Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple iOS and iPadOSInfoleak

Risk 38
Severity
6.5
Infoleak
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

WebKit. A validation issue existed in element handling. This issue was addressed through improved validation.

1 / 2
First published (updated )
CVE-2017-2480

Apple macOS Big SurUse After Free

Risk 78
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A use after free issue was addressed with improved memory management.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2020-9947

Apple macOS Big SurInput Validation, XSS

Risk 39
Severity
6.1
Input Validation, XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An input validation issue was addressed with improved input validation.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1825

Apple macOS Big SurUse After Free

Risk 69
Severity
7.8
Use After Free
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A use after free issue was addressed with improved memory management.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2020-27918

Apple tvOSInput Validation, Double Free, Integer Overflow, Use After Free, Race Condition

Risk 33
Severity
5.5
Input Validation, Double Free, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

1 / 52
First published (updated )
CVE-2022-46692

Apple tvOSInput Validation, Double Free, Integer Overflow, Use After Free, Race Condition

Risk 39
Severity
6.5
Input Validation, Double Free, Integer Overflow, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.

1 / 55
First published (updated )
CVE-2022-46698

debian/webkit2gtkInput Validation, XSS

Risk 51
Severity
7.1
Input Validation, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

A flaw was found in WebKitGTK. An input validation issue was addressed with improved input validation. Processing maliciously crafted web content may lead to a cross site scripting attack.

Reference: https://webkitgtk.org/security/WSA-2020-0008.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2020-9952

debian/webkit2gtkUse After Free

Risk 80
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK. An use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

Reference: https://webkitgtk.org/security/WSA-2020-0008.html

1 / 5
Source: Red Hat
First published (updated )
CVE-2020-9951

debian/webkit2gtkInput Validation

Risk 80
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

A flaw was found in WebKitGTK. Processing maliciously crafted web content may lead to a cross site scripting attack. Description: An input validation issue was addressed with improved input validation.

Reference: https://webkitgtk.org/security/WSA-2020-0008.html

1 / 5
Source: Red Hat
First published (updated )
CVE-2020-9983

redhat/webkitgtkInput Validation

Risk 23
Severity
4.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-9894

redhat/webkitgtkWebKit. An access issue existed in Content Security Policy.  This issue was addressed with improved …

Risk 38
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An access issue existed in Content Security Policy. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. Versions affected: WebKitGTK before 2.28.4 and WPE WebKit before 2.28.4.

1 / 3
Source: Red Hat
First published (updated )
CVE-2020-9915

redhat/webkitgtkXSS

Risk 39
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-9925

redhat/webkitgtkUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-9893

redhat/webkitgtkUse After Free

Risk 88
Severity
9.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

1 / 3
Source: MITRE
First published (updated )
CVE-2020-9895

redhat/webkitgtkCommand Injection

Risk 70
Severity
7.8
Command Injection
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A command injection issue existed in Web Inspector. Copying a URL from Web Inspector may lead to command injection. Versions affected: WebKitGTK before 2.28.4 and WPE WebKit before 2.28.4.

References:

https://webkitgtk.org/security/WSA-2020-0007.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2020-9862

redhat/webkitgtkXSS

Risk 52
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross site scripting.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9805

redhat/webkitgtkLast updated 24 July 2024

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9802

debian/webkit2gtkLast updated 24 July 2024

Risk 89
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. A remote attacker may be able to cause arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9850

redhat/webkitgtkInput Validation, XSS

Risk 52
Severity
7.1
Input Validation, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to a cross site scripting attack.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9843

redhat/webkitgtkInput Validation

Risk 80
Severity
8.8
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9803

redhat/webkitgtkWebKit. A memory corruption issue was addressed with improved state management.

Risk 81
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Ubuntu
First published (updated )
CVE-2020-9806

redhat/webkitgtkLast updated 24 July 2024

Risk 80
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 4
Source: Launchpad
First published (updated )
CVE-2020-9807

Apple tvOSInput Validation

Risk 52
Severity
7.1
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.

1 / 2
First published (updated )
CVE-2020-36521

Apple tvOSInput Validation, Integer Overflow

Risk 71
Severity
7.8
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved restrictions.

1 / 18
Source: Apple
First published (updated )
CVE-2022-46693

iCloud for WindowsBuffer Overflow

Risk 77
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

First published (updated )
CVE-2017-2530

Apple tvOSWebKit. A memory consumption issue was addressed with improved memory handling.

Risk 44
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.

1 / 2
First published (updated )
CVE-2018-4474

Apple macOS High SierraNull Pointer Dereference

Risk 69
Severity
7.8
Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

libxml2. A null pointer dereference was addressed with improved validation.

1 / 6
First published (updated )
CVE-2018-4302

redhat/webkitgtkWebKit. Multiple memory corruption issues were addressed with improved memory handling.

Risk 82
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK before 2.26.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References:

https://www.openwall.com/lists/oss-security/2020/01/23/2 https://webkitgtk.org/security/WSA-2020-0001.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2019-8835

redhat/webkitgtkWebKit. Multiple memory corruption issues were addressed with improved memory handling.

Risk 82
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK before 2.26.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References:

https://www.openwall.com/lists/oss-security/2020/01/23/2 https://webkitgtk.org/security/WSA-2020-0001.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2019-8844

redhat/webkitgtkUse After Free

Risk 82
Severity
9.3
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK before 2.26.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References:

https://www.openwall.com/lists/oss-security/2020/01/23/2 https://webkitgtk.org/security/WSA-2020-0001.html

1 / 3
Source: Red Hat
First published (updated )
CVE-2019-8846

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203