openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:2208-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-8672

CVE-2019-8672 is a WebKit memory-corruption vulnerability affecting Apple platforms. Apple’s HT210346 notes fixes in iOS 12.4, macOS 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, and related Apple software (iTunes/iCloud for Windows). Description: memory corruption issues addressed with improve...

CVE-2019-8672

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may...

RHEL 8 : GNOME (RHSA-2019:3553)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3553 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: evince: uninitialized memory use in function...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2208)

This update for webkit2gtk3 fixes the following issues : Security issues fixed : - CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666,...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2207)

This update for webkit2gtk3 fixes the following issues : Security issues fixed : - CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666,...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:2428-1)

This update for webkit2gtk3 fixes the following issues : Security issues fixed : CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671, CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689, CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666,...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:2345-1)

This update for webkit2gtk3 fixes the following issues : Updated to version 2.24.4 bsc1148931. Security issues fixed : CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615...

Debian DSA-4515-1 : webkit2gtk - security update

Several vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2019-8644 G. Geshev discovered memory corruption issues that can lead to arbitrary code execution. - CVE-2019-8649 Sergei Glazunov discovered an issue that may lead to universal cross site scripting. - CVE-2019-8658...

FreeBSD : webkit2-gtk3 -- Multiple vulnerabilities (e45c3669-caf2-11e9-851a-dcf3aaa3f3ff)

The WebKitGTK project reports many vulnerabilities, including several arbitrary code execution vulnerabilities. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and...

macOS : Apple Safari < 12.1.2 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.2 It is, therefore, affected by multiple vulnerabilities in the following components : - Safari - WebKit C Tenable Network Security, Inc. include'compat.inc'; if description scriptid128178;...

Apple iTunes < 12.9.6 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.6. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210356 advisory. - A remote attacker may be able to view sensitive information CVE-2019-13118 - Processing maliciously crafted web...

Apple iTunes < 12.9.6 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.9.6. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210356 advisory. - A remote attacker may be able to view sensitive information CVE-2019-13118 - Processing maliciously crafted web...

About the security content of iCloud for Windows 10.6

About the security content of iCloud for Windows 10.6 This document describes the security content of iCloud for Windows 10.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Memory corruption

Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption...

Memory corruption

Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption...

Memory corruption

Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique...

CVE-2017-8672

CVE-2017-8672 details: Microsoft Edge on Windows 10 (various builds) is affected by a memory corruption vulnerability in the scripting engine when rendering objects in memory, enabling remote code execution in the context of the current user. The linked Nessus/NVD sources classify it as a high-se...

Microsoft Edge CVE-2017-8672 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

CVE-2016-8672

CVE-2016-8672 concerns the SIMATIC web server delivering cookies without the Secure attribute. Affects SIMATIC CP 343-1 Advanced (incl. SIPLUS NET) &lt; v3.0.53 and CP 443-1 Advanced