USN-4331-1: WebKitGTK+ vulnerability

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

WebKitGTK and WebKit Resource Management Error Vulnerability

WebKitGTK is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine. A resource management error vulnerability exists in...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

DEBIAN-CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

Design/Logic Flaw

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

WebKitGTK/WebKit (WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1) are affected by CVE-2020-11793 due to a use-after-free in processing crafted web content, leading to arbitrary code execution or memory corruption and potential Denial of Service. Connected advisories indicate fixes in WebKit...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

CVE-2020-11793: Use After Free

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

WebKitGTK WebKit Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

WebKitGTK WebKit Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

CVE-2020-11793

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...

WebKitGTK WPE XSS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute a cross-site scripting attack...

WebKitGTK WebKit Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...

WebKitGTK WebKit Spoofing

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

PT-2020-6812

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.28.1 WPE WebKit versions prior to 2.28.1 Description The issue is related to a use-after-free problem in the WebKitGTK and WPE WebKit modules for displaying web pages. This can be exploited by a remote attacker...

Arbitrary Code Execution

webkitgtk is vulnerable to arbitrary code execution. The vulnerability exists as multiple use-after-free flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the...