Apple Webkit vulnerabilities

258 CVEs affecting Apple Webkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-7160, published 2017-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-1774, published 2011-07-21. High severity, CVSS 8.8. EPSS: 43.2% chance of exploitation in the next 30 days. WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. …
CVE-2011-0222, published 2011-07-21. High severity, CVSS 9.3. EPSS: 21.6% chance of exploitation in the next 30 days. WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a…
CVE-2010-1759, published 2010-06-11. High severity, CVSS 9.3. EPSS: 15.7% chance of exploitation in the next 30 days. Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or…
CVE-2011-1290, published 2011-03-11. High severity, CVSS 10.0. EPSS: 9.8% chance of exploitation in the next 30 days. Integer overflow in WebKit, as used on the Research In Motion (RIM) BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows…
CVE-2017-7041, published 2017-07-20. High severity, CVSS 8.8. EPSS: 9.5% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is…
CVE-2010-3804, published 2010-11-22. Medium severity, CVSS 5.0. EPSS: 9.1% chance of exploitation in the next 30 days. The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of…
CVE-2017-7042, published 2017-07-20. High severity, CVSS 8.8. EPSS: 8.9% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is…
CVE-2010-1749, published 2010-06-11. High severity, CVSS 9.3. EPSS: 8.7% chance of exploitation in the next 30 days. Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or…
CVE-2010-1404, published 2010-06-11. High severity, CVSS 9.3. EPSS: 8.7% chance of exploitation in the next 30 days. Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or…
CVE-2010-1403, published 2010-06-11. High severity, CVSS 9.3. EPSS: 8.7% chance of exploitation in the next 30 days. WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document,…

Latest

CVE-2017-7160, published 2017-12-27. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-7157, published 2017-12-27. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-7156, published 2017-12-27. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-13870, published 2017-12-25. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-13866, published 2017-12-25. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-13856, published 2017-12-25. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is…
CVE-2017-13803, published 2017-11-13. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is…
CVE-2017-13802, published 2017-11-13. High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is…
CVE-2017-13798, published 2017-11-13. High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is…
CVE-2017-13796, published 2017-11-13. High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is…