Advisories · Technology

Apple Safari.

Every CVE that names Apple Safari among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24113 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 27 Jan 2025
CVE-2024-27856 CVE record

CVSS 7.8 High

Code injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Code injection
Not analysed yet 15 Jan 2025
CVE-2024-54502 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54534 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54505 CVE record

CVSS 8.8 High

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-44246 CVE record

CVSS 4.3 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54508 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Dec 2024
CVE-2024-54479 CVE record

CVSS 7.5 High

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 11 Dec 2024
CVE-2024-44212 CVE record

CVSS 5.3 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 11 Dec 2024
CVE-2024-44309 CVE record

CVSS 6.3 MediumCritical · KEVKEV

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 19 Nov 2024
CVE-2024-44308 CVE record

CVSS 8.8 HighCritical · KEVKEV

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 19 Nov 2024
CVE-2024-44155 CVE record

CVSS 6.5 Medium

A custom URL scheme handling issue was addressed with improved input validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44244 CVE record

CVSS 4.3 Medium

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 28 Oct 2024
CVE-2024-44229 CVE record

CVSS 5.3 Medium

An information leakage was addressed with additional validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44296 CVE record

CVSS 5.4 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44259 CVE record

CVSS 8.8 High

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Oct 2024
CVE-2024-44206 CVE record

CVSS 5.4 Medium

An issue in the handling of URL protocols was addressed with improved logic.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44185 CVE record

CVSS 5.5 Medium

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 24 Oct 2024
CVE-2024-44187 CVE record

CVSS 6.5 Medium

Origin validation error in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-346
Not analysed yet 16 Sept 2024
CVE-2024-40857 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2024
CVE-2024-40866 CVE record

CVSS 6.5 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple macOS
Not analysed yet 16 Sept 2024
CVE-2024-44202 CVE record

CVSS 5.3 Medium

Improper authentication in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 16 Sept 2024
CVE-2024-40794 CVE record

CVSS 5.3 Medium

Improper authentication in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 29 Jul 2024
CVE-2024-40782 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40776 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40789 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40785 CVE record

CVSS 6.1 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 29 Jul 2024
CVE-2024-40817 CVE record

CVSS 6.1 Medium

Clickjacking in Apple Safari and others
- Apple Safari
- Apple macOS
- CWE-1021
Not analysed yet 29 Jul 2024
CVE-2024-40780 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-40779 CVE record

CVSS 5.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 29 Jul 2024
CVE-2024-27830 CVE record

CVSS 6.5 Medium

This issue was addressed through improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 10 Jun 2024
CVE-2024-27851 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27850 CVE record

CVSS 6.5 Medium

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 10 Jun 2024
CVE-2024-27820 CVE record

CVSS 7.5 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27838 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2024
CVE-2024-27808 CVE record

CVSS 7.5 High

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
- CWE-786
Not analysed yet 10 Jun 2024
CVE-2024-27844 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

The issue was addressed with improved checks.
- Apple Safari
- Apple macOS
Not analysed yet 10 Jun 2024
CVE-2024-27833 CVE record

CVSS 7.5 High

Integer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 10 Jun 2024
CVE-2024-27834 CVE record

CVSS 5.5 MediumCritical · KEVKEV

Improper authentication in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 13 May 2024
CVE-2024-23271 CVE record

CVSS 7.3 High

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 24 Apr 2024
CVE-2023-42956 CVE record

CVSS 6.5 Medium

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 28 Mar 2024
CVE-2023-42950 CVE record

CVSS 8.8 High

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 28 Mar 2024
CVE-2024-23263 CVE record

CVSS 8.1 High

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
Not analysed yet 8 Mar 2024
CVE-2024-23280 CVE record

CVSS 7.5 High

An injection issue was addressed with improved validation.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23254 CVE record

CVSS 6.5 Medium

The issue was addressed with improved UI handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 8 Mar 2024
CVE-2024-23273 CVE record

CVSS 4.3 Medium

Improper certificate validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Weak cryptography or TLS
Not analysed yet 8 Mar 2024
CVE-2024-23284 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 8 Mar 2024
CVE-2023-42843 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Authentication bypass
Not analysed yet 21 Feb 2024
CVE-2024-23222 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2024-23213 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jan 2024
CVE-2024-23206 CVE record

CVSS 6.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2024-23211 CVE record

CVSS 3.3 Low

Exposure of personal information in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 23 Jan 2024
CVE-2023-40414 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 10 Jan 2024
CVE-2023-42833 CVE record

CVSS 8.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Code injection
Not analysed yet 10 Jan 2024
CVE-2023-40385 CVE record

CVSS 6.5 Medium

Information disclosure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Information disclosure
Not analysed yet 10 Jan 2024
CVE-2023-42866 CVE record

CVSS 8.8 High

The issue was addressed with improved memory handling.
- Apple Safari
- Apple tvOS
Not analysed yet 10 Jan 2024
CVE-2023-42890 CVE record

Code injection in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Code injection
Not analysed yet 12 Dec 2023
CVE-2023-42883 CVE record

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 12 Dec 2023
CVE-2023-42917 CVE record

CVSS 8.8 HighCritical · KEVKEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple macOS
- Memory corruption
Not analysed yet 30 Nov 2023
CVE-2023-42916 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple macOS
- Memory corruption
Not analysed yet 30 Nov 2023