About the security content of Safari 14.1.1

About the security content of Safari 14.1.1 This document describes the security content of Safari 14.1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

webkitgtk: use-after-free may lead to arbitrary code execution

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in a remote code execution. The victim needs to visit a malicious web site to trigger this vulnerability...

[SECURITY] Fedora 33 Update: chromium-90.0.4430.93-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora: Security Advisory for chromium (FEDORA-2021-c3754414e7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: chromium-90.0.4430.93-1.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 32 Update: chromium-90.0.4430.93-1.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

WebKitGTK Code Execution

The vulnerability of the web page rendering module in WebKitGTK-based operating systems such as Apple MacOS, iOS, and iPadOS relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web pag...

Apple Fixes Zero‑Day Security Bugs Under Active Attack

Apple has issued out-of-band patches for critical security issues affecting iPad, iPhone and iPod, which could allow remote code execution RCE and other attacks, completely compromising users’ systems. And, the computing giant thinks all of them may have already been exploited in the wild. Three ...

Apple Releases Urgent Security Patches For Zero‑Day Bugs Under Active Attacks

Apple on Monday released security updates for iOS, macOS, and watchOS to address three zero-day flaws and expand patches for a fourth vulnerability that the company said might have been exploited in the wild. The weaknesses all concern WebKit, the browser engine which powers Safari and other...

VulnCheck KEV: CVE-2021-30663

Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products...

VulnCheck KEV: CVE-2021-30665

Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products...

VulnCheck KEV: CVE-2021-30666

Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML...

About the security content of macOS Big Sur 11.3.1

About the security content of macOS Big Sur 11.3.1 This document describes the security content of macOS Big Sur 11.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of watchOS 7.4.1

About the security content of watchOS 7.4.1 This document describes the security content of watchOS 7.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iOS 12.5.3

About the security content of iOS 12.5.3 This document describes the security content of iOS 12.5.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iOS 14.5.1 and iPadOS 14.5.1

About the security content of iOS 14.5.1 and iPadOS 14.5.1 This document describes the security content of iOS 14.5.1 and iPadOS 14.5.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Apple iOS Buffer Overflow Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices. Apple iOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit. The following products and versions are affected: Apple iOS: 12.0 16A366, 12.0 16A367, 12.0.1 16A404, 12.0.1 16A405, 12.1...

curl: CVE-2021-22901: TLS session caching disaster

Summary: lib/vtls/openssl.c osslconnectstep1 sets up the osslnewsessioncb sessionid callback with SSLCTXsesssetnewcb, and adds association from dataidx and connectdataidx to current conn and data respectively: SSLCTXsetsessioncachemodebackend-ctx, SSLSESSCACHECLIENT | SSLSESSCACHENOINTERNAL;...

Apple WebKitGTK+ Cross-Site Scripting Vulnerability

WebKitGTK+ is a full-featured port of the WebKit engine and contains all of WebKit's features. A cross-site scripting vulnerability exists in WebKitGTK+ that stems from insufficient harmless handling of user-supplied data in WebKit. The following products and versions are affected: WebKitGTK+:...

WebKitGTK+ Resource Management Vulnerability

WebKitGTK+ is a full-featured port of the WebKit engine and contains all of WebKit's functionality. A resource management error vulnerability exists in WebKitGTK+, which stems from a use-after-the-fact error when processing web content in the WebKit Storage component. The following products and...