WebKit in Apple iOS before 10 tvOS before 10 iTunes before 12.5.1 on Windows and Safari before 10 mishandles error prototypes which allows remote attackers to execute arbitrary code via a crafted web site.