[SECURITY] Fedora 39 Update: chromium-120.0.6099.62-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

VulnCheck KEV: CVE-2010-1807

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document,...

[SECURITY] Fedora 37 Update: chromium-119.0.6045.199-1.fc37

Chromium is an open-source web browser, powered by WebKit Blink...

Update your iPhones! Apple fixes two zero-days in iOS

Apple has released emergency security updates for iOS 17.1.2 and iPadOS 17.1.2 to patch for two zero-day vulnerabilities that may have been actively exploited. Apple said both vulnerabilities were in the WebKit component, which is the engine that powers Safari browser on Macs as well as all...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability These types...

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

The vulnerability of operating systems such as iOS, iPadOS, macOS, and the browser Safari, related to lack of access control, allows attackers to disclose protected information.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information processed from web content...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which...

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

Apple has released software updates for iOS, iPadOS, macOS, and Safari web browser to address two security flaws that it said have come under active exploitation in the wild on older versions of its software. The vulnerabilities, both of which reside in the WebKit web browser engine, are describe...

Fedora: Security Advisory for chromium (FEDORA-2023-4e555aedeb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-145f259a77)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...

[SECURITY] Fedora 38 Update: chromium-119.0.6045.199-1.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 39 Update: chromium-119.0.6045.199-1.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

About the security content of iOS 17.1.2 and iPadOS 17.1.2

About the security content of iOS 17.1.2 and iPadOS 17.1.2 This document describes the security content of iOS 17.1.2 and iPadOS 17.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

VulnCheck KEV: CVE-2023-42916

Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple...

About the security content of Safari 17.1.2

About the security content of Safari 17.1.2 This document describes the security content of Safari 17.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of macOS Sonoma 14.1.2

About the security content of macOS Sonoma 14.1.2 This document describes the security content of macOS Sonoma 14.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...