← Back

Safari

safari

Vendor: Apple • 1,598 CVEs

CVEs (1,598)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-0234
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0233
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0232
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0225
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0223
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0222
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0221
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0219
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts.
CVE-2011-0218
1Apple
2Safari
Webkit
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability tha...Show more
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.Show less
CVE-2011-0217
1Apple
1Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form...Show more
Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.Show less
CVE-2011-0216
1Apple
1Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
CVE-2011-0215
1Apple
2Imageio
Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF fi...Show more
ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.Show less
CVE-2011-0214
1Apple
2Cfnetwork
Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed...Show more
CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority.Show less
CVE-2010-1420
1Apple
2Cfnetwork
Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted text/plain file.
CVE-2010-1383
1Apple
2Cfnetwork
Safari
Apr 29, 2026
Jul 21, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by replaying the NTLM credentials of a client user, related to a "credential reflection" issue.
CVE-2011-2351
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Jun 29, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.
CVE-2011-1451
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
May 3, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling point...Show more
Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."Show less
CVE-2011-1449
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
May 3, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-1440
3Apple
DebianGoogle
4Chrome
Debian LinuxItunes+1 more
Apr 29, 2026
May 3, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style...Show more
Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.Show less
CVE-2011-1296
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 25, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer....Show more
Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less