SA
Product
Safari
On CISA KEVExploited in the wild
1,729
CVEs
27
On KEV
10.0
Max CVSS
35
New 30D
Severity mix
Critical 23High 474Medium 3Low 0
Watch
Add Safari to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-2366 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.2 |
| CVE-2017-2362 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.2 |
| CVE-2017-2356 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.3 |
| CVE-2017-2355 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.3 |
| CVE-2017-2354 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.3 |
| CVE-2016-7656 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7654 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7652 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7649 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7648 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7646 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7645 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7642 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7641 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7640 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7639 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7635 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7632 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7611 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7610 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7589 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7587 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-7578 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.1 |
| CVE-2016-4764 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 9.1.3 |
| CVE-2016-4692 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: through 10.0.1 |
| CVE-2016-4677 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.1 |
| CVE-2016-4666 | 8.8 | Feb 20 | An issue was discovered in certain Apple products Affected: before 10.0.1 |
| CVE-2016-4769 | 8.8 | Sep 25 | WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and… Affected: through 9.1.3 |
| CVE-2016-4768 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4767 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4766 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4765 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4762 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a… Affected: through 9.1.3 |
| CVE-2016-4759 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: before 10.0 |
| CVE-2016-4737 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 10.0 |
| CVE-2016-4735 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4731 | 8.8 | Sep 25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a… Affected: through 9.1.3 |
| CVE-2016-4730 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4729 | 8.8 | Sep 25 | WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a… Affected: through 9.1.3 |
| CVE-2016-4728 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute… Affected: before 10.0 |
| CVE-2016-4611 | 8.8 | Sep 25 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: before 10.0 |
| CVE-2016-4624 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4623 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4622 | 8.8 | Jul 22 | WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via… Affected: before 9.1.2 |
| CVE-2016-4586 | 8.8 | Jul 22 | WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site Affected: before 9.1.2 |
| CVE-2016-4584 | 8.8 | Jul 22 | The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 9.1.2 |
| CVE-2016-1859 | 8.8 | May 20 | The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of… Affected: before 9.1.1 |
| CVE-2016-1857 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1856 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
| CVE-2016-1855 | 8.8 | May 20 | WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: before 9.1.1 |
The 500 most important CVEs for this product (exploited first, then by severity)