Export limit exceeded: 425910 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 17087 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,087

Export CSV
CVE-2021-30884

webkitgtk: CSS compositing issue leading to revealing of the browsing history

The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.

CVSS 3.1 · 4.7 Medium EPSS 1.1% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 4 more
CVE-2021-30851

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 1 more
Products
Ipados Iphone Os Macos and 7 more
CVE-2021-30849

webkitgtk: Multiple memory corruption issue leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Itunes and 6 more
CVE-2021-30848

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 3 more
CVE-2021-30846

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 1 more
Products
Ipados Iphone Os Macos and 7 more
CVE-2021-30836

webkitgtk: Out-of-bounds read leading to memory disclosure

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30823

webkitgtk: Logic issue leading to HSTS bypass

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30818

webkitgtk: Type confusion issue leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30809

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30799

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Apple Redhat
Products
Iphone Os Mac Os X Macos and 2 more
CVE-2021-30797

webkitgtk: Insufficient checks leading to arbitrary code execution

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30795

webkitgtk: Use-after-free leading to arbitrary code execution

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Apple Redhat
Products
Iphone Os Macos Safari and 4 more
CVE-2021-30758

webkitgtk: Type confusion leading to arbitrary code execution

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Apple Redhat
Products
Iphone Os Macos Safari and 4 more
CVE-2021-30749

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30744

webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30734

webkitgtk: Memory corruptions leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30720

webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers.

CVSS 3.1 · 5.4 Medium EPSS 1.4% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30689

webkitgtk: Logic issue leading to universal cross site scripting attack

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more
CVE-2021-30682

webkitgtk: Logic issue leading to leak of sensitive user information

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 5 more