Apple WebKit KeyframeEffect Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the KeyframeEffect...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using malicious web content...

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue...

Apple Hurries Patches for Safari Bugs Under Active Attack

Apple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that “may have been actively exploited,” according to a Monday security bulletin by the company. The bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released...

Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

Apple on Monday shipped out-of-band security patches to address two zero-day vulnerabilities in iOS 12.5.3 that it says are being actively exploited in the wild. The latest update, iOS 12.5.4, comes with fixes for three security bugs, including a memory corruption issue in ASN.1 decoder...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems and Mac OS lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content, from a remot...

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content, from a remot...

The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code using malicious web content...

The vulnerability of the web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKit operating systems for tvOS, iOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using malicious web content...

The vulnerability of the Web page rendering module in WebKitGTK and the WPE port of WebKit operating systems on Mac OS, related to the use of memory after it is freed, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in WebKitGTK and the WPE port of WebKit operating systems on Mac OS is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created malicious web content...

VulnCheck KEV: CVE-2021-30762

Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML...

VulnCheck KEV: CVE-2021-30761

Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML...

About the security content of iOS 12.5.4

About the security content of iOS 12.5.4 This document describes the security content of iOS 12.5.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple iOS 资源管理错误漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. Apple iOS suffers from a resource management error vulnerability that originates from a boundary error when processing HTML content in the WebKit component. An attacker could exploit this vulnerability to execute arbitra...

Vulnerability Spotlight: Use-after-free vulnerability in WebKit

Marcin Towalski of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The WebKit browser engine contains a use-after-free vulnerability in its GraphicsContext function. A malicious web page code could trigger a use-after-free error, which could lead to a potential information...

Fedora: Security Advisory for chromium (FEDORA-2021-7190a83164)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WebKitGTK+ 资源管理错误漏洞

WebKitGTK is a full-featured port of the WebKit rendering engine for projects that require any type of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedded syste...

WebKit WebKitGTK 资源管理错误漏洞

WebKitGTK+ is a full-featured port of the WebKit engine and includes all of WebKit's features. A resource management error vulnerability exists in Webkit WebKitGTK, which stems from a problem with the way certain events are handled by the ImageLoader image loading object in Webkit WebKitGTK 2.30....

Webkit ImageLoader dispatchPendingErrorEvent use-after-free vulnerability

Summary A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. In order to trigger the vulnerability, a victim must be...