# Apple Safari. Every CVE that names Apple Safari among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [The issue was addressed with improved UI.](https://agentprime.io/advisories/CVE-2025-24113.md) `CVE-2025-24113` · CVE record: Apple Safari and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 27 Jan 2025 - [Code injection in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27856.md) `CVE-2024-27856` · CVE record: Apple Safari and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jan 2025 · Tags: Code injection - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-54502.md) `CVE-2024-54502` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · EPSS 0.17 · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [Out-of-bounds write in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-54534.md) `CVE-2024-54534` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [Type confusion in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-54505.md) `CVE-2024-54505` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44246.md) `CVE-2024-44246` · CVE record: Apple Safari and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-54508.md) `CVE-2024-54508` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: Memory corruption - [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-54479.md) `CVE-2024-54479` · CVE record: Apple Safari and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Dec 2024 - [Origin validation error in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44212.md) `CVE-2024-44212` · CVE record: Apple Safari and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Dec 2024 · Tags: CWE-346 - [Cross-site scripting in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44309.md) `CVE-2024-44309` · CVE record: Apple Safari and 3 more · CVSS 6.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.22 · Not analysed yet · Published 19 Nov 2024 · Tags: Cross-site scripting (XSS) - [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-44308.md) `CVE-2024-44308` · CVE record: Apple Safari and 3 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 19 Nov 2024 - [A custom URL scheme handling issue was addressed with improved input validation.](https://agentprime.io/advisories/CVE-2024-44155.md) `CVE-2024-44155` · CVE record: Apple Safari and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2024 - [Out-of-bounds write in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44244.md) `CVE-2024-44244` · CVE record: Apple Safari and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Oct 2024 · Tags: Memory corruption - [An information leakage was addressed with additional validation.](https://agentprime.io/advisories/CVE-2024-44229.md) `CVE-2024-44229` · CVE record: Apple Safari and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2024 - [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-44296.md) `CVE-2024-44296` · CVE record: Apple Safari and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 28 Oct 2024 - [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2024-44259.md) `CVE-2024-44259` · CVE record: Apple Safari and 3 more · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2024 - [An issue in the handling of URL protocols was addressed with improved logic.](https://agentprime.io/advisories/CVE-2024-44206.md) `CVE-2024-44206` · CVE record: Apple Safari and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 24 Oct 2024 - [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-44185.md) `CVE-2024-44185` · CVE record: Apple Safari and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 24 Oct 2024 - [Origin validation error in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44187.md) `CVE-2024-44187` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-346 - [Cross-site scripting in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40857.md) `CVE-2024-40857` · CVE record: Apple Safari and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: Cross-site scripting (XSS) - [The issue was addressed with improved UI.](https://agentprime.io/advisories/CVE-2024-40866.md) `CVE-2024-40866` · CVE record: Apple Safari and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2024 - [Improper authentication in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-44202.md) `CVE-2024-44202` · CVE record: Apple Safari and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: Authentication bypass - [Improper authentication in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40794.md) `CVE-2024-40794` · CVE record: Apple Safari and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Authentication bypass - [Use after free in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40782.md) `CVE-2024-40782` · CVE record: Apple Safari and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2024 · Tags: Memory corruption - [Use after free in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40776.md) `CVE-2024-40776` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Memory corruption - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40789.md) `CVE-2024-40789` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Memory corruption - [Cross-site scripting in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40785.md) `CVE-2024-40785` · CVE record: Apple Safari and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Cross-site scripting (XSS) - [Clickjacking in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40817.md) `CVE-2024-40817` · CVE record: Apple Safari and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: CWE-1021 - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40780.md) `CVE-2024-40780` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Memory corruption - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-40779.md) `CVE-2024-40779` · CVE record: Apple Safari and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 29 Jul 2024 · Tags: Memory corruption - [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2024-27830.md) `CVE-2024-27830` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jun 2024 - [Buffer overflow in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27851.md) `CVE-2024-27851` · CVE record: Apple Safari and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2024 · Tags: Memory corruption - [Exposure of personal information in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27850.md) `CVE-2024-27850` · CVE record: Apple Safari and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: Information disclosure - [Buffer overflow in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27820.md) `CVE-2024-27820` · CVE record: Apple Safari and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2024 · Tags: Memory corruption - [Cross-site scripting in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27838.md) `CVE-2024-27838` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: Cross-site scripting (XSS) - [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2024-27808.md) `CVE-2024-27808` · CVE record: Apple Safari and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-786 - [The issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2024-27844.md) `CVE-2024-27844` · CVE record: Apple Safari and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2024 - [Integer overflow in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27833.md) `CVE-2024-27833` · CVE record: Apple Safari and 3 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2024 · Tags: Memory corruption - [Improper authentication in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-27834.md) `CVE-2024-27834` · CVE record: Apple Safari and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 May 2024 · Tags: Authentication bypass - [Improper access control in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23271.md) `CVE-2024-23271` · CVE record: Apple Safari and 4 more · CVSS 7.3 High · Not analysed yet · Published 24 Apr 2024 · Tags: Broken access control - [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2023-42956.md) `CVE-2023-42956` · CVE record: Apple Safari and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 28 Mar 2024 - [Use after free in Apple Safari and others](https://agentprime.io/advisories/CVE-2023-42950.md) `CVE-2023-42950` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Not analysed yet · Published 28 Mar 2024 · Tags: Memory corruption - [Improper input validation in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23263.md) `CVE-2024-23263` · CVE record: Apple Safari and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-20 - [An injection issue was addressed with improved validation.](https://agentprime.io/advisories/CVE-2024-23280.md) `CVE-2024-23280` · CVE record: Apple Safari and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Mar 2024 - [The issue was addressed with improved UI handling.](https://agentprime.io/advisories/CVE-2024-23254.md) `CVE-2024-23254` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Mar 2024 - [Improper certificate validation in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23273.md) `CVE-2024-23273` · CVE record: Apple Safari and 2 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Mar 2024 · Tags: Weak cryptography or TLS - [Protection mechanism failure in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23284.md) `CVE-2024-23284` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-693 - [Authentication bypass by spoofing in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2023-42843.md) `CVE-2023-42843` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 21 Feb 2024 · Tags: Authentication bypass - [Type confusion in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23222.md) `CVE-2024-23222` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.11 · Not analysed yet · Published 23 Jan 2024 · Tags: Memory corruption - [Buffer overflow in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23213.md) `CVE-2024-23213` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Jan 2024 · Tags: Memory corruption - [Information disclosure in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23206.md) `CVE-2024-23206` · CVE record: Apple Safari and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 23 Jan 2024 · Tags: Information disclosure - [Exposure of personal information in Apple Safari and others](https://agentprime.io/advisories/CVE-2024-23211.md) `CVE-2024-23211` · CVE record: Apple Safari and 3 more · CVSS 3.3 Low · Not analysed yet · Published 23 Jan 2024 · Tags: Information disclosure - [Use after free in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2023-40414.md) `CVE-2023-40414` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jan 2024 · Tags: Memory corruption - [Code injection in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2023-42833.md) `CVE-2023-42833` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 8.8 High · Not analysed yet · Published 10 Jan 2024 · Tags: Code injection - [Information disclosure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2023-40385.md) `CVE-2023-40385` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: Information disclosure - [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2023-42866.md) `CVE-2023-42866` · CVE record: Apple Safari and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Jan 2024 - [Code injection in Apple Safari and others](https://agentprime.io/advisories/CVE-2023-42890.md) `CVE-2023-42890` · CVE record: Apple Safari and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2023 · Tags: Code injection - [The issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2023-42883.md) `CVE-2023-42883` · CVE record: Apple Safari and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2023 - [Out-of-bounds write in Apple Safari and others](https://agentprime.io/advisories/CVE-2023-42917.md) `CVE-2023-42917` · CVE record: Apple Safari and 2 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 30 Nov 2023 · Tags: Memory corruption - [Out-of-bounds read in Apple Safari and others](https://agentprime.io/advisories/CVE-2023-42916.md) `CVE-2023-42916` · CVE record: Apple Safari and 2 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.18 · Not analysed yet · Published 30 Nov 2023 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .