GCVE - cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Safari (`7b60333a-f34d-5433-b88c-da9f1c4b350f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-44309`	vulnerable	2026-06-08 06:45:53.975304	Details available A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems. Published: 2024-11-19T23:43:55.493Z Updated: 2026-04-02T18:26:41.434Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/121752 https://support.apple.com/en-us/121753 https://support.apple.com/en-us/121754 https://support.apple.com/en-us/121755 https://support.apple.com/en-us/121756	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44308`	vulnerable	2026-06-08 06:45:53.972526	Details available The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems. Published: 2024-11-19T23:43:50.135Z Updated: 2026-04-02T18:23:18.275Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/121752 https://support.apple.com/en-us/121753 https://support.apple.com/en-us/121754 https://support.apple.com/en-us/121755 https://support.apple.com/en-us/121756	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27850`	vulnerable	2026-06-08 06:33:24.801072	Details available This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A maliciously crafted webpage may be able to fingerprint the user. Published: 2024-06-10T20:56:45.824Z Updated: 2026-04-02T18:24:27.577Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/120896 https://support.apple.com/en-us/120903 https://support.apple.com/en-us/120905 https://support.apple.com/en-us/120906	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27808`	vulnerable	2026-06-08 06:31:29.299316	Details available The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution. Published: 2024-06-10T20:56:38.609Z Updated: 2026-04-02T18:11:50.420Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/120896 https://support.apple.com/en-us/120901 https://support.apple.com/en-us/120902 https://support.apple.com/en-us/120903 https://support.apple.com/en-us/120905	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23263`	vulnerable	2026-06-08 06:29:37.153598	Details available A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced. Published: 2024-03-08T01:36:19.295Z Updated: 2026-04-02T18:26:35.629Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/120880 https://support.apple.com/en-us/120881 https://support.apple.com/en-us/120882 https://support.apple.com/en-us/120883 https://support.apple.com/en-us/120893	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23246`	vulnerable	2026-06-08 06:29:37.127677	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-15138`	not_vulnerable	2026-06-08 05:19:25.355653	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15499`	not_vulnerable	2026-06-08 05:12:57.492795	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-4233`	vulnerable	2026-06-08 05:11:41.811747	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8960`	not_vulnerable	2026-06-08 05:07:05.786441	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4000`	vulnerable	2026-06-08 05:06:38.988386	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0650`	vulnerable	2026-06-08 04:52:03.761248	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.