Vulnerabilities > Apple > Safari > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-02-20 CVE-2017-2350 Information Exposure vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple webkitgtk CWE-200
6.5
2017-02-20 CVE-2016-7650 Cross-site Scripting vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
high complexity
apple CWE-79
4.7
2017-02-20 CVE-2016-7623 Information Exposure vulnerability in Apple Iphone OS
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
6.5
2017-02-20 CVE-2016-7599 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
6.5
2017-02-20 CVE-2016-7598 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
6.5
2017-02-20 CVE-2016-7592 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
4.3
2017-02-20 CVE-2016-7586 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
6.5
2017-02-20 CVE-2016-4613 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-200
6.5
2016-09-25 CVE-2016-4763 Cryptographic Issues vulnerability in Apple Itunes
WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
network
high complexity
apple CWE-310
6.8
2016-09-25 CVE-2016-4760 Improper Access Control vulnerability in Apple Itunes
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support.
network
low complexity
apple CWE-284
6.5