CVE-2016-1854

높음 8.8CVE-2016-1854 · Published 20/05/2016 · updated 17/06/2026

요약

CVE-2016-1854은(는) safari (apple), webkitgtk+ (webkitgtk)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 2.6%, 전체 취약점의 85.2%보다 높음.
조치: 9.1.1, 2.12.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
safari apple	`< 9.1.1`	`9.1.1`
webkitgtk+ webkitgtk	`< 2.12.1`	`2.12.1`

Description

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857.

References

lists.apple.com/archives/security-announce/2016/May/msg00001.html · Mailing List
lists.apple.com/archives/security-announce/2016/May/msg00002.html · Mailing List
lists.apple.com/archives/security-announce/2016/May/msg00005.html · Mailing List
packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html · Third Party Advisory
securityfocus.com/archive/1/538522/100/0/threaded · Third Party Advisory
securitytracker.com/id/1035888 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-16-341 · Third Party Advisory
support.apple.com/HT206564 · Vendor Advisory
support.apple.com/HT206565 · Vendor Advisory
support.apple.com/HT206568 · Vendor Advisory

safari의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 9.1.1

9.1.1

webkitgtk+

webkitgtk

< 2.12.1

2.12.1

safari의 다른 취약점

모두 보기 →