Multiple vulnerabilities in Apple Safari

Description

Multiple serious vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting, bypass security restrictions, obtain sensitive information oe execute arbitrary code.

Below is complete list of vulnerabilities:

1. Multiple vulnerabilities can be exploited remotely via specially designed HTML-page to spoof user interface;
2. Multiple vulnerabilities in the WebKit componenent can be exploited remotely to cause denial of service, execute arbitrary code and perform cross-site scripting;
3. A vulnerability in the WebKit Storage component can be exploited remotely to bypass security restrictions and possibly obtain sensitive information.

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Original advisories

• About the security content of Safari 11

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Apple-Safari

CVE list

• CVE-2017-7142
  high
• CVE-2017-7144
  warning
• CVE-2017-7081
  critical
• CVE-2017-7085
  high
• CVE-2017-7087
  critical
• CVE-2017-7089
  high
• CVE-2017-7090
  critical
• CVE-2017-7091
  critical
• CVE-2017-7092
  critical
• CVE-2017-7093
  critical
• CVE-2017-7094
  critical
• CVE-2017-7095
  critical
• CVE-2017-7096
  critical
• CVE-2017-7098
  critical
• CVE-2017-7099
  critical
• CVE-2017-7100
  critical
• CVE-2017-7102
  critical
• CVE-2017-7104
  critical
• CVE-2017-7106
  high
• CVE-2017-7107
  critical
• CVE-2017-7109
  high
• CVE-2017-7111
  critical
• CVE-2017-7117
  critical
• CVE-2017-7120
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com