Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Apple
Safari

Apple Safari vulnerabilities

Known exploitedIn KEVPublic exploitFix available

apple safariApple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates...CVE-2009-16824.3 MediumJune 10, 2009
apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16814.3 MediumJune 10, 2009
apple safariArray index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3...CVE-2009-09459.3 HighMay 13, 2009
apple safariCross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac...CVE-2009-0162Public exploit4.3 MediumMay 13, 2009
apple safariApple Safari executes DOM calls in response to a javascript: URI in the target attribute of a...CVE-2009-16009.3 HighMay 11, 2009
freetype, apple iphone os, mac os x +6 more +8 moreMultiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute...CVE-2009-0946Fix available7.5 HighApril 17, 2009
apple safariApple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service ...CVE-2009-1233Public exploit4.3 MediumApril 2, 2009
apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute...CVE-2009-10609.3 HighMarch 24, 2009
apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute...CVE-2009-10429.3 HighMarch 23, 2009
apple safariApple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL...CVE-2009-0744Public exploit5.0 MediumFebruary 27, 2009
apple safariMultiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and...CVE-2009-013710.0 HighFebruary 13, 2009
apple safariApple Safari 3.2.1 (aka AppVer 3.525.27.1) on Windows allows remote attackers to cause a denial...CVE-2009-0321Public exploit4.3 MediumJanuary 28, 2009
apple safariAn unspecified function in the JavaScript implementation in Apple Safari creates and exposes a ...CVE-2008-59142.1 LowJanuary 20, 2009
apple safariUnspecified vulnerability in Apple Safari on Mac OS X 10.5 and Windows allows remote attackers to...CVE-2009-01237.1 HighJanuary 15, 2009
apple safariInteger signedness error in Apple Safari allows remote attackers to read the contents of...CVE-2009-0070Public exploit9.3 HighJanuary 8, 2009
apple safariMemory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows...CVE-2008-5821Public exploit5.0 MediumJanuary 2, 2009
apple iphone os, safari +1 moreSafari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not...CVE-2008-42332.6 LowNovember 25, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not...CVE-2008-42325.0 MediumNovember 25, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not...CVE-2008-42319.3 HighNovember 25, 2008
apple safariThe plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from...CVE-2008-42164.3 MediumNovember 17, 2008
apple safariApple Safari before 3.2 does not properly prevent caching of form data for form fields that have...CVE-2008-36441.9 LowNovember 17, 2008
apple safariHeap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1...CVE-2008-36239.3 HighNovember 17, 2008
apple iphone, ipod touch, safari +2 moreOff-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in...CVE-2008-3950Public exploit5.0 MediumSeptember 16, 2008
xmlsoft libxml2, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before...CVE-2008-3529Public exploitFix availableEPSS 23.4%10.0 HighSeptember 12, 2008
xmlsoft libxml2, apple iphone os, safari +8 more +10 morelibxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an...CVE-2008-3281Fix available6.5 MediumAugust 22, 2008
apple safariApple Safari sends Referer headers containing https URLs to different https web sites, which...CVE-2008-31715.0 MediumJuly 14, 2008
apple safariApple Safari allows web sites to set cookies for country-specific top-level domains, such as co...CVE-2008-31706.8 MediumJuly 14, 2008
apple safariWebCore in Apple Safari does not properly perform garbage collection of JavaScript document...CVE-2008-23179.3 HighJuly 14, 2008
apple safariInteger signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows...CVE-2008-2303Public exploitEPSS 13.0%10.0 HighJuly 14, 2008
apple safariSafari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as...CVE-2008-15894.3 MediumJuly 14, 2008
apple safariSafari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the...CVE-2008-15884.3 MediumJuly 14, 2008
apple safariUnspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X...CVE-2008-23079.3 HighJune 23, 2008
apple safariApple Safari before 3.1.2 on Windows does not properly interpret the...CVE-2008-23069.3 HighJune 23, 2008
apple safariApple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before...CVE-2008-25409.3 HighJune 3, 2008
apple safariCFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate...CVE-2008-15804.3 MediumJune 2, 2008
apple safariApple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a...CVE-2008-20014.3 MediumApril 28, 2008
apple safariUnspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of...CVE-2008-20004.3 MediumApril 28, 2008
apple safariApple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible"...CVE-2008-19995.0 MediumApril 28, 2008
apple safariInteger overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp)...CVE-2008-10266.8 MediumApril 17, 2008
apple safari, webkit +1 moreCross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows...CVE-2008-10254.3 MediumApril 17, 2008
apple safariApple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause...CVE-2008-10246.8 MediumApril 17, 2008
apple safariCross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows...CVE-2008-10114.3 MediumMarch 19, 2008
apple safariBuffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute...CVE-2008-10106.8 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10094.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10084.3 MediumMarch 19, 2008
apple safariWebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for...CVE-2008-10074.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10064.3 MediumMarch 19, 2008
apple safariWebCore, as used in Apple Safari before 3.1, does not properly mask the password field when...CVE-2008-10052.1 LowMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10044.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10034.3 MediumMarch 19, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open