Safari 8.0.6, Safari 7.1.6, and Safari 6.2.6 have all received an update to  malicious websites to terminate an application or execute arbitrary code. A separate state management bug in the WebKit History could have allowed a malicious website to compromise user information in the filesystem and was fixed through improved state management.

Source: Apple