p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости webkit2gtk · Страница 46

За последние 30 дней в webkit2gtk опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 960

  1. CVE-2017-2454

    Высокий · CVSS 8.8EPSS 6,74%Публичный эксплойтЕсть исправление

    CVE-2017-2454

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  2. CVE-2017-2447

    Высокий · CVSS 8.1EPSS 5,14%Публичный эксплойтЕсть исправление

    CVE-2017-2447

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  3. CVE-2017-2446

    Высокий · CVSS 8.8EPSS 8,26%Публичный эксплойтЕсть исправление

    CVE-2017-2446

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  4. CVE-2017-2445

    Средний · CVSS 6.1EPSS 4,27%Публичный эксплойтЕсть исправление

    CVE-2017-2445

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted frame objects.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  5. CVE-2017-2442

    Средний · CVSS 6.5EPSS 6,17%Публичный эксплойтЕсть исправление

    CVE-2017-2442

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  6. CVE-2017-2433

    Высокий · CVSS 8.8EPSS 1,85%Есть исправление

    CVE-2017-2433

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  7. CVE-2017-2424

    Средний · CVSS 6.5EPSS 1,68%Есть исправление

    CVE-2017-2424

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  8. CVE-2017-2419

    Высокий · CVSS 7.5EPSS 2,47%Есть исправление

    CVE-2017-2419

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspecified vectors.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  9. CVE-2017-2415

    Высокий · CVSS 8.8EPSS 3,12%Есть исправление

    CVE-2017-2415

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code by leveraging an unspecified "type confusion."

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  10. CVE-2017-2405

    Высокий · CVSS 8.8EPSS 1,83%Есть исправление

    CVE-2017-2405

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  11. CVE-2017-2396

    Высокий · CVSS 8.8EPSS 1,83%Есть исправление

    CVE-2017-2396

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  12. CVE-2017-2395

    Высокий · CVSS 8.8EPSS 1,83%Есть исправление

    CVE-2017-2395

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  13. CVE-2017-2394

    Высокий · CVSS 8.8EPSS 1,84%Есть исправление

    CVE-2017-2394

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  14. CVE-2017-2392

    Высокий · CVSS 7.8EPSS 1,24%Есть исправление

    CVE-2017-2392

    An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  15. CVE-2017-2386

    Средний · CVSS 6.5EPSS 1,7%Есть исправление

    CVE-2017-2386

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  16. CVE-2017-2377

    Высокий · CVSS 7.5EPSS 1,95%Есть исправление

    CVE-2017-2377

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and application crash) by leveraging a window-close action during a debugger-pause state.

    • Обновитесь до 2.14.6-1
    Опубликовано Обновлено
  17. CVE-2017-2376

    Высокий · CVSS 7.5EPSS 2,38%Есть исправление

    CVE-2017-2376

    An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

    • Обновитесь до 2.16.3-2
    Опубликовано Обновлено
  18. CVE-2017-2373

    Высокий · CVSS 8.8EPSS 6,07%Публичный эксплойтЕсть исправление

    CVE-2017-2373

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.14.4-1
    Опубликовано Обновлено
  19. CVE-2017-2371

    Средний · CVSS 6.5EPSS 5,77%Публичный эксплойтЕсть исправление

    CVE-2017-2371

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" component, which allows remote attackers to launch popups via a crafted web site.

    • Обновитесь до 2.14.4-1
    Опубликовано Обновлено
  20. CVE-2017-2369

    Высокий · CVSS 8.8EPSS 6,07%Публичный эксплойтЕсть исправление

    CVE-2017-2369

    An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

    • Обновитесь до 2.14.4-1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →