Login Request a demo
SA
Product
Safari
by Apple · last CVE Oct 26, 2026
On CISA KEVExploited in the wild
1,725
CVEs
27
On KEV
10.0
Max CVSS
35
New 30D
Vulnerabilities1,725In the news11Timeline
Severity mix
Critical 23High 474Medium 3Low 0
Severity
All severities500Critical23High474Medium3Low0
Exploitation
On CISA KEV27Exploited in the wild27
Watch

Add Safari to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-24201
In wildKEV
10.0
4%
Mar 11
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Affected: before 18.3.1
CVE-2025-43529
In wildKEV
8.8
26%
Dec 17
Apple Multiple Products Use-After-Free WebKit Vulnerability
Affected: before 26.2
CVE-2025-14174
In wildKEV
8.8
55%
Dec 12
Google Chromium Out of Bounds Memory Access Vulnerability
Affected: before 26.2
CVE-2023-43000
In wildKEV
8.8
4%
Nov 5
Apple Multiple products Use-After-Free Vulnerability
Affected: before 16.6
CVE-2025-31277
In wildKEV
8.8
2%
Jul 29
Apple Multiple Products Buffer Overflow Vulnerability
Affected: before 18.6
CVE-2025-6558
In wildKEV
8.8
11%
Jul 15
Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
Affected: before 18.6
CVE-2024-44308
In wildKEV
8.8
10%
Nov 19
Apple Multiple Products Code Execution Vulnerability
Affected: before 18.1.1
CVE-2024-23222
In wildKEV
8.8
11%
Jan 23
Apple Multiple Products WebKit Type Confusion Vulnerability
Affected: before 17.3
CVE-2023-42917
In wildKEV
8.8
9%
Nov 30
Apple Multiple Products WebKit Memory Corruption Vulnerability
Affected: before 17.1
CVE-2022-48503
In wildKEV
8.8
3%
Aug 14
Apple Multiple Products Unspecified Vulnerability
Affected: before 15.6
CVE-2023-37450
In wildKEV
8.8
19%
Jul 26
Apple Multiple Products WebKit Code Execution Vulnerability
Affected: before 16.5
CVE-2023-32439
In wildKEV
8.8
24%
Jun 23
Apple Multiple Products WebKit Type Confusion Vulnerability
Affected: before 16.5
CVE-2023-32373
In wildKEV
8.8
12%
Jun 23
Apple Multiple Products WebKit Use-After-Free Vulnerability
Affected: before 16.5
CVE-2023-32435
In wildKEV
8.8
23%
Jun 23
Apple Multiple Products WebKit Memory Corruption Vulnerability
Affected: before 16.4
CVE-2023-28205
In wildKEV
8.8
27%
Apr 10
Apple Multiple Products WebKit Use-After-Free Vulnerability
Affected: before 16.4
CVE-2023-23529
In wildKEV
8.8
9%
Feb 27
Apple Multiple Products WebKit Type Confusion Vulnerability
Affected: before 16.3
CVE-2022-42856
In wildKEV
8.8
9%
Dec 15
Apple iOS Type Confusion Vulnerability
Affected: before 16.2
CVE-2022-32893
In wildKEV
8.8
10%
Aug 24
Apple iOS and macOS Out-of-Bounds Write Vulnerability
Affected: before 15.6
CVE-2022-22620
In wildKEV
8.8
16%
Mar 18
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Affected: before 15.3
CVE-2021-30663
In wildKEV
8.8
4%
Sep 8
Apple Multiple Products WebKit Integer Overflow Vulnerability
Affected: before 14.1.1
CVE-2021-30661
In wildKEV
8.8
4%
Sep 8
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
Affected: before 14.1
CVE-2019-8506
In wildKEV
8.8
16%
Dec 18
Apple Multiple Products Type Confusion Vulnerability
Affected: before Safari 12.1
CVE-2023-32409
In wildKEV
8.6
17%
Jun 23
Apple Multiple Products WebKit Sandbox Escape Vulnerability
Affected: before 16.5
CVE-2021-30952
In wildKEV
7.8
7%
Aug 24
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Affected: before 15.2
CVE-2023-42916
In wildKEV
6.5
18%
Nov 30
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Affected: before 17.1
CVE-2023-28204
In wildKEV
6.5
14%
Jun 23
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Affected: before 16.5
CVE-2024-44309
In wildKEV
6.3
23%
Nov 19
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Affected: before 18.1.1
CVE-2025-43526
9.8
1%
Dec 17
This issue was addressed with improved URL validation
Affected: before 26.2
CVE-2025-43343
9.8
1%
Sep 15
The issue was addressed with improved memory handling
Affected: before 26.0
CVE-2025-43342
9.8
1%
Sep 15
A correctness issue was addressed with improved checks
Affected: before 26.0
CVE-2025-30466
9.8
0%
May 29
This issue was addressed through improved state management
Affected: before 18.4
CVE-2025-24264
9.8
1%
Mar 31
The issue was addressed with improved memory handling
Affected: before 18.4
CVE-2025-24167
9.8
1%
Mar 31
This issue was addressed through improved state management
Affected: before 18.4
CVE-2024-54534
9.8
1%
Dec 12
The issue was addressed with improved memory handling
Affected: before 18.2
CVE-2023-40414
9.8
1%
Jan 10
A use-after-free issue was addressed with improved memory management
Affected: before 17.0
CVE-2023-28201
9.8
1%
May 8
This issue was addressed with improved state management
Affected: before 16.4
CVE-2022-32863
9.8
1%
Sep 20
A memory corruption issue was addressed with improved state management
Affected: before 15.6
CVE-2019-8749
9.8
1%
Oct 27
Multiple memory corruption issues were addressed with improved input validation
Affected: before 13.0.1
CVE-2020-9895
9.8
4%
Oct 16
A use after free issue was addressed with improved memory management
Affected: before 13.1.2
CVE-2020-9850
9.8
77%
Jun 9
A logic issue was addressed with improved restrictions
Affected: before 13.1.1
CVE-2018-4147
9.8
2%
Jan 11
In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with…
Affected: before 11.0.3
CVE-2017-17821
9.8
1%
Dec 21
WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have…
Affected: 46
CVE-2017-5949
9.8
2%
Apr 3
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and…
Affected: 22
CVE-2010-1205
9.8
43%
Jun 30
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG…
Affected: before 5.0.4
CVE-2024-4558
9.6
2%
May 7
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: before 17.6
CVE-2019-8562
9.6
1%
Dec 18
A memory corruption issue was addressed with improved validation
Affected: before 12.1
CVE-2016-4734
9.6
3%
Sep 25
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
Affected: before 10.0
CVE-2024-44206
9.3
0%
Oct 24
An issue in the handling of URL protocols was addressed with improved logic
Affected: before 17.6
CVE-2024-54542
9.1
1%
Jan 27
An authentication issue was addressed with improved state management
Affected: before 18.2
CVE-2026-112637
New
8.8
1%
Oct 26
A use-after-free issue was addressed with improved memory management
Affected: before 27.2
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)