16344 matches found
webkit: processing malicious web content may lead to denial-of-service
No description is available for this CVE...
webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution
A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity ...
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user
A flaw was found in WebKit. This vulnerability allows a maliciously crafted webpage to fingerprint the user...
webkitgtk: Buffer overflow leading to arbitrary code execution
A buffer overflow vulnerability was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...
webkitgtk: Use-after-free may lead to application termination or arbitrary code execution
A flaw was found in webkitgtk in versions prior to 2.28.4 and in WPE WebKit in versions prior to 2.28.4. A use-after-free issue was found allowing a remote attacker to cause unexpected application termination or arbitrary code execution. The highest threat from this vulnerability is to data...
webkit: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in Webkit. Processing maliciously crafted web content may lead to an unexpected process crash...
webkitgtk: Processing web content may lead to arbitrary code execution
A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems...
webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports
A use-after-free vulnerability was found in the WebKitGTK's MediaRecorder API that may lead to memory corruption and Remote Code Execution. The victim needs to access a malicious web page to trigger this vulnerability...
webkitgtk: Type confusion issue leading to arbitrary code execution
A type confusion vulnerability was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
webkitgtk: Access to restricted ports on arbitrary servers via port redirection
A port redirection issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A malicious website may be able to access restricted ports on arbitrary servers. The highest threat from this vulnerability is to data integrity...
webkit: pointer authentication bypass
A vulnerability was found in Webkit. This flaw allows an attacker with arbitrary read and write capability to bypass pointer authentication...
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
[SECURITY] Fedora 42 Update: chromium-138.0.7204.49-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-138.0.7204.49-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-137.0.7151.119-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
📄 Glass Cage Zero-Click iMessage Exploit Details
Glass Cage, a vulnerability chain discovered on iOS 18.2, enables an attacker to compromise a device silently by sending a single malicious PNG image via iMessage. The exploit bypasses multiple layers of Apple's defenses, including BlastDoor, WebKit sandboxing, and CoreMedia memory protections...
[SECURITY] Fedora 41 Update: chromium-137.0.7151.103-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 42 Update: chromium-137.0.7151.103-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
