← Back

Safari

safari

Vendor: Apple • 1,629 CVEs

CVEs (1,629)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-2019
1Apple
1Safari
Apr 16, 2026
Apr 25, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.
CVE-2006-1988
1Apple
1Safari
Apr 16, 2026
Apr 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list i...Show more
The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE.Show less
CVE-2006-1987
1Apple
1Safari
Apr 16, 2026
Apr 21, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no...Show more
Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.Show less
CVE-2006-1986
1Apple
1Safari
Apr 16, 2026
Apr 21, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl.
CVE-2006-1985
1Apple
3Mac Os X
Mac Os X ServerSafari
Apr 16, 2026
Apr 21, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains...Show more
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.Show less
CVE-2006-1552
1Apple
4Imageio
Mac Os XMac Os X Server+1 more
Apr 16, 2026
Mar 31, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-...Show more
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".Show less
CVE-2005-4678
1Apple
1Safari
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this informat...Show more
Apple Safari 2.0.2 (aka 416.12) allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2005-4504
1Apple
4Mac Os X
Mac Os X ServerSafari+1 more
Apr 16, 2026
Dec 22, 2005
N/A· v4
N/A· v3
7.8 HIGH· v2
The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and applica...Show more
The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.Show less
CVE-2005-3897
1Apple
1Safari
Apr 16, 2026
Nov 29, 2005
N/A· v4
N/A· v3
7.8 HIGH· v2
Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.
CVE-2005-2524
1Apple
3Mac Os X
Mac Os X ServerSafari
Apr 16, 2026
Oct 26, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site.
CVE-2005-3018
1Apple
1Safari
Apr 16, 2026
Sep 21, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
CVE-2005-2522
1Apple
2Mac Os X
Safari
Apr 16, 2026
Aug 19, 2005
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file.
CVE-2005-2517
1Apple
2Mac Os X
Safari
Apr 16, 2026
Aug 19, 2005
N/A· v4
N/A· v3
2.6 LOW· v2
Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site.
CVE-2005-2516
1Apple
2Mac Os X
Safari
Apr 16, 2026
Aug 19, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Safari in Mac OS X 10.3.9 and 10.4.2, when rendering Rich Text Format (RTF) files, can directly access URLs without performing the normal security checks, which allows remote attackers to execute arbitrary commands.
CVE-2005-2594
1Apple
1Safari
Apr 16, 2026
Aug 17, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Apple Safari 1.3 (132) on Mac OS X 1.3.9 allows remote attackers to cause a denial of service (crash) via certain Javascript, possibly involving a function that defines a handler for itself within the function body.
CVE-2005-2272
1Apple
1Safari
Apr 16, 2026
Jul 13, 2005
N/A· v4
N/A· v3
2.6 LOW· v2
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, a...Show more
Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."Show less
CVE-2005-1385
1Apple
1Safari
Apr 16, 2026
May 3, 2005
N/A· v4
N/A· v3
2.6 LOW· v2
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
CVE-2005-0976
3Apple
HmdtOmnigroup
3Omniweb
SafariShiira
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated us...Show more
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.Show less
CVE-2005-0341
1Apple
1Safari
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Apple Safari 1.2.4 does not obey the Content-type field in the HTTP header and renders text as HTML, which allows remote attackers to inject arbitrary web script or HTML and perform cross-site scripting (XSS) attacks.
CVE-2005-0234
1Apple
1Safari
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph cha...Show more
The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.Show less