p PatchFirst

PatchFirst · Latest vulnerabilities

qtwebkit-source vulnerabilities · Page 34

Vulnerabilities published for qtwebkit-source in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 1324

  1. CVE-2017-2539

    High · CVSS 8.8EPSS 1.8%No fix published

    CVE-2017-2539

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  2. CVE-2017-2538

    High · CVSS 8.8EPSS 1.83%No fix published

    CVE-2017-2538

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  3. CVE-2017-2536

    High · CVSS 8.8EPSS 10.48%Public exploitNo fix published

    CVE-2017-2536

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  4. CVE-2017-2531

    High · CVSS 8.8EPSS 6.57%Public exploitNo fix published

    CVE-2017-2531

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  5. CVE-2017-2530

    High · CVSS 8.8EPSS 1.62%No fix published

    CVE-2017-2530

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  6. CVE-2017-2528

    Medium · CVSS 6.1EPSS 2.02%Public exploitNo fix published

    CVE-2017-2528

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with cached frames.

    Published Updated
  7. CVE-2017-2526

    High · CVSS 8.8EPSS 1.51%No fix published

    CVE-2017-2526

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  8. CVE-2017-2525

    High · CVSS 8.8EPSS 1.57%No fix published

    CVE-2017-2525

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  9. CVE-2017-2521

    High · CVSS 8.8EPSS 5.9%Public exploitNo fix published

    CVE-2017-2521

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  10. CVE-2017-2515

    High · CVSS 8.8EPSS 4.68%Public exploitNo fix published

    CVE-2017-2515

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  11. CVE-2017-2514

    High · CVSS 8.8EPSS 6.04%Public exploitNo fix published

    CVE-2017-2514

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  12. CVE-2017-2510

    Medium · CVSS 6.1EPSS 3.92%Public exploitNo fix published

    CVE-2017-2510

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with pageshow events.

    Published Updated
  13. CVE-2017-2508

    Medium · CVSS 6.1EPSS 3.02%Public exploitNo fix published

    CVE-2017-2508

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with container nodes.

    Published Updated
  14. CVE-2017-2506

    High · CVSS 8.8EPSS 1.46%No fix published

    CVE-2017-2506

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  15. CVE-2017-2505

    High · CVSS 8.8EPSS 1.57%No fix published

    CVE-2017-2505

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  16. CVE-2017-2504

    Medium · CVSS 6.1EPSS 3.35%Public exploitNo fix published

    CVE-2017-2504

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that improperly interacts with WebKit Editor commands.

    Published Updated
  17. CVE-2017-2499

    High · CVSS 7.8EPSS 1.04%No fix published

    CVE-2017-2499

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app.

    Published Updated
  18. CVE-2017-2496

    High · CVSS 8.8EPSS 1.8%No fix published

    CVE-2017-2496

    An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    Published Updated
  19. CVE-2017-5949

    Critical · CVSS 9.8EPSS 1.82%No fix published

    CVE-2017-5949

    JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory locations, related to jit/ThunkGenerators.cpp, llint/LowLevelInterpreter32_64.asm, and llint/LowLevelInterpreter64.asm.

    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →