webkitgtk: Processing web content may lead to arbitrary code execution

A vulnerability in WebKitGTK and WPE WebKit could allow an attacker to execute arbitrary code on a target system. The issue arises from a use-after-free flaw in memory management when processing web content. This flaw can potentially give attackers the ability to take control of affected systems...

PT-2023-9367 · Apple +7 · Macos Sonoma +11

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 macOS Sonoma versions prior to 14.2 WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description: The issue is related ...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...