Design/Logic Flaw

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1459

The CVE-2011-1459 entry affects Google Chrome prior to Blink M11, via the WebKit::WebPluginContainerImpl::handleEvent routine. The vulnerability arises when handling events with the htmlpluginelement.cpp plugin, allowing an attacker to cause a denial of service (crash). The cited sources confirm ...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

CVE-2011-1460 affects WebKit in Google Chrome prior to Blink M11. The vulnerability is a faulty cast to RenderBlock when anonymous blocks are renderblocks, caused by a type-casting issue in WebKit's rendering path. The impact, as reflected in CVSS, includes partial confidentiality, integrity, and...

webkitgtk: HTTP proxy setting deanonymization information disclosure

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

webkitgtk: processing maliciously crafted web content lead to URI spoofing

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

Multiple Apple Products WebKit Process Model Component Memory Corruption Vulnerability

Apple iOS and others are products of Apple Inc.Apple iOS is a set of operating systems developed for mobile devices.Apple tvOS is a set of operating systems for smart TVs.Apple iCloud for Windows is a Windows-based cloud service. The product supports storage of music, photos, apps, contacts, etc...

WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive

WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive VULNERABILITY DETAILS bool JSObject::putInlineSlowExecState exec, PropertyName propertyName, JSValue value, PutPropertySlot& slot ASSERT!isThisValueAlteredslot, this; VM& vm = exec-vm; auto scope = DECLARETHROWSCOPEvm;...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-41296)

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc...

Code Execution Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-41297)

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc...

Unspecified Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-46132)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-46969)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-41305)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A memory corruption vulnerability exists in the WebKit component of several Apple products,...

Apple iTunes for Windows and Apple iCloud for Windows WebKit Component Memory Corruption Vulnerability

Apple iTunes for Windows and Apple iCloud for Windows are both products of Apple Inc.Apple iTunes for Windows is a media player application for the Windows platform.Apple iCloud for Windows is Apple iCloud for Windows is a Windows-based cloud service. The product supports storage of music, photos...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-46956)

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system. WebKit is one of the web...

Unspecified Vulnerability in WebKit Components of Multiple Apple Products

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-41306)

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps, contacts, etc...