Multiple vulnerabilities in Apple Safari

Описание

Multiple serious vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting, bypass security restrictions, obtain sensitive information oe execute arbitrary code.

Below is complete list of vulnerabilities:

1. Multiple vulnerabilities can be exploited remotely via specially designed HTML-page to spoof user interface;
2. Multiple vulnerabilities in the WebKit componenent can be exploited remotely to cause denial of service, execute arbitrary code and perform cross-site scripting;
3. A vulnerability in the WebKit Storage component can be exploited remotely to bypass security restrictions and possibly obtain sensitive information.

NB: Not every vulnerability already has CVSS rating, so cumulative CVSS rating can be not representative.

Первичный источник обнаружения

• About the security content of Safari 11
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Список CVE

• CVE-2017-7142
  high
• CVE-2017-7144
  warning
• CVE-2017-7081
  critical
• CVE-2017-7085
  high
• CVE-2017-7087
  critical
• CVE-2017-7089
  high
• CVE-2017-7090
  critical
• CVE-2017-7091
  critical
• CVE-2017-7092
  critical
• CVE-2017-7093
  critical
• CVE-2017-7094
  critical
• CVE-2017-7095
  critical
• CVE-2017-7096
  critical
• CVE-2017-7098
  critical
• CVE-2017-7099
  critical
• CVE-2017-7100
  critical
• CVE-2017-7102
  critical
• CVE-2017-7104
  critical
• CVE-2017-7106
  high
• CVE-2017-7107
  critical
• CVE-2017-7109
  high
• CVE-2017-7111
  critical
• CVE-2017-7117
  critical
• CVE-2017-7120
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com