Summary
| Detail | |||
|---|---|---|---|
| Vendor | Apple | First view | 2003-06-09 |
| Product | Safari | Last view | 2020-06-09 |
| Version | Type | ||
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 9.8 | 2020-06-09 | CVE-2020-9850 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution. |
| 6.1 | 2020-06-09 | CVE-2020-9843 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack. |
| 8.8 | 2020-06-09 | CVE-2020-9807 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 8.8 | 2020-06-09 | CVE-2020-9806 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 6.1 | 2020-06-09 | CVE-2020-9805 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting. |
| 8.8 | 2020-06-09 | CVE-2020-9803 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 8.8 | 2020-06-09 | CVE-2020-9802 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 5.3 | 2020-06-09 | CVE-2020-9801 | A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application. |
| 8.8 | 2020-06-09 | CVE-2020-9800 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 4.3 | 2020-04-01 | CVE-2020-9784 | A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings. |
| 8.8 | 2020-04-01 | CVE-2020-9783 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution. |
| 6.1 | 2020-04-01 | CVE-2020-3902 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to a cross site scripting attack. |
| 8.8 | 2020-04-01 | CVE-2020-3901 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 8.8 | 2020-04-01 | CVE-2020-3900 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 8.8 | 2020-04-01 | CVE-2020-3899 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution. |
| 8.8 | 2020-04-01 | CVE-2020-3897 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution. |
| 8.8 | 2020-04-01 | CVE-2020-3895 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 3.1 | 2020-04-01 | CVE-2020-3894 | A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. An application may be able to read restricted memory. |
| 4.3 | 2020-04-01 | CVE-2020-3887 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A download's origin may be incorrectly associated. |
| 4.3 | 2020-04-01 | CVE-2020-3885 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A file URL may be incorrectly processed. |
| 8.8 | 2020-02-27 | CVE-2020-3868 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 6.1 | 2020-02-27 | CVE-2020-3867 | A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting. |
| 8.8 | 2020-02-27 | CVE-2020-3865 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 6.5 | 2020-02-27 | CVE-2020-3862 | A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service. |
| 6.5 | 2020-02-27 | CVE-2020-3841 | The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencrypted over the network. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 47% (524) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 8% (89) | CWE-20 | Improper Input Validation |
| 7% (88) | CWE-399 | Resource Management Errors |
| 7% (85) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 7% (81) | CWE-200 | Information Exposure |
| 6% (77) | CWE-416 | Use After Free |
| 3% (36) | CWE-264 | Permissions, Privileges, and Access Controls |
| 1% (17) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
| 1% (15) | CWE-189 | Numeric Errors |
| 1% (12) | CWE-310 | Cryptographic Issues |
| 0% (10) | CWE-125 | Out-of-bounds Read |
| 0% (8) | CWE-254 | Security Features |
| 0% (7) | CWE-704 | Incorrect Type Conversion or Cast |
| 0% (7) | CWE-362 | Race Condition |
| 0% (5) | CWE-287 | Improper Authentication |
| 0% (4) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 0% (4) | CWE-255 | Credentials Management |
| 0% (4) | CWE-19 | Data Handling |
| 0% (3) | CWE-284 | Access Control (Authorization) Issues |
| 0% (3) | CWE-16 | Configuration |
| 0% (2) | CWE-787 | Out-of-bounds Write |
| 0% (2) | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') |
| 0% (2) | CWE-522 | Insufficiently Protected Credentials |
| 0% (2) | CWE-346 | Origin Validation Error |
| 0% (2) | CWE-190 | Integer Overflow or Wraparound |
Oval Markup Language : Definitions
| OvalID | Name |
|---|---|
| oval:org.mitre.oval:def:8509 | Blended Threat Remote Code Execution Vulnerability |
| oval:org.mitre.oval:def:6108 | Blended Threat Remote Code Execution Vulnerability |
| oval:org.mitre.oval:def:5782 | Blended Threat Elevation of Privilege Vulnerability |
| oval:org.mitre.oval:def:6091 | Apple Safari Malformed URI Remote Denial of Service Vulnerability |
| oval:org.mitre.oval:def:6066 | Apple Safari Malformed URI Remote Denial of Service Vulnerability |
| oval:org.mitre.oval:def:5559 | Apple Safari Denial of Service Vulnerability |
| oval:org.mitre.oval:def:11584 | Array index error in the insertItemBefore method in WebKit, as used in Apple ... |
| oval:org.mitre.oval:def:8086 | DSA-1867 kdelibs -- several vulnerabilities |
| oval:org.mitre.oval:def:7524 | DSA-1868 kde4libs -- several vulnerabilities |
| oval:org.mitre.oval:def:13290 | DSA-1867-1 kdelibs -- several vulnerabilities |
| oval:org.mitre.oval:def:13176 | DSA-1868-1 kde4libs -- several vulnerabilities |
| oval:org.mitre.oval:def:10260 | The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone... |
| oval:org.mitre.oval:def:11009 | Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, i... |
| oval:org.mitre.oval:def:9484 | WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS... |
| oval:org.mitre.oval:def:13862 | USN-822-1 -- kde4libs, kdelibs vulnerabilities |
| oval:org.mitre.oval:def:22057 | ELSA-2009:1127: kdelibs security update (Critical) |
| oval:org.mitre.oval:def:29301 | RHSA-2009:1127 -- kdelibs security update (Critical) |
| oval:org.mitre.oval:def:8135 | DSA-1866 kdegraphics -- several vulnerabilities |
| oval:org.mitre.oval:def:13597 | DSA-1866-1 kdegraphics -- several vulnerabilities |
| oval:org.mitre.oval:def:13166 | USN-823-1 -- kdegraphics vulnerabilities |
| oval:org.mitre.oval:def:10162 | Use-after-free vulnerability in the garbage-collection implementation in WebC... |
| oval:org.mitre.oval:def:22802 | ELSA-2009:1130: kdegraphics security update (Critical) |
| oval:org.mitre.oval:def:29125 | RHSA-2009:1130 -- kdegraphics security update (Critical) |
| oval:org.mitre.oval:def:13946 | USN-857-1 -- qt4-x11 vulnerabilities |
| oval:org.mitre.oval:def:13113 | USN-836-1 -- webkit vulnerabilities |
SAINT Exploits
| Description | Link |
|---|---|
| Apple Safari parent.close() Invalid Pointer Code Execution | More info here |
| QuickTime RTSP Content-Type header buffer overflow | More info here |
| Safari WebKit floating point number buffer overflow | More info here |
| Apple Safari libxslt File Create | More info here |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 78547 | Google Chrome Tree Builder Remote Overflow |
| 78545 | Google Chrome Use-after-free DOM Handling Unspecified Remote DoS |
| 78544 | Google Chrome Use-after-free DOM Selections Unspecified Remote DoS |
| 77715 | Google Chrome Range Handling Use-after-free Remote Code Execution |
| 77711 | Google Chrome CSS Property Array Unspecified Remote Memory Corruption |
| 77710 | Google Chrome SVG Parsing Out-of-bounds Read Remote DoS |
| 77621 | Google Chrome WebKit Cache Objects Image Handling Browsing History Disclosure |
| 77618 | Apple Safari WebKit Cache Objects Image Handling Browsing History Disclosure |
| 77605 | Apple Safari JavaScript Implementation getComputedStyle Method Page Handling ... |
| 77037 | Google Chrome Editing Unspecified Use-after-free Remote Issue |
| 76559 | Google Chrome Use-after-free Plug-ins and Editing Remote Code Execution |
| 76558 | Google Chrome Javascript URI Cookie Disclosure |
| 76556 | Google Chrome Multiple Use-after-free Stale Style Sheet Handling Remote Code ... |
| 76552 | Google Chrome Multiple Unspecified Same Origin Policy Bypass |
| 76545 | Google Chrome History Handling URL Bar Spoofing |
| 76391 | Apple Safari WebKit Private Browsing Mode Cookie Block Bypass |
| 76390 | Apple Safari SSL Certificate Handling Unitialized Memory Access Remote Code E... |
| 76389 | Apple Safari file:// URL Handling Remote Code Execution |
| 76388 | Apple Safari safari-extension:// URL Handling Traversal Remote Code Execution |
| 76353 | Apple iOS WebKit Inactive DOM Window Handling XSS |
| 76062 | Google Chrome Stale Font SVG Text Handling Remote Code Execution |
| 75562 | Google Chrome Use-after-free Table Style Handling Remote Code Execution |
| 75559 | Google Chrome Use-after-free Focus Controller Remote Code Execution |
| 75557 | Google Chrome Stale Node Stylesheet Handling Remote Code Execution |
| 75556 | Google Chrome Use-after-free ruby / table Style Handling Remote Code Execution |
ExploitDB Exploits
| id | Description |
|---|---|
| 28081 | Apple Safari 6.0.1 for iOS 6.0 and OS X 10.7/8 - Heap Buffer Overflow |
| 22406 | Konqueror 4.7.3 Memory Corruption |
| 18446 | Webkit normalize bug for android 2.2 (CVE-2010-1759) |
| 17986 | Apple Safari file:// Arbitrary Code Execution |
| 17575 | Safari 5.0.5 SVG Remote Code Execution Exploit (DEP bypass) |
| 17567 | Safari SVG DOM processing PoC |
| 15548 | Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit |
| 15423 | Android 2.0-2.1 Reverse Shell Exploit |
OpenVAS Exploits
| id | Description |
|---|---|
| 2012-12-13 | Name : SuSE Update for update openSUSE-SU-2012:0374-1 (update) File : nvt/gb_suse_2012_0374_1.nasl |
| 2012-12-13 | Name : SuSE Update for update openSUSE-SU-2012:0466-1 (update) File : nvt/gb_suse_2012_0466_1.nasl |
| 2012-11-21 | Name : Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Mac OS X) File : nvt/gb_apple_safari_webcore_webkit_xss_vuln_macosx.nasl |
| 2012-11-21 | Name : Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows) File : nvt/gb_apple_safari_webcore_webkit_xss_vuln_win.nasl |
| 2012-11-21 | Name : Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Linux) File : nvt/gb_google_chrome_webcore_webkit_xss_vuln_lin.nasl |
| 2012-11-21 | Name : Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Mac OS X) File : nvt/gb_google_chrome_webcore_webkit_xss_vuln_macosx.nasl |
| 2012-11-21 | Name : Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows) File : nvt/gb_google_chrome_webcore_webkit_xss_vuln_win.nasl |
| 2012-11-19 | Name : Fedora Update for kdelibs FEDORA-2012-17388 File : nvt/gb_fedora_2012_17388_kdelibs_fc16.nasl |
| 2012-11-02 | Name : Apple Safari Multiple Vulnerabilities (APPLE-SA-2012-09-19-3) File : nvt/gb_apple_safari_mult_vuln_nov12_macosx.nasl |
| 2012-10-26 | Name : Ubuntu Update for webkit USN-1617-1 File : nvt/gb_ubuntu_USN_1617_1.nasl |
| 2012-10-03 | Name : Fedora Update for libxml2 FEDORA-2012-13824 File : nvt/gb_fedora_2012_13824_libxml2_fc16.nasl |
| 2012-10-01 | Name : Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X) File : nvt/gb_apple_safari_mult_vuln_oct12_macosx.nasl |
| 2012-09-27 | Name : Fedora Update for libxml2 FEDORA-2012-13820 File : nvt/gb_fedora_2012_13820_libxml2_fc17.nasl |
| 2012-09-17 | Name : Apple iTunes Multiple Vulnerabilities - Sep 12 (Windows) File : nvt/gb_apple_itunes_mult_vuln_sep12_win.nasl |
| 2012-08-09 | Name : Ubuntu Update for webkit USN-1524-1 File : nvt/gb_ubuntu_USN_1524_1.nasl |
| 2012-08-01 | Name : Apple Safari Multiple Vulnerabilities - Aug 2012 (Windows) File : nvt/gb_apple_safari_mult_vuln_aug12_win.nasl |
| 2012-07-30 | Name : CentOS Update for libxml2 CESA-2012:0016 centos4 File : nvt/gb_CESA-2012_0016_libxml2_centos4.nasl |
| 2012-07-30 | Name : CentOS Update for libxml2 CESA-2012:0017 centos5 File : nvt/gb_CESA-2012_0017_libxml2_centos5.nasl |
| 2012-07-30 | Name : Apple Safari Multiple Vulnerabilities - July 2012 (Mac OS X) File : nvt/gb_apple_safari_mult_vuln_jul12_macosx.nasl |
| 2012-07-13 | Name : VMSA-2012-0012 VMware ESXi update addresses several security issues. File : nvt/gb_VMSA-2012-0012.nasl |
| 2012-07-09 | Name : RedHat Update for libxml2 RHSA-2011:1749-03 File : nvt/gb_RHSA-2011_1749-03_libxml2.nasl |
| 2012-06-05 | Name : RedHat Update for webkitgtk RHSA-2011:0177-01 File : nvt/gb_RHSA-2011_0177-01_webkitgtk.nasl |
| 2012-05-31 | Name : FreeBSD Ports: chromium File : nvt/freebsd_chromium13.nasl |
| 2012-05-31 | Name : Gentoo Security Advisory GLSA 201205-01 (chromium) File : nvt/glsa_201205_01.nasl |
| 2012-05-24 | Name : Apple Safari Multiple Vulnerabilities - Oct 2011 (Windows) File : nvt/secpod_apple_safari_mult_vuln_win_oct11.nasl |
Information Assurance Vulnerability Management (IAVM)
| id | Description |
|---|---|
| 2015-A-0222 | Multiple Security Vulnerabilities in Apple iOS Severity: Category I - VMSKEY: V0061471 |
| 2015-A-0199 | Multiple Vulnerabilities in Apple Mac OS X Severity: Category I - VMSKEY: V0061337 |
| 2015-A-0158 | Multiple Vulnerabilities in Oracle Java SE Severity: Category I - VMSKEY: V0061089 |
| 2014-B-0083 | Multiple Vulnerabilities in Apple iOS Severity: Category I - VMSKEY: V0052903 |
| 2014-B-0048 | Multiple Security Vulnerabilities in Apple iOS Severity: Category I - VMSKEY: V0050015 |
| 2014-B-0024 | Multiple Security Vulnerabilities in Apple iOS Severity: Category I - VMSKEY: V0046157 |
| 2013-A-0220 | Multiple Vulnerabilities in Mozilla Products Severity: Category I - VMSKEY: V0042380 |
| 2012-A-0153 | Multiple Vulnerabilities in VMware ESX 4.0 and ESXi 4.0 Severity: Category I - VMSKEY: V0033884 |
| 2012-A-0073 | Multiple Vulnerabilities in VMware ESXi 4.1 and ESX 4.1 Severity: Category I - VMSKEY: V0032171 |
| 2009-T-0021 | Microsoft Windows SearchPath Blended Threat Vulnerability Severity: Category II - VMSKEY: V0018776 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2020-06-13 | WebKit use-after-free remote code execution attempt RuleID : 53976 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-04-21 | Apple Safari WebKit JavaScript engine type confusion attempt RuleID : 53474 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-04-21 | Apple Safari WebKit JavaScript engine type confusion attempt RuleID : 53473 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-19 | Apple Safari WebKit cached page memory corruption attempt RuleID : 53122 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-19 | Apple Safari WebKit cached page memory corruption attempt RuleID : 53121 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-17 | Apple Safari Webkit WebCore memory corruption attempt RuleID : 53101 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-17 | Apple Safari Webkit WebCore memory corruption attempt RuleID : 53100 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-01-21 | Apple Webkit updateMinimumColumnHeight use-after-free attempt RuleID : 52486 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-01-21 | Apple Webkit updateMinimumColumnHeight use-after-free attempt RuleID : 52485 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-01-03 | Apple Safari WebKit out-of-bounds read attempt RuleID : 52342 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-01-03 | Apple Safari WebKit out-of-bounds read attempt RuleID : 52341 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-12-17 | Apple Safari WebKit handleIntrinsicCall type confusion attempt RuleID : 52245 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-12-17 | Apple Safari WebKit handleIntrinsicCall type confusion attempt RuleID : 52244 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-26 | WebKit WebCore handleMenuItemSelected use after free attempt RuleID : 52003 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-26 | WebKit WebCore handleMenuItemSelected use after free attempt RuleID : 52002 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-15 | WebKit JavaScriptCore emitEqualityOpImpl memory corruption attempt RuleID : 51832 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-15 | WebKit JavaScriptCore emitEqualityOpImpl memory corruption attempt RuleID : 51831 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-12 | WebKit JavaScriptCore JSValue use after free attempt RuleID : 51824 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-12 | WebKit JavaScriptCore JSValue use after free attempt RuleID : 51823 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-12 | WebKit JavaScriptCore AIR optimization memory corruption attempt RuleID : 51822 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-11-12 | WebKit JavaScriptCore AIR optimization memory corruption attempt RuleID : 51821 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-10-08 | Apple Safari memory corruption attempt RuleID : 51416 - Type : BROWSER-WEBKIT - Revision : 2 |
| 2019-10-08 | Apple Safari memory corruption attempt RuleID : 51415 - Type : BROWSER-WEBKIT - Revision : 2 |
| 2019-10-01 | Apple Safari WebKit out-of-bounds write attempt RuleID : 51392 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2019-10-01 | Apple Safari WebKit out-of-bounds write attempt RuleID : 51391 - Type : BROWSER-WEBKIT - Revision : 1 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-118b9abf99.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-1a8582a7ee.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-499f2dbc96.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-509fc4a5c8.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-97c58e29e4.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-a1f37d2f08.nasl - Type: ACT_GATHER_INFO |
| 2019-01-03 | Name: The remote Fedora host is missing a security update. File: fedora_2018-e2e8a07a01.nasl - Type: ACT_GATHER_INFO |
| 2018-12-21 | Name: The remote Apple TV device is affected by multiple vulnerabilities. File: appletv_12_1_1.nasl - Type: ACT_GATHER_INFO |
| 2018-12-19 | Name: An application installed on remote host is affected by multiple vulnerabilities File: itunes_12_9_2.nasl - Type: ACT_GATHER_INFO |
| 2018-12-07 | Name: A web browser installed on the remote macOS or Mac OS X host is affected by m... File: macosx_Safari12_0_2.nasl - Type: ACT_GATHER_INFO |
| 2018-12-03 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-201812-04.nasl - Type: ACT_GATHER_INFO |
| 2018-11-02 | Name: The remote Apple TV device is affected by multiple vulnerabilities. File: appletv_12_1.nasl - Type: ACT_GATHER_INFO |
| 2018-11-02 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: itunes_12_9_1.nasl - Type: ACT_GATHER_INFO |
| 2018-11-02 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: itunes_12_9_1_banner.nasl - Type: ACT_GATHER_INFO |
| 2018-10-31 | Name: A web browser installed on the remote macOS or Mac OS X host is affected by m... File: macosx_Safari12_0_1.nasl - Type: ACT_GATHER_INFO |
| 2018-10-02 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: itunes_12_8_banner.nasl - Type: ACT_GATHER_INFO |
| 2018-10-02 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: itunes_12_9.nasl - Type: ACT_GATHER_INFO |
| 2018-10-02 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: itunes_12_9_banner.nasl - Type: ACT_GATHER_INFO |
| 2018-09-24 | Name: The remote Fedora host is missing a security update. File: fedora_2018-4a16e37c81.nasl - Type: ACT_GATHER_INFO |
| 2018-09-20 | Name: A web browser installed on the remote macOS or Mac OS X host is affected by m... File: macosx_safari12.nasl - Type: ACT_GATHER_INFO |
| 2018-08-23 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-201808-01.nasl - Type: ACT_GATHER_INFO |
| 2018-08-23 | Name: The remote Gentoo host is missing one or more security-related patches. File: gentoo_GLSA-201808-04.nasl - Type: ACT_GATHER_INFO |
| 2018-07-30 | Name: The remote FreeBSD host is missing a security-related update. File: freebsd_pkg_b9c525d9919811e8beba080027ef1a23.nasl - Type: ACT_GATHER_INFO |
| 2018-07-27 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-4256.nasl - Type: ACT_GATHER_INFO |
| 2018-07-17 | Name: The remote host is missing a macOS update that fixes multiple security vulner... File: macos_10_13_6.nasl - Type: ACT_GATHER_INFO |
