[SECURITY] [DSA 4797-2] webkit2gtk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4797-2 [email protected] https://www.debian.org/security/ Alberto Garcia December 22, 2020 https://www.debian.org/security/faq -...

DSA-4797-2 webkit2gtk - regression update

Bulletin has no description...

USN-4648-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

[ASA-202011-28] webkit2gtk: arbitrary code execution

Arch Linux Security Advisory ASA-202011-28 ========================================== Severity: Medium Date : 2020-11-26 CVE-ID : CVE-2020-9983 CVE-2020-13543 CVE-2020-13584 Package : webkit2gtk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1291 Summary...

Debian: Security Advisory (DSA-4797-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4797-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9948 Brendan Draper discovered that processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2020-9951 Marcin Noga discovered that processing maliciously crafted web content...

[SECURITY] [DSA 4797-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4797-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 23, 2020 https://www.debian.org/security/faq -...

Arbitrary Code Execution

Webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as a use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content...

Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists through a logic issue of improved state management...

Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution...

OS Command Injection

webkit2gtk is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS command via the Web Inspector...

Arbtirary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. An out-of-bounds read allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. Attacker inject the maliciously crafted content to crate an memory corruption issue,Its leads to arbitrary code execution...

Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. A memory corruption issue allows an attacker to execute arbitrary code on the host OS via malicious web content...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting XSS. The vulnerability exists as it fail to properly restrict input in web content...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution RCE. It is due to a memory corruption issue allowing the processing of maliciously crafted web content...

Arbitrary Code Execution

webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists as there was a logic issue that did not adhere to restrictions...

Debian DSA-4739-1 : webkit2gtk - security update

The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-9862 Ophir Lojkine discovered that copying a URL from the Web Inspector may lead to command injection. - CVE-2020-9893 0011 discovered that a remote attacker may be able to cause unexpected application...

Ubuntu: Security Advisory (USN-4444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4739-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...