WebKitGTK-DND-Fix

WebKitGTK-DND-Fix CVE-2025-13947 이후 WebKitGTK 및 WPE에서 신뢰할 수 있는 파일 드래그 앤 드롭을 복원하기 위한 연구 및 CI 노트북. 문제 CVE-2025-13947WSA-2025-0009, GHSA-j77f-3hf7-7rvg은 WebKitGTK에서 드래그 앤 드롭을 통해 웹 콘텐츠가 로컬 파일 내용을 읽을 수 있게 했습니다. 업스트림 수정bugs.webkit.org 303434은 광범위한 비활성화였습니다. allowsFileAccess가 모든 비 Cocoa 포트에서 false를 반환하므...

CVE-2022-22620

CVE-2022-22620 - "Zombie" Safari의 use-after-free Infoleak 익스플로잇 - JSObject의 주소 누출 테스트 환경: webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz Google Project Zero의 원본 PoC: https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-22620.html...

CVE-2021-30809-OOM

CVE-2021-30809 — Apple WebKit Use-After-Free 취약점크래시 PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 개요 이 저장소는 WebKit의 use-after-freeUAF 취약점인 CVE-2021-30809를 위한 최소한의 크래시 유발 하네스입니다. 이 PoC는 조작된 웹 콘텐츠를 처리하여 취약한 코드 경로를 실행하며, 완전한 익스플로잇이 아닌 브라우저 크래시를 안정적으로 유발하는 것을 목표로...

CVE-2014-1303

CVE-2014-1303 PoC для Linux CVE-2014-1303 WebKit Heap based BOF — это proof of concept для Linux. Этот репозиторий демонстрирует уязвимость переполнения буфера в куче WebKit CVE-2014-1303 на Linux. Использовался в лекции seccamp. ПРИМЕЧАНИЕ: Оригинальный эксплойт написан для Mac OS X и PS4...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 bsc1275791. Changes for webkit2gtk3: Update to...

TencentOS Server 4: webkitgtk (TSSA-2026:0965)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0965 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

DEBIAN-CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

UBUNTU-CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

EUVD-2026-68809

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596

CVE-2026-83596 is a memory corruption vulnerability in WebKitGTK caused by improper handling of the featurelist array in the OpenTypeVerticalData::findFeature function. Processing malicious web content can trigger the flaw, leading to memory corruption with high impact on confidentiality, integri...

CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server,...

Linux Distros Unpatched Vulnerability : CVE-2026-83596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. CVE-2026-83596 Note that Nessus...

PT-2026-84034

Name of the Vulnerable Software and Affected Versions WebKitGTK affected versions not specified Description Improper memory handling when processing malicious web content can lead to memory corruption. Recommendations At the moment, there is no information about a newer version that contains a fi...

CVE-2026-43794

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-65341

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server,...

CVE-2026-65351

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...