
CVE-2020-9951
EPSS 2% CVSS 8.8
HIGH This Week

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Denial Of Service Use After Free +13
NVD
CVE-2020-9948
EPSS 2% CVSS 8.8
HIGH This Week

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Memory Corruption Apple +5
NVD
CVE-2018-12294
EPSS 2% CVSS 8.8
HIGH This Week

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCore::TextureMapperLayer object. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free Memory Corruption +3
NVD
CVE-2017-7160
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +10
NVD
CVE-2017-7157
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7156
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13870
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13866
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13856
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13803
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13802
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13798
EPSS 19% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 18.6%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13796
EPSS 20% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13795
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13794
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13793
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13792
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13791
EPSS 20% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13788
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-13785
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13784
EPSS 21% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 21.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-13783
EPSS 20% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 19.9%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7061
EPSS 8% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7056
EPSS 7% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7055
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7052
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7049
EPSS 5% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7048
EPSS 4% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7046
EPSS 5% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7042
EPSS 14% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 14.4%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7041
EPSS 13% CVSS 8.8
HIGH POC THREAT Act Now

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 13.3%.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7039
EPSS 3% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7038
EPSS 6% CVSS 6.1
MEDIUM This Month

A DOMParser XSS issue was discovered in certain Apple products. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Iphone Os +3
NVD
CVE-2017-7037
EPSS 3% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7034
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7030
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7020
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7019
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD
CVE-2017-7018
EPSS 3% CVSS 8.8
HIGH POC This Week

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Denial Of Service +8
NVD Exploit-DB
CVE-2017-7006
EPSS 1% CVSS 5.3
MEDIUM This Month

An issue was discovered in certain Apple products. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Apple Iphone Os +3
NVD
CVE-2016-9643
EPSS 1% CVSS 7.5
HIGH This Week

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Webkit
NVD
CVE-2016-9642
EPSS 0% CVSS 5.5
MEDIUM This Month

JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure +2
NVD
CVE-2016-4592
EPSS 2% CVSS 6.5
MEDIUM This Month

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apple Webkitgtk +1
NVD
CVE-2016-4591
EPSS 3% CVSS 7.5
HIGH This Week

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple Webkit
NVD
CVE-2016-4590
EPSS 1% CVSS 5.4
MEDIUM This Month

WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple Safari +1
NVD
CVE-2016-4589
EPSS 0% CVSS 8.8
HIGH This Week

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2016-4588
EPSS 1% CVSS 8.8
HIGH This Week

WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +2
NVD
CVE-2016-4587
EPSS 1% CVSS 6.5
MEDIUM This Month

WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Webkit
NVD
CVE-2016-4585
EPSS 1% CVSS 6.1
MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Apple Webkit
NVD
CVE-2016-4583
EPSS 0% CVSS 3.1
LOW Monitor

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Apple Race Condition +2
NVD
CVE-2014-1270
EPSS 1% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +5
NVD
CVE-2014-1269
EPSS 1% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +5
NVD
CVE-2014-1268
EPSS 1% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +5
NVD
CVE-2013-5228
EPSS 1% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5225
EPSS 2% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5199
EPSS 3% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5198
EPSS 2% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5197
EPSS 2% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5196
EPSS 2% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
CVE-2013-5195
EPSS 1% CVSS 6.8
MEDIUM This Month

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +4
NVD
CVE-2012-5851
EPSS 0% CVSS 4.3
MEDIUM POC This Month

html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Chrome Google +3
NVD Exploit-DB
CVE-2012-0648
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD
CVE-2012-0639
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD
CVE-2012-0638
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD
CVE-2012-0637
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +4
NVD
CVE-2012-0636
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +4
NVD
CVE-2012-0634
EPSS 1% CVSS 7.6
HIGH This Week

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Denial Of Service +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy