WebKit vulnerabilities

209 known CVE vulnerabilities in WebKit, translated and rated.

CVE-2017-7037High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, Safari before 10.1.2, iCloud before 6.2.2 on Windows, iTunes before 12.6.2 on Windows, and tvOS before 10.2.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-7034High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, Safari before 10.1.2, iCloud before 6.2.2 on Windows, iTunes before 12.6.2 on Windows, and tvOS before 10.2.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-7030High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, Safari before 10.1.2, iCloud before 6.2.2 on Windows, iTunes before 12.6.2 on Windows, and tvOS before 10.2.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-7020High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, Safari before 10.1.2, iCloud before 6.2.2 on Windows, iTunes before 12.6.2 on Windows, and tvOS before 10.2.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-7018High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, Safari before 10.1.2, iCloud before 6.2.2 on Windows, iTunes before 12.6.2 on Windows, and tvOS before 10.2.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-6984High
An issue was discovered in certain Apple products, including iOS, Safari, iTunes, and tvOS, which are vulnerable to attacks. Versions before iOS 10.3.2, Safari 10.1.1, iTunes 12.6.1 on Windows, and tvOS 10.2.1 are affected. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service.
CVE-2017-6980High
An issue was discovered in certain Apple products affecting iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2547High
An issue was discovered in certain Apple products, affecting the 'WebKit' component. iOS versions before 10.3.2 and Safari versions before 10.1.1 are vulnerable to attacks that can lead to arbitrary code execution or application crashes.
CVE-2017-2544High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2539High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2538High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2536High
An issue was discovered in certain Apple products related to the 'WebKit' component. Affects iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1. This issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2531High
An issue was discovered in certain Apple products, including iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2530High
An issue was discovered in certain Apple products affecting iOS before 10.3.2, Safari before 10.1.1, iCloud before 6.2.1 on Windows, and tvOS before 10.2.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2526High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2525High
An issue was discovered in certain Apple products, including iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2521High
An issue was discovered in certain Apple products involving the WebKit component, affecting iOS before 10.3.2, Safari before 10.1.1, tvOS before 10.2.1, and watchOS before 3.2.2. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2515High
An issue was discovered in certain Apple products affecting iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2514High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2506High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2505High
An issue was discovered in certain Apple products affecting iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2496High
An issue was discovered in certain Apple products, including iOS before 10.3.2 and Safari before 10.1.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2481High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2476High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2471High
An issue was discovered in certain Apple products, affecting the 'WebKit' component. iOS versions before 10.3, Safari before 10.1, and watchOS before 3.2 are vulnerable to a use-after-free vulnerability that allows remote attackers to execute arbitrary code via a crafted website.
CVE-2017-2470High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2469High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2468High
An issue was discovered in certain Apple products affecting iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2466High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2465High
An issue was discovered in certain Apple products affecting iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2464High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2463High
An issue was discovered in certain Apple products affecting iOS before 10.3, Safari before 10.1, iCloud before 6.2 on Windows, iTunes before 12.6 on Windows, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2460High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2459High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2457High
An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2455High
An issue was discovered in certain Apple products affecting iOS before 10.3, Safari before 10.1, and tvOS before 10.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2454High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2447High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, involving the 'WebKit' component. It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site.
CVE-2017-2446High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.
CVE-2017-2433High
An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2419High
An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, involving the 'WebKit' component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors.
CVE-2017-2415High
An issue was discovered in certain Apple products affecting iOS before 10.3, Safari before 10.1, tvOS before 10.2, and watchOS before 3.2. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code by leveraging an unspecified 'type confusion.'
CVE-2017-2396High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2395High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2394High
An issue was discovered in certain Apple products, including iOS before 10.3, Safari before 10.1, and tvOS before 10.2, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2392High
An issue was discovered in certain Apple products, including Safari before version 10.1, related to the 'WebKit' component. It allows attackers to execute arbitrary code or cause a denial of service via a crafted app.
CVE-2017-2378High
An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, related to bookmark creation in the 'WebKit' component. It allows remote attackers to execute arbitrary code or spoof a bookmark by mishandling links during drag-and-drop actions.
CVE-2016-9643High
The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service through memory consumption, as demonstrated by a large number of opening parenthesis and dollar signs, followed by {-2,16} and a large number of plus signs.
CVE-2017-2373High
An issue was discovered in certain Apple products, including iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2369High
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.