Summary
Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Spoofing-Angriffe durchzuführen, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Speicherbeschädigungen durchzuführen, was möglicherweise zur Ausführung von beliebigem Code führen kann.
Product
Safari ist der auf Apple Geräten eingesetzte Web Browser.
Vulnerabilities 21
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…
-
High 8.1
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…
-
High 7.5
A privacy issue was addressed by removing sensitive data. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1,…
-
Medium 6.5
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Taho…
-
Medium 6.5
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …
-
Medium 4.3
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.…
-
Medium 4.3
Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and …
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, ma…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…
-
Medium 4.3
A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadO…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and …
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…
-
Medium 4.3
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 an…
-
Medium 4.3
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2…
-
Medium 4.3
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 1…
-
Medium 4.3
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.…
-
Medium 4.3
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 26.1, …
Revision history
-
#3
Referenz(en) aufgenommen: ZDI-25-1007, ZDI-CAN-27825, ZDI-25-1010, ZDI-CAN-27991, ZDI-25-1011, ZDI-CAN-28039
-
#2
Referenz(en) aufgenommen: EUVD-2025-37679, EUVD-2025-37689
-
#1
Initiale Fassung
References
-
Apple Security Advisory 125640 vom 2025-11-03
https://support.apple.com/en-us/125640