Vulnerabilities > Apple > Safari > 9.0.3

DATE CVE VULNERABILITY TITLE RISK
2016-03-24 CVE-2016-1772 Information Exposure vulnerability in Apple Safari
The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.
network
apple CWE-200
4.3
2016-03-24 CVE-2016-1771 Data Processing Errors vulnerability in Apple Safari
The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site.
network
apple CWE-19
7.1
2016-03-24 CVE-2016-1762 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
5.8
2016-03-24 CVE-2009-2197 Data Processing Errors vulnerability in Apple Safari
Apple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog.
network
apple CWE-19
4.3