Advisories · Technology

Apple Safari.

Every CVE that names Apple Safari among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-42852 CVE record

CVSS 8.8 High

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 25 Oct 2023
CVE-2023-41976 CVE record

A use-after-free issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 25 Oct 2023
CVE-2023-41983 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 25 Oct 2023
CVE-2023-40447 CVE record

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 25 Oct 2023
CVE-2023-41074 CVE record

CVSS 8.8 High

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Code injection
Not analysed yet 26 Sept 2023
CVE-2023-40451 CVE record

This issue was addressed with improved iframe sandbox enforcement.
- Apple Safari
Not analysed yet 26 Sept 2023
CVE-2023-35074 CVE record

CVSS 8.8 High

The issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 26 Sept 2023
CVE-2023-40417 CVE record

A window management issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 26 Sept 2023
CVE-2022-48503 CVE record

CVSS 8.8 HighCritical · KEVKEV

Improper array index validation in Apple macOS and others
- Apple macOS
- Apple tvOS
- CWE-129
Not analysed yet 14 Aug 2023
CVE-2023-38599 CVE record

A logic issue was addressed with improved state management.
- Apple Safari
- Apple tvOS
Not analysed yet 28 Jul 2023
CVE-2023-32445 CVE record

This issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 28 Jul 2023
CVE-2023-38595 CVE record

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 27 Jul 2023
CVE-2023-38572 CVE record

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 27 Jul 2023
CVE-2023-38600 CVE record

CVSS 8.8 High

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 27 Jul 2023
CVE-2023-38611 CVE record

The issue was addressed with improved memory handling.
- Apple Safari
- Apple tvOS
Not analysed yet 27 Jul 2023
CVE-2023-38597 CVE record

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 26 Jul 2023
CVE-2023-38594 CVE record

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 26 Jul 2023
CVE-2023-38133 CVE record

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 26 Jul 2023
CVE-2023-37450 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

The issue was addressed with improved checks.
- Apple Safari
- Apple tvOS
Not analysed yet 26 Jul 2023
CVE-2023-32439 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 23 Jun 2023
CVE-2023-32435 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 23 Jun 2023
CVE-2023-32423 CVE record

A buffer overflow issue was addressed with improved memory handling.
- Apple macOS
- Apple Safari
Not analysed yet 23 Jun 2023
CVE-2023-32409 CVE record

CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV

The issue was addressed with improved bounds checks.
- Apple macOS
- Apple Safari
Not analysed yet 23 Jun 2023
CVE-2023-32402 CVE record

An out-of-bounds read was addressed with improved input validation.
- Apple macOS
- Apple Safari
Not analysed yet 23 Jun 2023
CVE-2023-32373 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Use after free in Apple macOS and others
- Apple macOS
- Apple Safari
- Memory corruption
Not analysed yet 23 Jun 2023
CVE-2023-28204 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Out-of-bounds read in Apple macOS and others
- Apple macOS
- Apple Safari
- Memory corruption
Not analysed yet 23 Jun 2023
CVE-2023-28201 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Race condition in Apple macOS and others
- Apple macOS
- Apple Safari
- Race condition
Not analysed yet 8 May 2023
CVE-2023-27954 CVE record

CVSS 6.5 Medium

Incorrect authorization in Apple macOS and others
- Apple macOS
- Apple Safari
- Broken access control
Not analysed yet 8 May 2023
CVE-2023-27932 CVE record

CVSS 5.5 Medium

Origin validation error in Apple macOS and others
- Apple macOS
- Apple Safari
- CWE-346
Not analysed yet 8 May 2023
CVE-2023-28205 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 10 Apr 2023
CVE-2023-23529 CVE record

CVSS 8.8 HighCritical · KEVKEV

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23518 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23517 CVE record

CVSS 8.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Memory corruption
Not analysed yet 27 Feb 2023
CVE-2023-23496 CVE record

Code injection in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple tvOS
- Code injection
Not analysed yet 27 Feb 2023
CVE-2022-32891 CVE record

The issue was addressed with improved UI handling.
- Apple iOS
- Apple Safari
Not analysed yet 27 Feb 2023
CVE-2022-32784 CVE record

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 27 Feb 2023
CVE-2022-22629 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple tvOS
- Memory corruption
Not analysed yet 23 Sept 2022
CVE-2022-22628 CVE record

CVSS 8.8 High

Use after free in Apple Safari and others
- Apple Safari
- Apple tvOS
- Memory corruption
Not analysed yet 23 Sept 2022
CVE-2022-22637 CVE record

CVSS 8.8 High

Origin validation error in Apple Safari and others
- Apple Safari
- Apple tvOS
- CWE-346
Not analysed yet 23 Sept 2022
CVE-2022-22624 CVE record

CVSS 8.8 High

Use after free in Apple Safari and others
- Apple Safari
- Apple tvOS
- Memory corruption
Not analysed yet 23 Sept 2022
CVE-2022-22610 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple tvOS
- Memory corruption
Not analysed yet 23 Sept 2022
CVE-2022-32912 CVE record

CVSS 8.8 High

Out-of-bounds read in Apple iOS and others
- Apple iOS
- Apple Safari
- Memory corruption
Not analysed yet 20 Sept 2022
CVE-2022-32886 CVE record

CVSS 8.8 High

Out-of-bounds write in Apple iOS and others
- Apple iOS
- Apple Safari
- Memory corruption
Not analysed yet 20 Sept 2022
CVE-2022-32868 CVE record

A logic issue was addressed with improved state management.
- Apple iOS
- Apple Safari
Not analysed yet 20 Sept 2022
CVE-2022-32893 CVE record

CVSS 8.8 HighCritical · KEVKEV

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 24 Aug 2022
CVE-2022-22654 CVE record

A user interface issue was addressed.
- Apple Safari
- Apple watchOS
Not analysed yet 18 Mar 2022
CVE-2021-30823 CVE record

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 28 Oct 2021
CVE-2021-30818 CVE record

A type confusion issue was addressed with improved state handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 28 Oct 2021
CVE-2021-30809 CVE record

A use after free issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 28 Oct 2021
CVE-2021-30846 CVE record

A memory corruption issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 19 Oct 2021
CVE-2021-30848 CVE record

A memory corruption issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 19 Oct 2021
CVE-2021-30849 CVE record

Multiple memory corruption issues were addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 19 Oct 2021
CVE-2021-1825 CVE record

An input validation issue was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple Safari
Not analysed yet 8 Sept 2021
CVE-2021-30661 CVE record

CVSS 8.8 HighCritical · KEVKEV

Use after free in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 8 Sept 2021
CVE-2021-30851 CVE record

A memory corruption vulnerability was addressed with improved locking.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2020-9993 CVE record

The issue was addressed with improved UI handling.
- Apple watchOS
- Apple Safari
Not analysed yet 8 Dec 2020
CVE-2020-9987 CVE record

An inconsistent user interface issue was addressed with improved state management.
- Apple Safari
Not analysed yet 8 Dec 2020
CVE-2020-9947 CVE record

A use after free issue was addressed with improved memory management.
- Apple tvOS
- Apple watchOS
Not analysed yet 8 Dec 2020
CVE-2020-9950 CVE record

A use after free issue was addressed with improved memory management.
- Apple tvOS
- Apple watchOS
Not analysed yet 8 Dec 2020
CVE-2020-9942 CVE record

An inconsistent user interface issue was addressed with improved state management.
- Apple Safari
- Apple macOS
Not analysed yet 8 Dec 2020