Skip to content

Apple Safari vulnerabilities

apple safariApple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash)...CVE-2006-3372Public exploit5.0 MediumJuly 6, 2006
apple safariApple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of...CVE-2006-32245.4 MediumJune 26, 2006
apple safariApple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause...CVE-2006-2019Public exploit5.0 MediumApril 25, 2006
apple safariThe WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3...CVE-2006-19885.0 MediumApril 21, 2006
apple safariApple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code...CVE-2006-19877.5 HighApril 21, 2006
apple safariApple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code...CVE-2006-19867.5 HighApril 21, 2006
apple mac os x, mac os x server, safari +2 moreHeap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4...CVE-2006-1985Public exploitEPSS 13.9%5.1 MediumApril 21, 2006
apple imageio, mac os x, safari +1 more +3 moreInteger overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause...CVE-2006-15525.0 MediumMarch 31, 2006
apple safariApple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via...CVE-2005-46785.0 MediumDecember 31, 2005
apple mac os x, safari, textedit +1 more +3 moreThe khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and...CVE-2005-4504Public exploitEPSS 11.9%7.8 HighDecember 22, 2005
apple safariApple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a...CVE-2005-38977.8 HighNovember 29, 2005
apple mac os x, safari, mac os x server +2 moreSafari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions...CVE-2005-25245.0 MediumOctober 25, 2005
apple safariApple Safari allows remote attackers to cause a denial of service (application crash) via a...CVE-2005-3018Public exploit5.0 MediumSeptember 21, 2005
apple mac os x, safari +1 moreSafari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the...CVE-2005-25225.1 MediumAugust 19, 2005
apple mac os x, safari +1 moreSafari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page...CVE-2005-25172.6 LowAugust 19, 2005
apple mac os x, safari +1 moreSafari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly...CVE-2005-25167.5 HighAugust 19, 2005
apple safariApple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service ...CVE-2005-2594Public exploit5.0 MediumAugust 17, 2005
apple safariSafari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page...CVE-2005-22722.6 LowJuly 13, 2005
apple safariSafari 1.3 allows remote attackers to cause a denial of service (application crash) via a long...CVE-2005-13852.6 LowMay 2, 2005
apple safari, omnigroup omniweb, hmdt shiira +2 moreAppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup...CVE-2005-09765.0 MediumApril 18, 2005
apple safariApple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as...CVE-2005-03414.3 MediumFebruary 10, 2005
apple safariThe International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof...CVE-2005-02345.0 MediumFebruary 7, 2005
apple safariSafari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one...CVE-2004-13147.5 HighDecember 22, 2004
apple safariSafari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application...CVE-2004-11995.0 MediumDecember 15, 2004
apple safariSafari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes,...CVE-2004-11227.5 HighDecember 10, 2004
apple safariApple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status...CVE-2004-1121Public exploit5.0 MediumNovember 1, 2004
apple safariSafari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame...CVE-2004-07207.5 HighJuly 23, 2004
apple safariApple Safari allows remote attackers to bypass intended cookie access restrictions on a web...CVE-2003-0514Public exploit7.5 HighMarch 16, 2004
apple mac os x, safari, mac os x server +2 moreApple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to...CVE-2003-09755.0 MediumDecember 10, 2003
kde, kde konqueror embedded, apple safari +3 more +5 moreKonqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X...CVE-2003-03707.5 HighJune 5, 2003
apple safari, kde konqueror embedded +1 moreSafari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509...CVE-2003-03555.0 MediumMay 30, 2003