Vulnerabilities > Apple > Safari > 18

DATE CVE VULNERABILITY TITLE RISK
2017-04-03 CVE-2016-10226 Out-of-bounds Read vulnerability in Apple Safari 18
JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.
network
low complexity
apple CWE-125
5.0
2017-04-03 CVE-2016-10222 Improper Input Validation vulnerability in Apple Safari 18
runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (segmentation violation and application crash) via crafted JavaScript code that triggers a "type confusion" in the JSON.stringify function.
network
low complexity
apple CWE-20
5.0