Buffer overflow in BOMArchiveHelper on ZIP archive extraction, multiple security bugs in Safari on HTML and different image formats parsing.
vulners.com/securityvulns/securityvulns:doc:12362