Use After Free

webkit2gtk is vulnerable to use after free. The vulnerability exists due to a use-after-free in WebCore::Frame::page...

Debian DSA-5060-1 : webkit2gtk - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5060 advisory. - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadO...

Debian: Security Advisory (DSA-5060-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5060-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5060-1 [email protected] https://www.debian.org/security/ Alberto Garcia January 25, 2022 https://www.debian.org/security/faq -...

DSA-5060-1 webkit2gtk - security update

Bulletin has no description...

[SECURITY] Fedora 35 Update: webkit2gtk3-2.34.4-2.fc35

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

Debian: Security Advisory (DSA-5030-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5030-1 : webkit2gtk - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5030 advisory. The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30887 Narendra Bhati discovered that processing maliciously crafted...

[SECURITY] [DSA 5030-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5030-1 [email protected] https://www.debian.org/security/ Alberto Garcia December 23, 2021 https://www.debian.org/security/faq -...

HTTP Strict Transport Security (HSTS) Bypass

webkit2gtk is vulnerable to HTTP Strict Transport Security bypass. The vulnerability exists due to a lack of authentication of the security mechanism allowing an attacker to bypass the security HSTS...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. An attacker is able to exfiltrate data cross-origin via a malicious website...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. The vulnerability exists due to a logic issue...

Information Disclosure

webkit2gtk:edge is vulnerable to information disclosure. The issue was resolved with additional restrictions on CSS compositing.Visiting a maliciously crafted website may reveal a user's browsing history...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists via Content Security Policy redirect behavior...

Denial Of Service (DoS)

webkit2gtk:edge is vulnerable to denial of service.Lack of proper memory handling allows a buffer overflow, allowing an attacker to process maliciously crafted web content leading to arbitrary code execution...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a logic issue...

DSA-5030-1 webkit2gtk - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-5127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5127-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists due to a memory corruption allowing an attacker to inject maliciously crafted script into the system...