Skip to contentApple Safari vulnerabilities
- apple safariApple Safari 4.0.3 does not properly block javascript: and data: URIs in Refresh headers in HTTP...CVE-2009-30164.3 Medium
- apple safariWebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage...CVE-2009-22007.1 High
- apple iphone os, safari +1 moreIncomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS...CVE-2009-21995.8 Medium
- apple safari, mac os x, mac os x server +2 more +4 moreUnspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an...CVE-2009-21965.0 Medium
- apple safariBuffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute...CVE-2009-2195Public exploitEPSS 13.3%9.3 High
- xmlsoft libxml, libxml2, apple iphone os +16 more +18 moreMultiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32,...CVE-2009-2416Fix available6.5 Medium
- apple iphone os, ipod touch, safari +2 moreWebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for...CVE-2009-17259.3 High
- apple iphone os, ipod touch, safari +2 moreCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on...CVE-2009-1724Public exploit4.3 Medium
- apple safariThe CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows...CVE-2009-24215.0 Medium
- apple safariApple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote...CVE-2009-24205.8 Medium
- apple safariUse-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple...CVE-2009-2419Public exploit4.3 Medium
- apple iphone os, ipod touch, safari +2 moreWebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1...CVE-2009-16927.1 High
- apple safariApple Safari does not require a cached certificate before displaying a lock icon for an https web...CVE-2009-20725.4 Medium
- apple safariApple Safari detects http content in https web pages only when the top-level frame uses https,...CVE-2009-20666.8 Medium
- apple safariApple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake...CVE-2009-20626.8 Medium
- apple safariApple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document...CVE-2009-20586.8 Medium
- apple safariThe Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by...CVE-2009-20277.2 High
- apple safariWebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive...CVE-2009-17187.1 High
- apple safariCFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files...CVE-2009-17162.1 Low
- apple safariCross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0...CVE-2009-17154.3 Medium
- apple safariCross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0...CVE-2009-17144.3 Medium
- apple safariThe XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the...CVE-2009-17137.1 High
- apple safariWebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which...CVE-2009-17129.3 High
- apple safariWebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which...CVE-2009-17119.3 High
- apple safariWebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1)...CVE-2009-17102.6 Low
- apple safariUse-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in...CVE-2009-17099.3 High
- apple safariApple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites,...CVE-2009-17089.3 High
- apple safariRace condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might...CVE-2009-17071.2 Low
- apple safariThe Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from...CVE-2009-17065.0 Medium
- apple safariCoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during...CVE-2009-17059.3 High
- apple safariCFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents...CVE-2009-17049.3 High
- apple safariWebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and ...CVE-2009-17037.1 High
- apple iphone os, ipod touch, safari +2 moreCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-17024.3 Medium
- apple iphone os, ipod touch, safari +2 moreUse-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari...CVE-2009-17019.3 High
- apple iphone os, ipod touch, safari +2 moreThe XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and...CVE-2009-17004.3 Medium
- apple iphone os, safari, canonical ubuntu linux +1 more +3 moreThe XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...CVE-2009-1699Public exploitEPSS 32.8%7.5 High
- apple iphone os, ipod touch, safari +2 moreWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-1698Fix available9.3 High
- apple safariCRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1,...CVE-2009-16974.3 Medium
- apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16965.0 Medium
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16954.3 Medium
- apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16945.8 Medium
- apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16935.8 Medium
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16914.3 Medium
- apple iphone os, safari, google chrome +2 moreUse-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through...CVE-2009-16909.3 High
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16894.3 Medium
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16884.3 Medium
- apple safariThe JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...CVE-2009-16879.3 High
- apple safariWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1...CVE-2009-16869.3 High
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-16854.3 Medium
- apple safariCross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0...CVE-2009-1684Public exploit4.3 Medium
- Show moreLoading…