Various 2.x releases of WebKitGTK+ suffer from over 130 vulnerabilities. These range from use-after-free to arbitrary code execution issues.
7dc30709125cb2db34abde329f80722cbf2938391b1c828a6de14fc02f27d91c
Apple Security Advisory 2015-06-30-6 - iTunes 12.2 is now available and addresses multiple memory corruption issues.
0eb0fc843f8acaeb5f2a26a5e185e8dfd61900d381e3de237073c27a4bba2d49
Apple Security Advisory 2014-12-3-1 - Safari 8.0.1, Safari 7.1.1, and Safari 6.2.1 are now available and address cross-origin CSS loading and multiple memory handling vulnerabilities.
6a5ce12d6de2f367ba6ec9a2bc2e6ece4ae247bd397f9e2327cc5c6e8ccf3b8f
Apple Security Advisory 2014-11-17-3 - Apple TV 7.0.2 is now available and addresses arbitrary code execution and unsigned code execution security issues.
64ff89b095ba26114a75a346f55bdedfd3112739360aef178b40c75924a28897
Apple Security Advisory 2014-11-17-1 - iOS 8.1.1 is now available and addresses code execution and various other security flaws.
602e9d605f73315efc5efaf9ac7b45623e8729c43897fd8782af5548bf6439e1