safari Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/safari/ Sun, 26 Feb 2023 09:10:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png safari Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/safari/ 32 32 CVE-2008-3529 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3529/ Sun, 26 Feb 2023 09:10:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3529/ Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

The post CVE-2008-3529 appeared first on CVE Vulnerability.

]]> Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name.

The post CVE-2008-3529 appeared first on CVE Vulnerability.

]]> CVE-2020-9915 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-9915/ Sun, 26 Feb 2023 06:43:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-9915/ An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from […]

The post CVE-2020-9915 appeared first on CVE Vulnerability.

]]> An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

The post CVE-2020-9915 appeared first on CVE Vulnerability.

]]> CVE-2020-9925 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-9925/ Sun, 26 Feb 2023 06:43:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-9925/ A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

The post CVE-2020-9925 appeared first on CVE Vulnerability.

]]> A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing maliciously crafted web content may lead to universal cross site scripting.

The post CVE-2020-9925 appeared first on CVE Vulnerability.

]]> CVE-2022-46696 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46696/ Thu, 23 Feb 2023 05:21:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46696/ A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46696 appeared first on CVE Vulnerability.

]]> A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46696 appeared first on CVE Vulnerability.

]]> CVE-2022-46699 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46699/ Thu, 23 Feb 2023 05:21:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46699/ A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46699 appeared first on CVE Vulnerability.

]]> A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46699 appeared first on CVE Vulnerability.

]]> CVE-2022-46700 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46700/ Thu, 23 Feb 2023 05:21:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46700/ A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46700 appeared first on CVE Vulnerability.

]]> A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46700 appeared first on CVE Vulnerability.

]]> CVE-2022-46689 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46689/ Thu, 23 Feb 2023 05:21:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46689/ A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

The post CVE-2022-46689 appeared first on CVE Vulnerability.

]]> A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

The post CVE-2022-46689 appeared first on CVE Vulnerability.

]]> CVE-2022-46691 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46691/ Thu, 23 Feb 2023 05:21:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-46691/ A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46691 appeared first on CVE Vulnerability.

]]> A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

The post CVE-2022-46691 appeared first on CVE Vulnerability.

]]> CVE-2022-42852 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-42852/ Thu, 23 Feb 2023 05:21:04 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-42852/ The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may result in the disclosure of process memory.

The post CVE-2022-42852 appeared first on CVE Vulnerability.

]]> The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may result in the disclosure of process memory.

The post CVE-2022-42852 appeared first on CVE Vulnerability.

]]> CVE-2022-42856 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-42856/ Thu, 23 Feb 2023 05:21:04 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-42856/ A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against […]

The post CVE-2022-42856 appeared first on CVE Vulnerability.

]]> A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

The post CVE-2022-42856 appeared first on CVE Vulnerability.

]]>