https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-7157.htmlhttps://patchthecve.com/cve/CVE-2017-7157.htmlWed, 17 Jun 2026 01:23:46 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-7156.htmlhttps://patchthecve.com/cve/CVE-2017-7156.htmlWed, 17 Jun 2026 01:23:46 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13870.htmlhttps://patchthecve.com/cve/CVE-2017-13870.htmlWed, 17 Jun 2026 01:05:18 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13866.htmlhttps://patchthecve.com/cve/CVE-2017-13866.htmlWed, 17 Jun 2026 01:05:18 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13856.htmlhttps://patchthecve.com/cve/CVE-2017-13856.htmlWed, 17 Jun 2026 01:05:17 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13803.htmlhttps://patchthecve.com/cve/CVE-2017-13803.htmlWed, 17 Jun 2026 01:05:12 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13802.htmlhttps://patchthecve.com/cve/CVE-2017-13802.htmlWed, 17 Jun 2026 01:05:12 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13798.htmlhttps://patchthecve.com/cve/CVE-2017-13798.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13796.htmlhttps://patchthecve.com/cve/CVE-2017-13796.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13795.htmlhttps://patchthecve.com/cve/CVE-2017-13795.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13794.htmlhttps://patchthecve.com/cve/CVE-2017-13794.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13793.htmlhttps://patchthecve.com/cve/CVE-2017-13793.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13792.htmlhttps://patchthecve.com/cve/CVE-2017-13792.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13791.htmlhttps://patchthecve.com/cve/CVE-2017-13791.htmlWed, 17 Jun 2026 01:05:11 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13788.htmlhttps://patchthecve.com/cve/CVE-2017-13788.htmlWed, 17 Jun 2026 01:05:10 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13785.htmlhttps://patchthecve.com/cve/CVE-2017-13785.htmlWed, 17 Jun 2026 01:05:10 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13784.htmlhttps://patchthecve.com/cve/CVE-2017-13784.htmlWed, 17 Jun 2026 01:05:10 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-13783.htmlhttps://patchthecve.com/cve/CVE-2017-13783.htmlWed, 17 Jun 2026 01:05:10 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackershttps://patchthecve.com/cve/CVE-2017-7061.htmlhttps://patchthecve.com/cve/CVE-2017-7061.htmlWed, 17 Jun 2026 01:23:35 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7056.htmlhttps://patchthecve.com/cve/CVE-2017-7056.htmlWed, 17 Jun 2026 01:23:34 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7055.htmlhttps://patchthecve.com/cve/CVE-2017-7055.htmlWed, 17 Jun 2026 01:23:34 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7052.htmlhttps://patchthecve.com/cve/CVE-2017-7052.htmlWed, 17 Jun 2026 01:23:34 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7049.htmlhttps://patchthecve.com/cve/CVE-2017-7049.htmlWed, 17 Jun 2026 01:23:33 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7048.htmlhttps://patchthecve.com/cve/CVE-2017-7048.htmlWed, 17 Jun 2026 01:23:33 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7046.htmlhttps://patchthecve.com/cve/CVE-2017-7046.htmlWed, 17 Jun 2026 01:23:33 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7042.htmlhttps://patchthecve.com/cve/CVE-2017-7042.htmlWed, 17 Jun 2026 01:23:32 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7041.htmlhttps://patchthecve.com/cve/CVE-2017-7041.htmlWed, 17 Jun 2026 01:23:32 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7039.htmlhttps://patchthecve.com/cve/CVE-2017-7039.htmlWed, 17 Jun 2026 01:23:32 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7038.htmlhttps://patchthecve.com/cve/CVE-2017-7038.htmlWed, 17 Jun 2026 01:23:32 +0000MEDIUM 6.1: A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.https://patchthecve.com/cve/CVE-2017-7037.htmlhttps://patchthecve.com/cve/CVE-2017-7037.htmlWed, 17 Jun 2026 01:23:32 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7034.htmlhttps://patchthecve.com/cve/CVE-2017-7034.htmlWed, 17 Jun 2026 01:23:31 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7030.htmlhttps://patchthecve.com/cve/CVE-2017-7030.htmlWed, 17 Jun 2026 01:23:31 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7020.htmlhttps://patchthecve.com/cve/CVE-2017-7020.htmlWed, 17 Jun 2026 01:23:30 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7019.htmlhttps://patchthecve.com/cve/CVE-2017-7019.htmlWed, 17 Jun 2026 01:23:29 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page Loading" component. It allohttps://patchthecve.com/cve/CVE-2017-7018.htmlhttps://patchthecve.com/cve/CVE-2017-7018.htmlWed, 17 Jun 2026 01:23:29 +0000HIGH 8.8: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote atthttps://patchthecve.com/cve/CVE-2017-7006.htmlhttps://patchthecve.com/cve/CVE-2017-7006.htmlWed, 17 Jun 2026 01:23:28 +0000MEDIUM 5.3: An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel attack to bypass the Same Origin Policy and obtaihttps://patchthecve.com/cve/CVE-2016-9643.htmlhttps://patchthecve.com/cve/CVE-2016-9643.htmlWed, 17 Jun 2026 00:56:23 +0000HIGH 7.5: The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenthesis and dollar) followed by {-2,16} and a large number of +) (plus close parenthesis).https://patchthecve.com/cve/CVE-2016-9642.htmlhttps://patchthecve.com/cve/CVE-2016-9642.htmlWed, 17 Jun 2026 00:56:23 +0000MEDIUM 5.5: JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.https://patchthecve.com/cve/CVE-2016-4592.htmlhttps://patchthecve.com/cve/CVE-2016-4592.htmlWed, 17 Jun 2026 00:47:51 +0000MEDIUM 6.5: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.https://patchthecve.com/cve/CVE-2016-4591.htmlhttps://patchthecve.com/cve/CVE-2016-4591.htmlWed, 17 Jun 2026 00:47:51 +0000HIGH 7.5: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.https://patchthecve.com/cve/CVE-2016-4590.htmlhttps://patchthecve.com/cve/CVE-2016-4590.htmlWed, 17 Jun 2026 00:47:51 +0000MEDIUM 5.4: WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.https://patchthecve.com/cve/CVE-2016-4589.htmlhttps://patchthecve.com/cve/CVE-2016-4589.htmlWed, 17 Jun 2026 00:47:51 +0000HIGH 8.8: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.https://patchthecve.com/cve/CVE-2016-4588.htmlhttps://patchthecve.com/cve/CVE-2016-4588.htmlWed, 17 Jun 2026 00:47:50 +0000HIGH 8.8: WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.https://patchthecve.com/cve/CVE-2016-4587.htmlhttps://patchthecve.com/cve/CVE-2016-4587.htmlWed, 17 Jun 2026 00:47:50 +0000MEDIUM 6.5: WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site.https://patchthecve.com/cve/CVE-2016-4585.htmlhttps://patchthecve.com/cve/CVE-2016-4585.htmlWed, 17 Jun 2026 00:47:50 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari.https://patchthecve.com/cve/CVE-2016-4583.htmlhttps://patchthecve.com/cve/CVE-2016-4583.htmlWed, 17 Jun 2026 00:47:50 +0000LOW 3.1: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.https://patchthecve.com/cve/CVE-2014-1270.htmlhttps://patchthecve.com/cve/CVE-2014-1270.htmlWed, 17 Jun 2026 00:04:37 +0000MEDIUM 6.8: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1269.https://patchthecve.com/cve/CVE-2014-1269.htmlhttps://patchthecve.com/cve/CVE-2014-1269.htmlWed, 17 Jun 2026 00:04:37 +0000MEDIUM 6.8: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1268 and CVE-2014-1270.https://patchthecve.com/cve/CVE-2014-1268.htmlhttps://patchthecve.com/cve/CVE-2014-1268.htmlWed, 17 Jun 2026 00:04:37 +0000MEDIUM 6.8: WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-1270.https://patchthecve.com/cve/CVE-2013-5228.htmlhttps://patchthecve.com/cve/CVE-2013-5228.htmlTue, 16 Jun 2026 23:58:32 +0000MEDIUM 6.8: WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1.