SA
Product
Safari
On CISA KEVExploited in the wild
1,725
CVEs
27
On KEV
10.0
Max CVSS
35
New 30D
Severity mix
Critical 23High 474Medium 3Low 0
Watch
Add Safari to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4692 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-4677 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.1 |
| CVE-2016-4666 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.1 |
| CVE-2016-4769 | 8.8 | Sep 25 | WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: through 9.1.3 |
| CVE-2016-4768 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4767 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4766 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4765 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4762 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a… Affected: through 9.1.3 |
| CVE-2016-4759 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4737 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 10.0 |
| CVE-2016-4735 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4731 | 8.8 | Sep 25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a… Affected: through 9.1.3 |
| CVE-2016-4730 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4729 | 8.8 | Sep 25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a… Affected: through 9.1.3 |
| CVE-2016-4728 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute… Affected: before 10.0 |
| CVE-2016-4611 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4624 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4623 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4622 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4586 | 8.8 | Jul 22 | WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site Affected: before 9.1.2 |
| CVE-2016-4584 | 8.8 | Jul 22 | The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 9.1.2 |
| CVE-2016-1859 | 8.8 | May 20 | The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 9.1.1 |
| CVE-2016-1857 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1856 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1855 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1854 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1783 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 9.1 |
| CVE-2016-1778 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site Affected: through 9.0.3 |
| CVE-2016-1727 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.0.3 |
| CVE-2016-1726 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2016-1725 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2016-1724 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.0.3 |
| CVE-2016-1723 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2010-1822 | 8.8 | Oct 4 | WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows… Affected: before 4.1.3; 5.0 before 5.0.3 |
| CVE-2010-0050 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML… Affected: before 4.0.5 |
| CVE-2010-0048 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 4.0.4; 4.0; 4.0; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2010-0047 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors… Affected: through 4.0.4; 4.0; 4.0.0b; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2022-32892 | 8.6 | Nov 1 | An access issue was addressed with improvements to the sandbox Affected: before 16.0 |
| CVE-2018-4269 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 11.1.2 |
| CVE-2026-64713 | 8.1 | Jul 27 | This issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-64719 | 8.1 | Jul 27 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43735 | 8.1 | Jun 29 | The issue was addressed with improved checks Affected: before 26.5.2 |
| CVE-2026-28907 | 8.1 | May 11 | The issue was addressed with improved input validation Affected: before 26.5 |
| CVE-2025-43480 | 8.1 | Nov 4 | The issue was addressed with improved checks Affected: before 26.1 |
| CVE-2025-24180 | 8.1 | Mar 31 | The issue was addressed with improved input validation Affected: before 18.4 |
| CVE-2018-4319 | 8.1 | Apr 3 | A cross-origin issue existed with "iframe" elements Affected: before 12 |
| CVE-2018-4311 | 8.1 | Apr 3 | The issue was addressed by removing origin information Affected: before 12 |
| CVE-2017-2447 | 8.1 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.0.3 |
| CVE-2017-2389 | 8.1 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.0.3 |
The 500 most important CVEs for this product (exploited first, then by severity)