VulnCheck KEV: CVE-2023-42916

Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

webkitgtk: arbitrary javascript code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, caused by buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit arises due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

PT-2023-8419 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to a lack of protection for service data in the WebKit module for displaying web pages in macOS, iOS...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit lies in errors in the processing of input data during syntax analysis of code. This allows an attacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Update now! Apple fixes several serious vulnerabilities

Apple has released security updates for several products to address several serious vulnerabilities including some actively exploited zero-days. Updates are available for these products: Safari 16.6 | macOS Big Sur and macOS Monterey ---|--- iOS 16.6 and iPadOS 16.6 | iPhone 8 and later, iPad Pro...

webkitgtk: Processing web content may lead to arbitrary code execution

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems...

PT-2023-7335 · Apple +6 · Macos Sonoma +11

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1.2 iPadOS versions prior to 17.1.2 macOS Sonoma versions prior to 14.1.2 Safari versions prior to 17.1.2 Description: The issue is related to an out-of-bounds read in the WebKit web browser engine, which may allow an...

PT-2023-5474

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 16.6.1 Apple macOS versions prior to Ventura 13.6 Apple iOS versions prior to 16.7 Apple iPadOS versions prior to 16.7 Apple macOS Sonoma versions prior to 14 webkit2gtk versions prior to 2.42.1 Oracle Java SE...

Vulnerability fixed in Apple macOS, iOS, iPadOS and Safari

Apple has released interim updates for macOS, iOS, iPadOS and Safari to fix a vulnerability in WebKit. A malicious party can exploit the vulnerability to execute arbitrary code execute arbitrary code with user privileges. The malicious party must to do so, trick the victim into opening a rogue fi...

VulnCheck KEV: CVE-2023-37450

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

Apple on Wednesday released a slew of updates for iOS, iPadOS, macOS, watchOS, and Safari browser to address a set of flaws it said were actively exploited in the wild. This includes a pair of zero-days that have been weaponized in a mobile surveillance campaign called Operation Triangulation tha...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, and tvOS, as well as in the Safari browser, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitra...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser allows attackers to disclose protected information.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, watchOS, tvOS, and the Safari browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remot...

The vulnerability of the Web page rendering module in the Safari browser, developed by WebKit, and in the iPadOS and iOS operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit browsers of Safari, as well as in the iPadOS and iOS operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2023-32373

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

Apple releases emergency updates for two known-to-be-exploited vulnerabilities

On Friday April 7, 2023, Apple released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and our advice is to install them as soon as possible because all three updates include important security fixes. The Cybersecurity and Infrastructure Security Agency...

Vulnerabilities fixed in Apple macOS, iOS and iPadOS

Apple has fixed vulnerabilities in macOS, iOS, iPadOS and Safari. The vulnerabilities allow an unauthenticated remote malicious party to execute arbitrary code. execute. Apple says it has received signals of active misuse of the vulnerabilities. Organizations are advised to implement the made...

PT-2023-4223 · Apple +6 · Ipados +10

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 macOS Ventura versions prior to 13.3 Description: A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. The...