SA
Product
Safari
On CISA KEVExploited in the wild
1,728
CVEs
27
On KEV
10.0
Max CVSS
35
New 30D
Severity mix
Critical 23High 474Medium 3Low 0
Watch
Add Safari to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1854 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1783 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 9.1 |
| CVE-2016-1778 | 8.8 | Mar 24 | WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site Affected: through 9.0.3 |
| CVE-2016-1727 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.0.3 |
| CVE-2016-1726 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2016-1725 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2016-1724 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.0.3 |
| CVE-2016-1723 | 8.8 | Feb 1 | WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 9.0.2 |
| CVE-2010-1822 | 8.8 | Oct 4 | WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows… Affected: before 4.1.3; 5.0 before 5.0.3 |
| CVE-2010-0050 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML… Affected: before 4.0.5 |
| CVE-2010-0048 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… Affected: through 4.0.4; 4.0; 4.0; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2010-0047 | 8.8 | Mar 15 | Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors… Affected: through 4.0.4; 4.0; 4.0.0b; 4.0.1; 4.0.2; 4.0.3 |
| CVE-2022-32892 | 8.6 | Nov 1 | An access issue was addressed with improvements to the sandbox Affected: before 16.0 |
| CVE-2018-4269 | 8.6 | Apr 3 | A memory corruption issue was addressed with improved input validation Affected: before 11.1.2 |
| CVE-2026-64713 | 8.1 | Jul 27 | This issue was addressed with improved checks Affected: before 26.6 |
| CVE-2026-64719 | 8.1 | Jul 27 | An out-of-bounds access issue was addressed with improved bounds checking Affected: before 26.6 |
| CVE-2026-43735 | 8.1 | Jun 29 | The issue was addressed with improved checks Affected: before 26.5.2 |
| CVE-2026-28907 | 8.1 | May 11 | The issue was addressed with improved input validation Affected: before 26.5 |
| CVE-2025-43480 | 8.1 | Nov 4 | The issue was addressed with improved checks Affected: before 26.1 |
| CVE-2025-24180 | 8.1 | Mar 31 | The issue was addressed with improved input validation Affected: before 18.4 |
| CVE-2018-4319 | 8.1 | Apr 3 | A cross-origin issue existed with "iframe" elements Affected: before 12 |
| CVE-2018-4311 | 8.1 | Apr 3 | The issue was addressed by removing origin information Affected: before 12 |
| CVE-2017-2447 | 8.1 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.0.3 |
| CVE-2017-2389 | 8.1 | Apr 2 | An issue was discovered in certain Apple products Affected: through 10.0.3 |
The 500 most important CVEs for this product (exploited first, then by severity)