VDB
GHSA-q7mf-27fr-frgh
GHSA-q7mf-27fr-frgh
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published May 14, 2022
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768.
Risk scores
CVSS 3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-q7mf-27fr-frgh
vulnetix vdb fixes GHSA-q7mf-27fr-frgh
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-q7mf-27fr-frgh/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html url
- http://www.securityfocus.com/bid/93064 url
- http://www.securitytracker.com/id/1036854 url
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html url
- https://nvd.nist.gov/vuln/detail/CVE-2016-4765 advisory
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html url
- http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html url
- https://support.apple.com/HT207142 advisory
- https://support.apple.com/HT207158 advisory
- https://support.apple.com/HT207143 advisory
- https://support.apple.com/HT207157 advisory