Safari
Vendor:
First CVE: Jun 9, 2003 · Active for 23 years
1,629
Total CVEs
More Total CVEs than 100% of tracked products
67.9
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
1.7%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Safari over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2003
23 years ago
Most Recent CVE
Jun 29, 2026
29 days ago
CVE Severity & Scoring
Safari1,629 CVEs
48%
49%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local52 (3.2%)
Network817 (50.2%)
Unknown760 (46.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low855 (52.5%)
High14 (0.9%)
Unknown760 (46.7%)
User Interaction
None91 (5.6%)
Unknown760 (46.7%)
Required778 (47.8%)
Privileges Required
Low20 (1.2%)
High0 (0.0%)
None849 (52.1%)
Unknown760 (46.7%)
Top CVEs
Signals from CVEs in this product scope (1629 CVEs).
1,629 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-2175HIGH Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to th | Apr 24, 2007 | 7.6 | 83 | NO | YES |
CVE-2025-14174HIGH Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro | Dec 12, 2025 | 8.8 | 82 | YES | NO |
CVE-2020-9850CRITICAL A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iClo | Jun 9, 2020 | 9.8 | 82 | NO | YES |
CVE-2019-8506HIGH A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Wind | Dec 18, 2019 | 8.8 | 82 | YES | YES |
CVE-2025-43529HIGH A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, | Dec 17, 2025 | 8.8 | 77 | YES | NO |
CVE-2023-32439HIGH A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. P | Jun 23, 2023 | 8.8 | 77 | YES | NO |
CVE-2023-32435HIGH A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7 | Jun 23, 2023 | 8.8 | 77 | YES | NO |
CVE-2025-31277HIGH The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc | Jul 30, 2025 | 8.8 | 76 | YES | NO |
CVE-2023-37450HIGH The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may | Jul 27, 2023 | 8.8 | 76 | YES | NO |
CVE-2023-28205HIGH A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventur | Apr 10, 2023 | 8.8 | 76 | YES | NO |
Exploit Exposure
Signals from CVEs in this product scope (1629 CVEs).
CISA KEV
27 CVEs
1.7% of CVEs· 98th percentile
Metasploit
12 CVEs
0.7% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
158 CVEs
9.7% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (1629 CVEs).
Media Mentions
Signals from CVEs in this product scope (1629 CVEs).
Top CNAs Publishing CVEs For Safari
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| beta2 | 5 | 6.8 | 4.8% | 0 | 1 |
| 9.1.3 | 1 | 6.1 | 0.8% | 0 | 0 |
| 8.0.6 | 4 | 6.2 | 2.1% | 0 | 0 |
| 8.0.5 | 9 | 6.0 | 3.3% | 0 | 1 |
| 8.0.4 | 19 | 5.7 | 3.1% | 0 | 2 |
| 8.0.3 | 36 | 6.2 | 2.9% | 0 | 2 |
| 8.0.2 | 40 | 6.3 | 2.9% | 0 | 2 |
| 8.0.1 | 39 | 6.2 | 2.9% | 0 | 2 |
| 8.0.0 | 45 | 6.3 | 2.9% | 0 | 2 |
| 8.0 | 4 | 6.2 | 2.1% | 0 | 0 |
| 7.1.6 | 4 | 6.2 | 2.1% | 0 | 0 |
| 7.1.5 | 9 | 6.0 | 3.3% | 0 | 1 |
| 7.1.4 | 19 | 5.7 | 3.1% | 0 | 2 |
| 7.1.3 | 36 | 6.2 | 2.9% | 0 | 2 |
| 7.1.2 | 40 | 6.3 | 2.9% | 0 | 2 |
| 7.1.1 | 39 | 6.2 | 2.9% | 0 | 2 |
| 7.1.0 | 49 | 6.3 | 2.8% | 0 | 2 |
| 7.1 | 1 | 6.8 | 2.8% | 0 | 0 |
| 7.0.6 | 48 | 6.3 | 2.9% | 0 | 2 |
| 7.0.5 | 55 | 6.4 | 2.8% | 0 | 2 |