Skip to contentApple Safari vulnerabilities
- apple safari, tvos, iphone os +2 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10...CVE-2016-4666Fix available8.8 High
- apple tv, icloud, itunes +1 more +3 moreAn issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud...CVE-2016-4613Fix available6.5 Medium
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-47668.8 High
- apple itunes, safari, iphone os +2 moreWKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10...CVE-2016-47636.8 Medium
- apple itunes, safari, iphone os +2 moreWebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not...CVE-2016-47586.5 Medium
- apple safariThe Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address...CVE-2016-47513.5 Low
- apple safari, tvos, watchos +1 more +3 moreWebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows...CVE-2016-47378.8 High
- apple safari, iphone os +1 moreWebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary...CVE-2016-47318.8 High
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to...CVE-2016-47308.8 High
- apple safari, iphone os +1 moreWebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary...CVE-2016-47298.8 High
- apple safari, iphone os +1 moreCross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari...CVE-2016-46186.1 Medium
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to...CVE-2016-46118.8 High
- apple itunes, safari +1 moreWebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to...CVE-2016-4769Fix available8.8 High
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-4768Fix available8.8 High
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-4767Fix available8.8 High
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-4765Fix available8.8 High
- apple icloud, itunes, safari +1 more +3 moreWebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and...CVE-2016-4762Fix available8.8 High
- apple itunes, safari, iphone os +2 moreWebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows...CVE-2016-4760Fix available6.5 Medium
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-4759Fix available8.8 High
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to...CVE-2016-4735Fix available8.8 High
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to...CVE-2016-4734Fix available9.6 Critical
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to...CVE-2016-4733Fix available7.8 High
- apple itunes, safari, tvos +1 more +3 moreWebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before...CVE-2016-4728Fix available8.8 High
- opera browser, apple safari, google chrome +3 more +5 moreThe HTTP/2 protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7153EPSS 12.8%5.3 Medium
- apple safari, google chrome, microsoft edge +3 more +5 moreThe HTTPS protocol does not consider the role of the TCP congestion window in providing...CVE-2016-7152EPSS 12.8%5.3 Medium
- apple safariSafari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP...CVE-2016-46045.4 Medium
- apple safari, tvos, iphone os +2 moreThe WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS...CVE-2016-45848.8 High
- apple safari, iphone os +1 moreCross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9...CVE-2016-4651Fix available6.1 Medium
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote...CVE-2016-4624Fix available8.8 High
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote...CVE-2016-4623Fix available8.8 High
- apple safari, tvos, iphone os +2 moreWebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote...CVE-2016-4622Public exploitFix availableEPSS 20.4%8.8 High
- apple safari, webkit +1 moreWebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows...CVE-2016-4590Fix available5.4 Medium
- apple safari, tvos +1 moreWebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute...CVE-2016-4586Fix available8.8 High
- apple safari, iphone os +1 moreThe XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not...CVE-2016-18644.3 Medium
- apple safari, tvos, iphone os +2 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...CVE-2016-18558.8 High
- apple safari, iphone os +1 moreThe "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before...CVE-2016-18493.3 Low
- apple safari, tvos, iphone os +1 more +3 moreThe WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before...CVE-2016-1859Fix available8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly...CVE-2016-1858Fix available6.5 Medium
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...CVE-2016-1857Fix available8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...CVE-2016-1856Fix available8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...CVE-2016-1854Fix available8.8 High
- apple safari, iphone os +1 moreThe Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1...CVE-2016-17865.4 Medium
- apple safari, iphone os +1 moreThe Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1...CVE-2016-17856.5 Medium
- apple safari, tvos, iphone os +2 moreThe History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before...CVE-2016-17846.5 Medium
- apple safari, tvos, iphone os +1 more +3 moreWebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to...CVE-2016-17838.8 High
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that...CVE-2016-17826.5 Medium
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it...CVE-2016-17814.3 Medium
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same...CVE-2016-17796.5 Medium
- apple safari, iphone os +1 moreWebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary...CVE-2016-17788.8 High
- apple safariThe Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier...CVE-2016-17724.3 Medium
- Show moreLoading…