16501 matches found
Critical: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Apple WebKit: HTMLFormElement::reset() use-after free（CVE-2017-2362）
PoC: function go output.value = "aaa"; output.appendChildinserteddiv; document.getElementById"output".addEventListener'DOMSubtreeModified', function forvar i=0; i foo Analysis: The bug is in HTMLFormElement::reset function, specifically in this part: for auto& associatedElement :...
Safari < 10.1 Multiple Vulnerabilities
Binary data 700033.prm...
Apple iOS < 10.3 Multiple Vulnerabilities
Binary data 700034.prm...
Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities
Binary data 700032.prm...
macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)
The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...
PT-2017-1687
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Safari versions prior to 10.1 iCloud versions prior to 6.2 on Windows iTunes versions prior to 12.6 on Windows tvOS versions prior to 10.2 Description The issue involves the WebKit component and allows remote attacke...
[SECURITY] Fedora 25 Update: webkitgtk4-2.16.0-1.fc25
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
Apple Fixes 223 Vulnerabilities Across macOS, iOS, Safari
Apple fixed hundreds of bugs, 223 to be exact, across a slate of products including macOS Sierra, iOS, Safari, watchOS, and tvOS on Monday. More than a quarter of the bugs, 40 in macOS Sierra, and 30 in iOS, could lead to arbitrary code execution – in some instances with root privileges, Apple...
About the security content of tvOS 10.1.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
PT-2017-1709
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Safari versions prior to 10.1 tvOS versions prior to 10.2 Description The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...
Apple Safari - Out-of-Bounds Read when Calling Bound Function Exploit
Exploit for multiple platform in category dos / poc var ba; function s alert"in s";...
Safari Browser: Out-of-bounds read when calling bound function(CVE-2017-2447)
There is an out-of-bounds read when reading the bound arguments array of a bound function. When Function.bind is called, the arguments to the call are transferred to an Array before they are passed to JSBoundFunction::JSBoundFunction. Since it is possible that the Array prototype has had a setter...
Safari Browser: Builtin JavaScript allows Function.caller to be used in strict mode(CVE-2017-2446)
If a builtin script in webkit is in strict mode, but then calls a function that is not strict, this function is allowed to call the Function. caller and can obtain a reference to the strict function. This is inconsistent with the behavior when executing non-builtin scripts in Safari, and the...
About the security content of iCloud for Windows 6.2
About the security content of iCloud for Windows 6.2 This document describes the security content of iCloud for Windows 6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Apple Safari - Out-of-Bounds Read when Calling Bound Function
Apple Safari - Out-of-Bounds Read when Calling Bound Function var ba; function s alert"in s"; ba = this; function g alert"in g"; return...
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode var q; function g //print"in g"; //printarguments.caller; //printg.caller; q = g.caller; //printg.caller; return 7; var a = 1, 2, 3; Object.defineProperty Array.prototype, "...
About the security content of Safari 10.1
About the security content of Safari 10.1 This document describes the security content of Safari 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Apple Safari - Builtin JavaScript Allows Function.caller to be Used in Strict Mode
var q; function g //print"in g"; //printarguments.caller; //printg.caller; q = g.caller; //printg.caller; return 7; var a = 1, 2, 3; Object.defineProperty Array.prototype, "1", get : g ; var a = 1, 2, 3; a.length = 4; Object.definePropertyArray.pro...