About the security content of Safari 11 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2017-7142It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites
• CVE-2017-7144It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling
• CVE-2017-7109n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2017-7095It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7100It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7120It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7098It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7081It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7087It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7111It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7102It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7091It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7089It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing
• CVE-2017-7090It allows remote attackers to bypass the Same Origin Policy and obtain sensitive cookie information via a custom URL scheme
• CVE-2017-7085It allows remote attackers to spoof the address bar
• CVE-2017-7096It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7092It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7117It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7093It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7106It allows remote attackers to spoof the address bar
• CVE-2017-7104It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7094It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7107It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
• CVE-2017-7099It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site

Source and provenance

Original title: About the security content of Safari 11 - Apple Support. Captured 17 Oct 2026, 02:04 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.