apple safari Vulnerabilities
CVE security advisories and vulnerability history for safari by apple.
Last updated
Overview
apple safari has 1,670 published CVE records since 2003, of which 29 are in CISA's Known Exploited Vulnerabilities catalog and 238 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting apple safari, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include acrobat reader, internet explorer, ios, iphone, ipod touch, mac os x server.
Severity and exploitation
How the CVSS severity of apple safari's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
29
29 of apple safari's CVEs are confirmed exploited in the wild.
Public exploits
238
238 of apple safari's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every apple safari version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
- 4.02 CVEs
- 4.0.12 CVEs
- 4.0.22 CVEs
- 4.0.32 CVEs
- 4.0.0b1 CVE
Version ranges
- 3.0.1 <= v <= 3.0.1225 CVEs
- 3.0 <= v <= 3.0224 CVEs
- 2.0.2 <= v <= 2.0.2221 CVEs
- 3.0.2 <= v <= 3.0.2221 CVEs
- 2.0 <= v <= 2.0220 CVEs
- 3.0.3 <= v <= 3.0.3219 CVEs
- 3.0.4 <= v <= 3.0.4217 CVEs
- 2.0.4 <= v <= 2.0.4216 CVEs
- 1.0 <= v <= 1.0215 CVEs
- 1.2 <= v <= 1.2210 CVEs
- 1.1 <= v <= 1.1209 CVEs
- 1.3 <= v <= 1.3209 CVEs
- 3.1.1 <= v <= 3.1.1207 CVEs
- 1.3.1 <= v <= 1.3.1205 CVEs
- 1.3.2 <= v <= 1.3.2204 CVEs
- 3.1.2 <= v <= 3.1.2201 CVEs
- 3.2.1 <= v <= 3.2.1199 CVEs
- 1.0.3 <= v <= 1.0.3193 CVEs
- 3.2.2 <= v <= 3.2.2192 CVEs
- 4.0 <= v <= 4.0189 CVEs
- 2.0.1 <= v <= 2.0.1182 CVEs
- 4.0.1 <= v <= 4.0.1182 CVEs
- 2.0.3 <= v <= 2.0.3180 CVEs
- 4.0.0b <= v <= 4.0.0b179 CVEs
- 4.0.2 <= v <= 4.0.2179 CVEs
- 4.0.3 <= v <= 4.0.3176 CVEs
- 1.2.2 <= v <= 1.2.2173 CVEs
- 1.2.3 <= v <= 1.2.3173 CVEs
- 1.2.1 <= v <= 1.2.1172 CVEs
- 2.0.0 <= v <= 2.0.0170 CVEs
- 3.0.0 <= v <= 3.0.0170 CVEs
- 3.1.0 <= v <= 3.1.0170 CVEs
- 3.2.0 <= v <= 3.2.0169 CVEs
- 1.2.4 <= v <= 1.2.4167 CVEs
- 1.2.5 <= v <= 1.2.5167 CVEs
- 3.0.0b <= v <= 3.0.0b167 CVEs
- 3.0.1b <= v <= 3.0.1b167 CVEs
- 3.0.2b <= v <= 3.0.2b167 CVEs
- 3.0.3b <= v <= 3.0.3b167 CVEs
- 3.0.4b <= v <= 3.0.4b167 CVEs
- 3.1.0b <= v <= 3.1.0b167 CVEs
- 1.1.1 <= v <= 1.1.1165 CVEs
- 1.0.0 <= v <= 1.0.0163 CVEs
- 1.2.0 <= v <= 1.2.0163 CVEs
- 1.0.0b1 <= v <= 1.0.0b1162 CVEs
- 1.0.0b2 <= v <= 1.0.0b2162 CVEs
- 1.0.1 <= v <= 1.0.1162 CVEs
- 1.0.2 <= v <= 1.0.2162 CVEs
- 1.1.0 <= v <= 1.1.0162 CVEs
- 1.3.0 <= v <= 1.3.0162 CVEs
- 3 <= v <= 3162 CVEs
- 4.0.4 <= v <= 4.0.4161 CVEs
- 2 <= v <= 2158 CVEs
- 4.1 <= v <= 4.1155 CVEs
- 5.0.1 <= v <= 5.0.1153 CVEs
- 4.1.1 <= v <= 4.1.1152 CVEs
- 5.0 <= v <= 5.0152 CVEs
- 4.1.2 <= v <= 4.1.2132 CVEs
- 5.0.2 <= v <= 5.0.2131 CVEs
- 5.0.4 <= v <= 5.0.4124 CVEs
- 4.0.5 <= v <= 4.0.5115 CVEs
- 7.0 <= v <= 7.0111 CVEs
- 7.0.1 <= v <= 7.0.1103 CVEs
- 7.0.2 <= v <= 7.0.2102 CVEs
- 5.0.5 <= v <= 5.0.592 CVEs
- 5.0.6 <= v <= 5.0.692 CVEs
- 1.0b1 <= v <= 1.0b190 CVEs
- 3.1.1b <= v <= 3.1.1b89 CVEs
- 3.1.2b <= v <= 3.1.2b89 CVEs
- 3.2.0b <= v <= 3.2.0b89 CVEs
- 3.2.1b <= v <= 3.2.1b89 CVEs
- 3.2.2b <= v <= 3.2.2b89 CVEs
- 5.1 <= v <= 5.186 CVEs
- 5.1.1 <= v <= 5.1.186 CVEs
- 5.1.2 <= v <= 5.1.286 CVEs
- 7.0.3 <= v <= 7.0.386 CVEs
- 5.1.3 <= v <= 5.1.383 CVEs
- 5.1.4 <= v <= 5.1.483 CVEs
- 5.1.5 <= v <= 5.1.583 CVEs
- 5.1.6 <= v <= 5.1.682 CVEs
- <= 5.1.776 CVEs
- 6.0 <= v <= 6.071 CVEs
- 6.0.1 <= v <= 6.0.170 CVEs
- 6.0.2 <= v <= 6.0.268 CVEs
- 6.0.3 <= v <= 6.0.368 CVEs
- 7.0.4 <= v <= 7.0.467 CVEs
- 6.0.4 <= v <= 6.0.464 CVEs
- 6.0.5 <= v <= 6.0.564 CVEs
- 6.1 <= v <= 6.156 CVEs
- 7.0.5 <= v <= 7.0.555 CVEs
- 0.8 <= v <= 0.852 CVEs
- 0.9 <= v <= 0.952 CVEs
- 6.1.1 <= v <= 6.1.152 CVEs
- 3.1 <= v <= 3.151 CVEs
- 7.1.0 <= v <= 7.1.049 CVEs
- 7.0.6 <= v <= 7.0.648 CVEs
- <= 4.0.547 CVEs
- <= 8.0.846 CVEs
- 8.0.0 <= v <= 8.0.045 CVEs
- 3.2 <= v <= 3.244 CVEs
- < 6.040 CVEs
- 7.1.2 <= v <= 7.1.240 CVEs
- 8.0.2 <= v <= 8.0.240 CVEs
- 7.1.1 <= v <= 7.1.139 CVEs
- 8.0.1 <= v <= 8.0.139 CVEs
- 5.0.3 <= v <= 5.0.338 CVEs
- 6.1.2 <= v <= 6.1.238 CVEs
- 3.2.3 <= v <= 3.2.336 CVEs
- 7.1.3 <= v <= 7.1.336 CVEs
- 8.0.3 <= v <= 8.0.336 CVEs
- <= 10.0.335 CVEs
- < 11.133 CVEs
- <= 5.0.533 CVEs
- < 26.5.231 CVEs
- <= 3.2.331 CVEs
- <= 4.0_beta27 CVEs
- 6.0 <= v < 6.2.827 CVEs
- 7.0 <= v < 7.1.827 CVEs
- 8.0 <= v < 8.0.827 CVEs
- <= 10.0.125 CVEs
- <= 10.1.225 CVEs
- < 1224 CVEs
- < 12.1.123 CVEs
- < 12.1.223 CVEs
- < Safari 12.1.223 CVEs
- < 10.1.222 CVEs
- < 12.122 CVEs
- < 26.122 CVEs
- <= 10.122 CVEs
- < 26.521 CVEs
- < Safari 12.1.121 CVEs
- < Safari 12.120 CVEs
- <= 4.1.219 CVEs
- <= 5.0.219 CVEs
- <= 6.1.319 CVEs
- 6.1.3 <= v <= 6.1.319 CVEs
- 7.1.4 <= v <= 7.1.419 CVEs
- 8.0.4 <= v <= 8.0.419 CVEs
- < 11.1.218 CVEs
- < 5.0.618 CVEs
- <= 6.2.317 CVEs
- < 13.0.316 CVEs
- < 5.1.416 CVEs
- < 13.015 CVEs
- < 18.415 CVEs
- < 18.615 CVEs
- < 5.1.115 CVEs
- <= 4.0.415 CVEs
- <= 4.115 CVEs
- <= 5.015 CVEs
- < 11.0.114 CVEs
- < 11.1.114 CVEs
- < 13.1.214 CVEs
- < Safari 13.0.314 CVEs
- <= 6.1.214 CVEs
- 2.0.4_419.3 <= v <= 2.0.4_419.314 CVEs
- <= 9.0.113 CVEs
- < 10.012 CVEs
- < 12.0.112 CVEs
- < 13.112 CVEs
- < 16.212 CVEs
- < 17.612 CVEs
- < 26.212 CVEs
- <= 6.1.412 CVEs
- 2.0_pre <= v <= 2.0_pre12 CVEs
- 2.0.3_417.9.3 <= v <= 2.0.3_417.9.312 CVEs
- < 11.0.211 CVEs
- < 12.0.311 CVEs
- < 16.611 CVEs
- < 18.511 CVEs
- < Safari 13.111 CVEs
- < Safari 13.1.211 CVEs
- 3.0.4_beta <= v <= 3.0.4_beta11 CVEs
- < 12.0.210 CVEs
- < 13.0.110 CVEs
- < 17.010 CVEs
- < 17.510 CVEs
- < 9.1.210 CVEs
- < Safari 12.0.310 CVEs
- <= 6.2.010 CVEs
- <= 6.2.410 CVEs
- <= 9.0.310 CVEs
- < 13.0.59 CVEs
- < 13.1.19 CVEs
- < 14.1.19 CVEs
- < 179 CVEs
- < 269 CVEs
- < 26.09 CVEs
- < Safari 13.1.19 CVEs
- <= 9.1.39 CVEs
- 7.1.5 <= v <= 7.1.59 CVEs
- 8.0.5 <= v <= 8.0.59 CVEs
- < 10.0.38 CVEs
- < 14.08 CVEs
- < 18.28 CVEs
- < 18.38 CVEs
- < 26.38 CVEs
- < 26.48 CVEs
- <= 3.0.38 CVEs
- <= 6.18 CVEs
- <= 9.08 CVEs
- < 10.17 CVEs
- < 157 CVEs
- < 15.27 CVEs
- < 16.57 CVEs
- < 17.17 CVEs
- < 17.47 CVEs
- < 187 CVEs
- < 18.17 CVEs
- < Safari 13.0.57 CVEs
- <= 3.2.27 CVEs
- <= 6.0.57 CVEs
- <= 6.1.57 CVEs
- 5.1.7 <= v <= 5.1.77 CVEs
- 6.1.4 <= v <= 6.1.47 CVEs
- < 15.06 CVEs
- < 15.46 CVEs
- < 15.66 CVEs
- < 16.06 CVEs
- < 16.16 CVEs
- < 18.06 CVEs
- < 9.1.16 CVEs
- <= 10.1.16 CVEs
- <= 5.0.36 CVEs
- beta2 <= v <= beta26 CVEs
- < 15.35 CVEs
- < 15.55 CVEs
- < 16.45 CVEs
- < 17.25 CVEs
- < 17.35 CVEs
- <= 5.15 CVEs
- <= 6.2.55 CVEs
- < 10.0.14 CVEs
- < 10.1.14 CVEs
- < 11.0.34 CVEs
- < 13.0.44 CVEs
- < 164 CVEs
- < 16.34 CVEs
- < 4.1.34 CVEs
- < 5.0.44 CVEs
- < Safari 14.04 CVEs
- <= 10.0.24 CVEs
- <= 4.0.24 CVEs
- <= 4.0.34 CVEs
- <= 6.0.44 CVEs
- <= 6.2.64 CVEs
- <= 9.0.24 CVEs
- 5.0 <= v < 5.0.34 CVEs
- 7.1.6 <= v <= 7.1.64 CVEs
- 8.0 <= v <= 8.04 CVEs
- 8.0.6 <= v <= 8.0.64 CVEs
- < 133 CVEs
- < 14.0.33 CVEs
- < 14.13 CVEs
- < 14.1.23 CVEs
- < 15.0.03 CVEs
- < 4.03 CVEs
- < 9.13 CVEs
- < Safari 13.0.13 CVEs
- <= 3.1.23 CVEs
- <= 3.2.13 CVEs
- <= 6.03 CVEs
- <= 6.1.13 CVEs
- <= 6.2.23 CVEs
- 4.0_beta <= v <= 4.0_beta3 CVEs
- < 12.02 CVEs
- < 14.0.12 CVEs
- < 16.5.12 CVEs
- < 17.1.22 CVEs
- < 18.1.12 CVEs
- < 4.0.42 CVEs
- < 5.1.72 CVEs
- < 9.0.32 CVEs
- <= 10.0.02 CVEs
- <= 11.02 CVEs
- <= 3.0.22 CVEs
- <= 3.1.12 CVEs
- <= 4.0.12 CVEs
- <= 5.1.32 CVEs
- <= 5.1.42 CVEs
- <= 6.0.22 CVEs
- <= 9.1.12 CVEs
- 18 <= v <= 182 CVEs
- 4beta <= v <= 4beta2 CVEs
- 6.0 <= v < 6.2.12 CVEs
- 7.0 <= v < 7.1.12 CVEs
- 8.0 <= v < 8.0.12 CVEs
- < 14.0.21 CVE
- < 15.11 CVE
- < 15.6.11 CVE
- < 16.4.11 CVE
- < 16.5.21 CVE
- < 17.4.11 CVE
- < 18.3.11 CVE
- < 3.0.51 CVE
- < 3.1.21 CVE
- < 4.0.51 CVE
- < Safari 131 CVE
- <= 3.0.41 CVE
- <= 5.0.41 CVE
- <= 5.1.11 CVE
- <= 5.1.21 CVE
- <= 5.1.61 CVE
- <= 6.0.11 CVE
- <= 9.11 CVE
- 10.0.3 <= v <= 10.0.31 CVE
- 14.0 <= v <= 14.01 CVE
- 22 <= v <= 221 CVE
- 3.2.0 <= v < 3.2.31 CVE
- 4 <= v <= 41 CVE
- 4.1.3 <= v <= 4.1.31 CVE
- 46 <= v <= 461 CVE
- 6.0 <= v <= 6.1.51 CVE
- 6.2.2 <= v <= 6.2.21 CVE
- 7.0 <= v <= 7.0.51 CVE
- 7.1 <= v <= 7.11 CVE
- 9.1.3 <= v <= 9.1.31 CVE
Fixed in
- 6.040 CVEs
- 11.133 CVEs
- 26.5.231 CVEs
- 6.2.827 CVEs
- 7.1.827 CVEs
- 8.0.827 CVEs
- 1224 CVEs
- 12.1.123 CVEs
- 12.1.223 CVEs
- Safari 12.1.223 CVEs
- 10.1.222 CVEs
- 12.122 CVEs
- 26.122 CVEs
- 26.521 CVEs
- Safari 12.1.121 CVEs
- Safari 12.120 CVEs
- 11.1.218 CVEs
- 5.0.618 CVEs
- 13.0.316 CVEs
- 5.1.416 CVEs
- 13.015 CVEs
- 18.415 CVEs
- 18.615 CVEs
- 5.1.115 CVEs
- 11.0.114 CVEs
- 11.1.114 CVEs
- 13.1.214 CVEs
- Safari 13.0.314 CVEs
- 10.012 CVEs
- 12.0.112 CVEs
- 13.112 CVEs
- 16.212 CVEs
- 17.612 CVEs
- 26.212 CVEs
- 11.0.211 CVEs
- 12.0.311 CVEs
- 16.611 CVEs
- 18.511 CVEs
- Safari 13.111 CVEs
- Safari 13.1.211 CVEs
- 12.0.210 CVEs
- 13.0.110 CVEs
- 17.010 CVEs
- 17.510 CVEs
- Safari 12.0.310 CVEs
- 13.0.59 CVEs
- 13.1.19 CVEs
- 14.1.19 CVEs
- 179 CVEs
- 269 CVEs
- 26.09 CVEs
- Safari 13.1.19 CVEs
- 10.0.38 CVEs
- 14.08 CVEs
- 18.28 CVEs
- 18.38 CVEs
- 26.38 CVEs
- 26.48 CVEs
- 10.17 CVEs
- 157 CVEs
- 15.27 CVEs
- 16.57 CVEs
- 17.17 CVEs
- 17.47 CVEs
- 187 CVEs
- 18.17 CVEs
- Safari 13.0.57 CVEs
- 15.06 CVEs
- 15.46 CVEs
- 15.66 CVEs
- 16.06 CVEs
- 16.16 CVEs
- 18.06 CVEs
- 9.1.16 CVEs
- 15.35 CVEs
- 15.55 CVEs
- 16.45 CVEs
- 17.25 CVEs
- 17.35 CVEs
- 9.1.25 CVEs
- 10.0.14 CVEs
- 10.1.14 CVEs
- 11.0.34 CVEs
- 13.0.44 CVEs
- 164 CVEs
- 16.34 CVEs
- 4.1.34 CVEs
- 5.0.34 CVEs
- 5.0.44 CVEs
- Safari 14.04 CVEs
- 133 CVEs
- 14.0.33 CVEs
- 14.13 CVEs
- 14.1.23 CVEs
- 15.0.03 CVEs
- 4.03 CVEs
- 9.13 CVEs
- Safari 13.0.13 CVEs
- > 4.0.42 CVEs
- 12.02 CVEs
- 14.0.12 CVEs
- 16.5.12 CVEs
- 17.1.22 CVEs
- 18.1.12 CVEs
- 4.0.42 CVEs
- 5.1.72 CVEs
- 6.2.12 CVEs
- 7.1.12 CVEs
- 8.0.12 CVEs
- 9.0.32 CVEs
- 14.0.21 CVE
- 15.11 CVE
- 15.6.11 CVE
- 16.4.11 CVE
- 16.5.21 CVE
- 17.4.11 CVE
- 18.3.11 CVE
- 3.0.51 CVE
- 3.1.21 CVE
- 3.2.31 CVE
- 4.0.51 CVE
- Safari 131 CVE
1,670 CVEs
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (45th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.5% (39th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (32th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (13th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (25th pct)2026-06-29
- High · CVSS 7.1EPSS 0.5% (38th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (13th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.2% (12th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (24th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (46th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (24th pct)2026-06-29
- High · CVSS 8.8EPSS 0.2% (14th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (32th pct)2026-06-29
- Medium · CVSS 4.3EPSS 0.3% (25th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (25th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.6% (45th pct)2026-06-29
- Medium · CVSS 5.3EPSS 0.3% (27th pct)2026-06-29
- High · CVSS 8.8EPSS 0.4% (33th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (35th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (17th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (17th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (28th pct)2026-06-29
- High · CVSS 7.1EPSS 0.8% (52th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (17th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.4% (32th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (18th pct)2026-06-29
- High · CVSS 8.1EPSS 0.3% (18th pct)2026-06-29
- Medium · CVSS 6.5EPSS 0.3% (27th pct)2026-06-29
Showing 30 of 1,670
Common weakness types
The CWE weakness categories most often found in apple safari CVEs. Follow any weakness for its full explanation.
- CWE-416Use After Free50 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer44 CVEs
- CWE-787Out-of-bounds Write23 CVEs
- CWE-125Out-of-bounds Read15 CVEs
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')12 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
- CWE-20Improper Input Validation9 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
Disclosure activity by year
How many apple safari CVEs were published each year.
Other apple products
Browse vulnerabilities for other products by apple.
Frequently asked questions
Common questions about apple safari vulnerabilities.
- How many CVEs does apple safari have?
- apple safari has 1,670 published CVE records since 2003.
- How many apple safari CVEs are in CISA KEV?
- Yes — 29 of apple safari's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Are there public exploits for apple safari vulnerabilities?
- Yes — 238 of apple safari's CVEs have a known public exploit.
- Which versions of apple safari are affected?
- 444 distinct apple safari versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
- What are the most common weakness types in apple safari CVEs?
- apple safari's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).
- How many critical apple safari vulnerabilities are there?
- apple safari has 238 critical and 624 high-severity CVEs.
- What is the average severity of apple safari CVEs?
- The average CVSS base score across apple safari's scored CVEs is 7.3.
References
- All apple vulnerabilities
- The MITRE CVE Program (opens in a new tab)
- Learn: What is a CVE?
- CWE directory: the weakness types these CVEs map to
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Track apple safari vulnerabilities
Monitor new apple safari vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.