SA
Product
Safari
On CISA KEVExploited in the wild
1,725
CVEs
27
On KEV
10.0
Max CVSS
35
New 30D
Severity mix
Critical 23High 474Medium 3Low 0
Watch
Add Safari to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24201 In wildKEV | 10.0 | Mar 11 | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability Affected: before 18.3.1 |
| CVE-2025-43526 | 9.8 | Dec 17 | This issue was addressed with improved URL validation Affected: before 26.2 |
| CVE-2025-43343 | 9.8 | Sep 15 | The issue was addressed with improved memory handling Affected: before 26.0 |
| CVE-2025-43342 | 9.8 | Sep 15 | A correctness issue was addressed with improved checks Affected: before 26.0 |
| CVE-2025-30466 | 9.8 | May 29 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2025-24264 | 9.8 | Mar 31 | The issue was addressed with improved memory handling Affected: before 18.4 |
| CVE-2025-24167 | 9.8 | Mar 31 | This issue was addressed through improved state management Affected: before 18.4 |
| CVE-2024-54534 | 9.8 | Dec 12 | The issue was addressed with improved memory handling Affected: before 18.2 |
| CVE-2023-40414 | 9.8 | Jan 10 | A use-after-free issue was addressed with improved memory management Affected: before 17.0 |
| CVE-2023-28201 | 9.8 | May 8 | This issue was addressed with improved state management Affected: before 16.4 |
| CVE-2022-32863 | 9.8 | Sep 20 | A memory corruption issue was addressed with improved state management Affected: before 15.6 |
| CVE-2019-8749 | 9.8 | Oct 27 | Multiple memory corruption issues were addressed with improved input validation Affected: before 13.0.1 |
| CVE-2020-9895 | 9.8 | Oct 16 | A use after free issue was addressed with improved memory management Affected: before 13.1.2 |
| CVE-2020-9850 | 9.8 | Jun 9 | A logic issue was addressed with improved restrictions Affected: before 13.1.1 |
| CVE-2018-4147 | 9.8 | Jan 11 | In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption issues exist and were addressed with… Affected: before 11.0.3 |
| CVE-2017-17821 | 9.8 | Dec 21 | WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have… Affected: 46 |
| CVE-2017-5949 | 9.8 | Apr 3 | JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and… Affected: 22 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: before 5.0.4 |
| CVE-2024-4558 | 9.6 | May 7 | Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 17.6 |
| CVE-2019-8562 | 9.6 | Dec 18 | A memory corruption issue was addressed with improved validation Affected: before 12.1 |
| CVE-2016-4734 | 9.6 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2024-44206 | 9.3 | Oct 24 | An issue in the handling of URL protocols was addressed with improved logic Affected: before 17.6 |
| CVE-2024-54542 | 9.1 | Jan 27 | An authentication issue was addressed with improved state management Affected: before 18.2 |
Showing 23
The 500 most important CVEs for this product (exploited first, then by severity)