Safari
Product · by AppleSafari is a web browser developed by Apple. It is built into several of Apple's operating systems, including macOS, iOS, iPadOS, and visionOS, and uses Apple's open-source browser engine WebKit, which was derived from KHTML. It is the second most used browser in the world, after Google Chrome.
From Wikipedia, licensed under CC BY-SA 4.0. Shown as published there.
Facts
- Made by
- Apple Inc.Source: Wikidata
- First released
- 2003Source: Wikidata
- Latest version
- 14.1.2Source: Wikidata
- Runs on
- macOS, Microsoft WindowsSource: Wikidata
- Official website
- www.apple.com/safariSource: Wikidata
- Wikipedia
- Read on WikipediaSource: Wikidata
Vulnerabilities
35 CVEs in our records, 1 known exploited (on CISA's KEV list).
- CVE-2024-27834 Exploited added to KEV 4 Nov
Am I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Affected versions
- CVE-2024-27834 before 17.5 · fixed in 17.5
- CVE-2026-86986 before 27.2 · fixed in 27.2
- CVE-2026-86985 before 27.2 · fixed in 27.2
- CVE-2026-86974 before 27.2 · fixed in 27.2
- CVE-2026-86973 before 27.2 · fixed in 27.2
- CVE-2026-113952 before 27.2 · fixed in 27.2
- CVE-2026-113949 before 27.2 · fixed in 27.2
- CVE-2026-113904 before 27.2 · fixed in 27.2
- CVE-2026-113903 before 27.2 · fixed in 27.2
- CVE-2026-113901 before 27.2 · fixed in 27.2
- CVE-2026-113897 before 27.2 · fixed in 27.2
- CVE-2026-112699 before 27.2 · fixed in 27.2
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Vulnerability reported by The Hacker NewsCISA adds Apple flaw CVE-2024-27834 to its Known Exploited Vulnerabilities catalogue
Recent news
CISA adds Apple flaw CVE-2024-27834 to its Known Exploited Vulnerabilities catalogue
CISA has added CVE-2024-27834 (CVSS 5.5) to its Known Exploited Vulnerabilities catalogue. It allows an attacker with arbitrary read and write access to bypass Pointer Authentication on Apple operating systems and Safari. Sekoia linked a zero-click exploit chain using this bypass to Russia-linked group APT29, which deployed information-stealing malware. Apple fixed the flaw in Safari 17.5, iOS and iPadOS 16.7.8 and 17.5, macOS Sonoma 14.5, tvOS 17.5 and watchOS 10.5.