Search: “Safari”

815 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 259 Exploit / PoC 195 Malware 117 Phishing & fraud 57 Ransomware 44 Industry 41 Data breach 27 Policy & legal 26 Threat actor 13 Research 8 AI tools & infra 6 Tools 6 AI industry 6 AI safety & security 6

SeverityAll critical 370 high 123 medium 204 low 96 info 22

LINKEDIN BROWSERGATE

Security AffairsApr 27, 13:30 UTC · Apr 27, 2026Data breach

The Apple Security Update Review for September 2026

Apple's September 2026 updates patch 45+ flaws, including a 9.8 Screen Sharing authentication bypass (CVE-2026-65400) already listed in CISA's KEV.

ZDI's review of Apple's September 2026 security updates catalogs dozens of CVEs across macOS, iOS, iPadOS, watchOS and other platforms. CVE-2026-65400 (CVSS 9.8) lets a network attacker authenticate to Screen Sharing Server without valid credentials and is flagged as KEV, while CVE-2026-65414 (CVSS 9.8) enables remote code execution via Bluetooth. The set also includes 8.8-rated memory corruption flaws in WebKit, WebRTC, CUPS, ImageIO and the kernel, plus sandbox escapes, privilege escalations to root, and arbitrary code execution via crafted files.

Zero Day Initiative BlogSep 16, 19:58 UTC · 9h agoVulnerability in the wildCVE-2026-65400 CVE-2026-65414 CVE-2026-43692+27 CVEs

macOS HM Surf flaw in TCC allows bypass Safari privacy settings

Security AffairsOct 18, 10:00 UTC · Oct 18, 2024Vulnerability CVE-2024-44133

How to customize Safari for private browsing on iOS

Help Net SecurityApr 15, 11:38 UTC · Apr 15, 2025Industry

Welcome to Pwn2Own 2017 - Researchers hacked Adobe Reader, Edge, Ubuntu, and Safari

Security AffairsMar 17, 08:08 UTC · Mar 17, 2017Vulnerability

iLeakage attack exploits Safari to steal data from Apple devices

Security AffairsOct 26, 21:03 UTC · Oct 26, 2023Exploit / PoC

Safari browser stores in plaintext previous secure session data

Security AffairsDec 15, 17:02 UTC · Dec 15, 2013Vulnerability

Safari 14: New privacy and security features

Help Net SecuritySep 17, 00:00 UTC · Sep 17, 2020Data breach

I swiped right, Viewing sensitive data cached in your Safari browser.

Security AffairsJan 16, 14:00 UTC · Jan 16, 2019Exploit / PoC

Apple thwarts Safari-based ransomware scheme with iOS 10.3 update

CyberScoopMar 28, 15:25 UTC · Mar 28, 2017Ransomware in the wild

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

The Hacker NewsOct 22, 04:18 UTC · Oct 22, 2024Vulnerability CVE-2024-44133

Vulnerability Spotlight: Remote code execution vulnerability in Apple Safari

Cisco TalosFeb 12, 13:44 UTC · Feb 12, 2020Vulnerability in the wildCVE-2020-3868

Vulnerability Spotlight: Apple Safari SVG marker element baseVal remote code execution vulnerability

Cisco TalosDec 11, 17:26 UTC · Dec 11, 2019Vulnerability in the wildCVE-2019-8846

Hackers can force iOS and macOS browsers to divulge passwords and much more

Ars Technica · SecurityOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC in the wild

New Unpatched Apple Safari Browser Bug Allows Cross

The Hacker NewsJan 17, 03:34 UTC · Jan 17, 2022Vulnerability

Expert discloses unpatched Safari flaw that allows stealing local files

Security AffairsAug 25, 17:55 UTC · Aug 25, 2020Vulnerability

Beware! Unpatched Safari Browser Hack Lets Attackers Spoof URLs

The Hacker NewsSep 12, 11:50 UTC · Sep 12, 2018Vulnerability CVE-2018-8383

Apple iOS 10.3 Fixes Safari Flaw Used in JavaScript

The Hacker NewsMar 28, 12:33 UTC · Mar 28, 2017Ransomware

Apple Updates Everything, (Mon, Sep 14th)

Apple patched a record 261 vulnerabilities across iOS 27, macOS Golden Gate 27, watchOS 27, and other platforms, with none flagged as exploited.

Apple's annual OS update shipped iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27, and visionOS 27 plus bug-fix releases for the 26 and 15 branches, fixing a record 261 vulnerabilities. Notable issues include multiple kernel flaws allowing root privilege escalation (CVE-2026-43689, CVE-2026-43691, CVE-2026-43698, CVE-2026-43786), remote code execution in CUPS (CVE-2026-43692), kernel memory corruption via malicious NFS servers (CVE-2026-43686, CVE-2026-43687), and WebKit memory corruption from crafted web content (CVE-2026-43715). No vulnerabilities are labeled as actively exploited, and Apple does not assign per-CVE severities. Users report iOS 26.7 being downloaded when iOS 27 is intended, and tools like Little Snitch and BlockBlock need updates before upgrading to macOS 27.

SANS Internet Storm CenterSep 14, 18:33 UTC · 2d agoVulnerability CVE-2022-3437 CVE-2026-20683 CVE-2026-28899+27 CVEs

Google expert detailed a 5-Year-Old flaw in Apple Safari exploited in the wild

Security AffairsJun 20, 14:37 UTC · Jun 20, 2022Exploit / PoC in the wildCVE-2022-22620

Hackers beat Firefox and Safari to earn $105K at Pwn2Own

CyberScoopMar 16, 13:50 UTC · Mar 16, 2018Exploit / PoC in the wild

Safari, Microsoft Edge exploits earn hackers $162k at Pwn2Own

CyberScoopMar 15, 00:57 UTC · Mar 15, 2018Exploit / PoC in the wild

Security and privacy improvements in macOS Mojave

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2018Exploit / PoC

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI

The Hacker NewsJun 30, 11:32 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-43707 CVE-2026-43716 CVE-2026-43745+6 CVEs1

Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit

The Hacker NewsNov 6, 04:36 UTC · Nov 6, 2025Vulnerability in the wildCVE-2025-43429 CVE-2025-43430 CVE-2025-43431+3 CVEs

Google Big Sleep found five vulnerabilities in Safari

Security AffairsNov 4, 11:56 UTC · Nov 4, 2025Vulnerability in the wildCVE-2025-43434 CVE-2025-43429 CVE-2025-43430+3 CVEs

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M

The Hacker NewsNov 1, 08:32 UTC · Nov 1, 2023Vulnerability CVE-2023-20583 CVE-2022-40982 CVE-2023-20569

Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Exploit / PoC in the wildCVE-2023-37450

Vulnerability Spotlight: Remote code execution vulnerability Apple Safari

Cisco TalosSep 17, 14:21 UTC · Sep 17, 2020Vulnerability in the wildCVE-2020-9951

Improved features and security fixes in iOS 12, watchOS 5, tvOS 12, and Safari 12

Help Net SecuritySep 18, 00:00 UTC · Sep 18, 2018Vulnerability

Apple released patches to fix Spectre flaws in Safari, macOS, and iOS

Security AffairsJan 9, 12:43 UTC · Jan 9, 2018Vulnerability CVE-2017-5753 CVE-2017-5715

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

ZDI details a use-after-free in Apple Safari's JavaScriptCore (CVE-2026-64715) that allows remote code execution after a user visits a malicious page.

The Zero Day Initiative published advisory ZDI-26-610 for a use-after-free in the B3 ReduceStrength phase of Apple Safari's JavaScriptCore. Successful exploitation allows remote attackers to execute arbitrary code, but user interaction is required, such as visiting a malicious page or opening a malicious file. ZDI rates the vulnerability 8.8 on CVSS and assigned CVE-2026-64715. The advisory does not report exploitation in the wild.

ZDI Published AdvisoriesAug 24, 05:00 UTC · 24d agoVulnerability CVE-2026-64715