Apple has delivered an update to its Safari web browser.
Version 4.0.4 addresses seven vulnerabilities, including three in the WebKit, an engine that allows web browsers to render on web pages.
One of those WebKit flaws could be exploited if an attacker is able to access a maliciously-crafted FTP server to cause arbitrary code execution. Meanwhile, another WebKit vulnerability can result in cross-site request forgery if a user visits a maliciously-crafted web site.
The Safari update, which follows a major Mac OS X patch batch released earlier this week, also fixes a vulnerability in ColorSync, a graphics utility, that could permit code injection if a user views a malicious image with an embedded color profile.
The browser upgrade affects both Windows and Mac users. This is the sixth time Safari has been updated this year.
See original article on scmagazineus.com
Apple releases Safari update to close seven holes
Sixth update of the year.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.png&h=140&w=231&c=1&s=0)
Partner Content
AI and quantum computing widen the machine identity security gap
Unlock SMB Success with Microsoft Copilot
.png&h=140&w=231&c=1&s=0)
Partner Content
Elastic's Open Source Strategy Drives Innovation and Expansion
.png&h=140&w=231&c=1&s=0)
Partner Content
Machine identity a key priority for organisations’ security strategies: CyberArk
Sponsored Whitepapers
See everything. Do more.
Lindentech Secures Digital Identity with Zero Trust and Microsoft Entra
Diamond IT Delivers GRC Transformation with Microsoft Purview
Linktech Powers Energy Trader’s Essential Eight Compliance in Just Eight Weeks
Byte Delivers Future-Ready IT: Transforming Endpoint Security and Productivity with a Cloud-First Strategy
.png&w=120&c=1&s=0)
EDUtech AU
.png&w=120&c=1&s=0)
Security Exhibition & Conference 2025
Integrate Expo 2025
Digital As Usual Cybersecurity Roadshow: Brisbane edition
iTnews Benchmark Security Awards 2025
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
