CVE-2016-4737

高危 8.8CVE-2016-4737 · Published 25/09/2016 · updated 17/06/2026

要点

CVE-2016-4737 是影响 safari (apple) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.9%，高于 86.8% 的漏洞。
修复：升级到 10.0 或更高版本。

Package	Affected versions	Patched versions
safari apple	`< 10.0`	`10.0`

Description

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

References

lists.apple.com/archives/security-announce/2016/Sep/msg00007.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00008.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00010.html · Mailing List
lists.apple.com/archives/security-announce/2016/Sep/msg00011.html · Mailing List
securityfocus.com/bid/93065 · Third Party Advisory
securitytracker.com/id/1036854 · Third Party Advisory
support.apple.com/HT207141 · Vendor Advisory
support.apple.com/HT207142 · Vendor Advisory
support.apple.com/HT207143 · Vendor Advisory
support.apple.com/HT207157 · Vendor Advisory

safari 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 10.0

10.0

safari 的其他漏洞

查看全部 →