WebKit vulnerabilities

209 known CVE vulnerabilities in WebKit, translated and rated.

CVE-2017-2366High
An issue was discovered in certain Apple products, including iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, and iTunes before 12.5.5, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2362High
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2356High
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2017-2355High
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2017-2354High
An issue was discovered in certain Apple products affecting iOS before 10.2.1, Safari before 10.0.3, iCloud before 6.1.1, iTunes before 12.5.5, and tvOS before 10.1.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7656High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7654High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7652High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7649High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2016-7648High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7646High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7645High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7642High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7641High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7640High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7639High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7635High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7632High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7611High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7610High
An issue was discovered in certain Apple products, including iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4, involving the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7589High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, iTunes before 12.5.4, and watchOS before 3.1.3. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7587High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-7578High
An issue was discovered in certain Apple products affecting iOS before 10.1, Safari before 10.0.1, iCloud before 6.0.1, iTunes before 12.5.2, and tvOS before 10.0.1. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-4764High
An issue was discovered in certain Apple products affecting iOS before 10, Safari before 10, iTunes before 12.5.1, and tvOS before 10. The issue involves the 'WebKit' component, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2016-4743High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component, allowing remote attackers to obtain sensitive information from process memory or cause a denial of service through memory corruption and application crash.
CVE-2016-4692High
An issue was discovered in certain Apple products affecting iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, and iTunes before 12.5.4. The issue involves the 'WebKit' component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
CVE-2016-4677High
An issue was discovered in certain Apple products, including iOS before 10.1, Safari before 10.0.1, and tvOS before 10.0.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-4666High
An issue was discovered in certain Apple products, including iOS before 10.1, Safari before 10.0.1, and tvOS before 10.0.1, related to the 'WebKit' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
CVE-2016-4768High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4767High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4766High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4765High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4759High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4737High
WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4735High
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4733High
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4730High
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4728High
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, allowing remote attackers to execute arbitrary code via a crafted web site.
CVE-2016-4611High
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4623High
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4622High
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4589High
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4588High
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-4586High
WebKit in Apple Safari before version 9.1.2 and tvOS before version 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1857High
WebKit in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1856High
WebKit in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1855High
WebKit in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1854High
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1783High
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVE-2016-1778High
WebKit in iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.