Safari vulnerabilities

170 known vulnerabilities in Safari from Apple. 166 are rated high or critical, and 28 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  iOS: Out-of-bounds Read

  CVE-2022-32912Sep 20, 2022AppleEPSS 1.57%

  An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  iOS: Out-of-bounds Write

  CVE-2022-32886Sep 20, 2022AppleEPSS 1.99%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

• 9.8 Critical severity

  macOS: Out-of-bounds Write

  CVE-2022-32863Sep 20, 2022AppleEPSS 1.16%

  A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Apple iOS and macOS Out-of-Bounds Write Exploited

  CVE-2022-32893Aug 24, 2022AppleEPSS 10.5%

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware

• 8.8 High severity

  Apple iOS, iPadOS, and macOS Webkit Use-After-Free Exploited

  CVE-2022-22620Mar 18, 2022AppleEPSS 16.3%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary

• 8.8 High severity

  iOS and iPadOS: Use After Free

  CVE-2022-22590Mar 18, 2022AppleEPSS 1.55%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Apple Multiple Products WebKit Integer Overflow Exploited

  CVE-2021-30663Sep 8, 2021AppleEPSS 3.52%

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Apple Multiple Products WebKit Storage Use-After-Free Exploited

  CVE-2021-30661Sep 8, 2021AppleEPSS 4.49%

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code ex

• 7.8 High severity

  Apple Multiple Products Integer Overflow or Wraparound Exploited

  CVE-2021-30952Aug 24, 2021AppleEPSS 6.96%

  An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

• 8.8 High severity

  Apple Multiple Products Type Confusion Exploited

  CVE-2019-8506Dec 18, 2019AppleEPSS 16.2%

  A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code