KLA11146 Multiple vulnerabilities in Apple Safari

Multiple serious vulnerabilities have been found in Apple Safari. Vulnerabilities in the WebKit componenent can be exploited remotely via crafted web site to execute arbitrary code.

Original advisories

About the security content of Safari 11.0.1

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Apple-Safari

CVE list

CVE-2017-13784 high

CVE-2017-13785 high

CVE-2017-13791 high

CVE-2017-13792 high

CVE-2017-13794 high

CVE-2017-13795 high

CVE-2017-13796 high

CVE-2017-13797 high

CVE-2017-13798 high

CVE-2017-13802 high

CVE-2017-13783 high

Solution

Update to the latest version

Download Safari

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Safari versions earlier than 11.0.1