USN-4331-1 webkit2gtk vulnerability

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

WebKitGTK and WebKit Resource Management Error Vulnerability

WebKitGTK is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine. A resource management error vulnerability exists in...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

DEBIAN-CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

Design/Logic Flaw

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

WebKitGTK/WebKit (WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1) are affected by CVE-2020-11793 due to a use-after-free in processing crafted web content, leading to arbitrary code execution or memory corruption and potential Denial of Service. Connected advisories indicate fixes in WebKit...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a attacker to perform cross-site scripting attacks.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute a cross-site scripting attack...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of input data, allows attackers to perform spoofing attacks.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

Denial Of Service (DoS)

webkitgtk is vulnerable to denial of service DoS. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists as multiple use-after-free flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...

Access Restrictions Bypass

WebKitGTK+ is vulnerable to access restriction bypass. The attack exists because of a flaw found in the way WebKit handled DNS prefetching. Even when it was disabled, web content containing certain "link" elements could cause WebKitGTK+ to perform DNS prefetching...