VYPR

Webkit

by Apple Inc.

Source repositories

CVEs (489)

  • CVE-2016-4583LowJul 22, 2016
    Apple Inc.
    Webkit
    risk 0.20cvss 3.1epss 0.02

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.

  • CVE-2018-4430LowApr 3, 2019
    Apple Inc.
    iOS
    risk 0.16cvss 2.4epss 0.00

    A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1.

  • CVE-2011-1774Jul 21, 2011
    Apple Inc.
    Safari
    risk 0.06cvss —epss 0.43

    WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.

  • CVE-2011-0222Jul 21, 2011
    Apple Inc.
    Safari
    risk 0.05cvss —epss 0.22

    WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

  • CVE-2015-1155May 8, 2015
    Apple Inc.
    Safari
    risk 0.04cvss —epss 0.11

    The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the Same Origin Policy and read arbitrary files via a crafted web site.

  • CVE-2011-1425Apr 4, 2011
    Apple Inc.
    Webkit
    risk 0.04cvss —epss 0.08

    xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature…

  • CVE-2010-3804Nov 22, 2010
    Apple Inc.
    Safari
    risk 0.04cvss —epss 0.09

    The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by…

  • CVE-2010-1813Sep 9, 2010
    Apple Inc.
    Webkit
    risk 0.04cvss —epss 0.10

    WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors involving HTML object outlines.

  • CVE-2010-1759Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.04cvss —epss 0.16

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the…

  • CVE-2004-0361Nov 23, 2004
    Apple Inc.
    Webkit
    risk 0.04cvss —epss 0.07

    The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array.

  • CVE-2012-5851Nov 15, 2012
    Google
    Chrome
    risk 0.03cvss —epss 0.02

    html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a…

  • CVE-2011-0167Mar 11, 2011
    Apple Inc.
    Safari
    risk 0.03cvss —epss 0.03

    The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.

  • CVE-2009-1724Jul 9, 2009
    Apple Inc.
    Safari
    risk 0.03cvss —epss 0.06

    Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top…

  • CVE-2008-5821Jan 2, 2009
    Apple Inc.
    Safari
    risk 0.03cvss —epss 0.04

    Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and browser crash) via a long ALINK attribute in a BODY element in an HTML document.

  • CVE-2011-1290Mar 11, 2011
    Rim
    Blackberry Torch 9800
    risk 0.01cvss —epss 0.10

    Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style…

  • CVE-2010-3812Nov 22, 2010
    Webkitgtk
    Webkitgtk
    risk 0.01cvss —epss 0.07

    Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products allows remote attackers to execute…

  • CVE-2010-1793Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; allow remote attackers to execute arbitrary code or cause a denial of service (application…

  • CVE-2010-1789Jul 30, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.06

    Heap-based buffer overflow in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a JavaScript string object.

  • CVE-2010-1774Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.07

    WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses out-of-bounds memory during processing of HTML tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash)…

  • CVE-2010-1771Jun 11, 2010
    Apple Inc.
    Safari
    risk 0.01cvss —epss 0.06

    Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving fonts.

Page 9 of 25