Apple iOS webkit element handling validation vulnerability

Apple iOS is an operating system for Apple smart devices. A validation vulnerability exists in the Webkit processing element used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can be used to bypass security...

Apple iOS webkit element handling validation vulnerability (CNVD-2017-06746)

Apple iOS is an operating system for Apple smart devices. A processing validation vulnerability exists in the Webkit processing element used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can be used to bypass...

Apple iOS WebKit Web Inspector Memory Corruption Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple smart devices. A memory corrupting arbitrary code execution vulnerability exists in Apple iOS WebKit Web Inspector, which allows attackers to exploit the vulnerability to build a malicious web page that can be clicked by a user, which can crash the...

Apple iOS webkit address bar forgery vulnerability

Apple iOS is an operating system for Apple smart devices. A spoofing vulnerability exists in the address bar of the Webkit user interface used by Apple iOS, which allows an attacker to construct malicious links and trick users into clicking on them, which can spoof the address bar...

Apple iOS webkit bookmark forgery vulnerability

Apple iOS is an operating system for Apple smart devices. The creation of bookmarks in Webkit used by Apple iOS suffers from authentication forgery, which allows an attacker to construct malicious links and trick users into clicking on them, which could spoof bookmarks or execute arbitrary code...

Apple iOS webkit type obfuscation vulnerability

Apple iOS is an operating system for Apple smart devices. A memory obfuscation vulnerability exists in Webkit used by Apple iOS, which allows an attacker to exploit the vulnerability to build a malicious web page that can be clicked on by a user, which can crash the application or execute arbitra...

Apple iOS webkit CSP bypass vulnerability

Apple iOS is an operating system for Apple smart devices. A CSP restriction bypass vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can bypass security restrictions and perform...

Apple iOS webkit memory corruption vulnerability (CNVD-2017-06738)

Apple iOS is an operating system for Apple smart devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can crash the application or execute arbitrary co...

Apple iOS webkit sensitive memory leak vulnerability

Apple iOS is an operating system for Apple smart devices. A sensitive memory disclosure vulnerability exists in the Webkit Handling OpenGL shaders used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by the user, which can be...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

Code injection

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

UBUNTU-CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

CVE-2011-3438

CVE-2011-3438 affects WebKit as used in Safari 5.0.6. The vulnerability allows remote attackers to cause a denial of service (process crash) or arbitrary code execution via the WebKit component. This is consistently described across multiple sources (e.g., NVD/NVDC and CNVD references). The provi...

About the security content of iCloud for Windows 6.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

PT-2017-1977

Name of the Vulnerable Software and Affected Versions Safari version 5.0.6 Description The issue is caused by a buffer overflow in the WebKit component, allowing remote attackers to cause a denial of service or execute arbitrary code. Recommendations For Safari version 5.0.6, consider updating to...

CVE-2011-3438: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

Apple WebKit: Type confusion in RenderBox with accessibility enabled（CVE-2017-2373）

There is a type confusion vulnerability that affects WebKit with accessibility enabled WebCore::AXObjectCache::gAccessibilityEnabed. PoC: function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo Bad cast...

Apple WebKit Safari 10.0.2(12602.3.12.0.1) - operationSpreadGeneric Universal Cross-Site Scripting

Apple WebKit Safari 10.0.212602.3.12.0.1 - operationSpreadGeneric Universal Cross-Site Scripting 'use strict'; function spreada return ...a; let arr = Object.create1, 2, 3, 4; for let i = 0; i f.onload = null; try spreadf.contentWindow; catch e e.constructor.constructor'alertlocation'; ; f.src =...