CVE-2020-13558: Use After Free

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.5-1.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

USN-4739-1 webkit2gtk vulnerability

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

USN-4739-1: WebKitGTK vulnerability

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

[SECURITY] Fedora 33 Update: webkit2gtk3-2.30.5-1.fc33

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

CVE-2020-13558

A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity ...

WebKitGTK Resource Management Error Vulnerability

WebKitGTK is KDE, Apple Apple, Google Google and other companies to develop a set of open source Web browser engine. WebKitGTK suffers from a denial of service vulnerability that allows triggering a denial of service and potentially running code...

CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

UBUNTU-CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

PT-2021-5834

Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.4 Description A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of WebKit. This vulnerability can be exploited by a remote attacker, allowing them to access confidentia...

PT-2021-5827

Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.4 Description A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events. This can lead to a potential information leak and further memory corruption when a victim visits a specially...

PT-2021-2557

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 14.0.3 macOS Big Sur versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave tvOS versions prior to 14.4 watchOS versions prior to 7.3 iOS...

CentOS 8 : GNOME (CESA-2020:4451)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...

CentOS 8 : GNOME (CESA-2019:3553)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3553 advisory. - webkitgtk: HTTP proxy setting deanonymization information disclosure CVE-2019-11070 - evince: uninitialized memory use in function tiffdocumentrender...

GLSA-202012-10 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-10 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : An attacker, by enticing a user to visit...

Vulnerabilities fixed in WebKitGTK

Vulnerabilities have been fixed in WebKitGTK. The vulnerabilities allow a malicious person to execute arbitrary code execute under the user's privileges. The malicious party must victim to open a rogue page to exploit these vulnerabilities to be exploited. The developers of WebKitGTK have release...

PT-2020-6243

Name of the Vulnerable Software and Affected Versions WebKitGTK version 2.30.3 Description A use-after-free vulnerability exists in the WebKitGTK browser, allowing remote code execution when a victim visits a malicious web site. The issue is triggered by a specially crafted HTML web page, causing...

[SECURITY] Fedora 32 Update: webkit2gtk3-2.30.3-1.fc32

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-e8a7566e80)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WebKitGTK post-release reuse vulnerability

WebKitGTK is a full-featured port of the WebKit rendering engine.A post-release reuse vulnerability exists in the WebSocket functionality of WebKitGTK 2.30.0. An attacker could exploit the vulnerability to achieve remote code execution by tricking a user into visiting a specially crafted web page...