← Back

Safari

safari

Vendor: Apple • 1,629 CVEs

CVEs (1,629)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-1203
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale point...Show more
Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-1190
2Apple
Google
3Chrome
Iphone OsSafari
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
CVE-2011-1188
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2011-1344
1Apple
2Iphone Os
Safari
Apr 29, 2026
Mar 10, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to exec...Show more
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.Show less
CVE-2011-0132
1Apple
3Itunes
SafariWebkit
Apr 29, 2026
Mar 3, 2011
N/A· v4
N/A· v3
7.6 HIGH· v2
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allow...Show more
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.Show less
CVE-2011-0115
1Apple
3Itunes
SafariWebkit
Apr 29, 2026
Mar 3, 2011
N/A· v4
N/A· v3
7.6 HIGH· v2
The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, wh...Show more
The DOM level 2 implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-03-02-1.Show less
CVE-2011-1121
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
CVE-2011-1117
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale node...Show more
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."Show less
CVE-2011-1115
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
CVE-2011-1114
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
CVE-2011-1109
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unkno...Show more
Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-1107
2Apple
Google
3Chrome
Iphone OsSafari
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors.
CVE-2011-0983
3Apple
DebianGoogle
5Chrome
Debian LinuxIphone Os+2 more
Apr 29, 2026
Feb 10, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale po...Show more
Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-0981
3Apple
DebianGoogle
5Chrome
Debian LinuxIphone Os+2 more
Apr 29, 2026
Feb 10, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead...Show more
Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2010-4494
10Apache
AppleDebian+7 more
17Chrome
Debian LinuxEnterprise Linux Desktop+14 more
Apr 29, 2026
Dec 7, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impac...Show more
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.Show less
CVE-2010-3826
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of colors in an SVG document...Show more
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of colors in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.Show less
CVE-2010-3824
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of ser...Show more
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving SVG use elements.Show less
CVE-2010-3823
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of ser...Show more
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Geolocation objects. NOTE: this might overlap CVE-2010-3415.Show less
CVE-2010-3822
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which...Show more
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.Show less
CVE-2010-3821
1Apple
2Safari
Webkit
Apr 29, 2026
Nov 22, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence...Show more
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.Show less