webkit: pointer authentication bypass

A vulnerability was found in Webkit. This flaw allows an attacker with arbitrary read and write capability to bypass pointer authentication...

PT-2024-1204

Name of the Vulnerable Software and Affected Versions webkit2gtk versions prior to 2.42.5-0ubuntu0.22.04.2 webkit2gtk3 affected versions not specified Apple products affected versions not specified Description The webkit2gtk and webkit2gtk3 engines contain a type confusion flaw. This issue is...

PT-2023-4201 · Apple +8 · Macos Ventura +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Safari versions prior to 16.6 watchOS versions prior to 9.6 Description: The issue is related to processing web content...

PT-2023-5474

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 16.6.1 Apple macOS versions prior to Ventura 13.6 Apple iOS versions prior to 16.7 Apple iPadOS versions prior to 16.7 Apple macOS Sonoma versions prior to 14 webkit2gtk versions prior to 2.42.1 Oracle Java SE...

PT-2024-7936

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.5 tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description The issue is relat...

PT-2023-4202 · Apple +8 · Macos Ventura +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 iOS versions prior to 16.6 iPadOS versions prior to 16.6 tvOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Safari versions prior to 16.6 watchOS versions prior to 9.6...

PT-2023-7335 · Apple +6 · Macos Sonoma +11

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.1.2 iPadOS versions prior to 17.1.2 macOS Sonoma versions prior to 14.1.2 Safari versions prior to 17.1.2 Description: The issue is related to an out-of-bounds read in the WebKit web browser engine, which may allow an...

CISA Adds Two Known Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability CVE-2022-29303 SolarView Compact Command Injection Vulnerability These types of vulnerabiliti...

Apple Multiple Products WebKit Code Execution Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely ...

macOS 13.x < 13.4.1 (a) WebKit Code Execution (HT213825)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.4.1 a. It is, therefore, affected by a code execution vulnerability in the WebKit component. Processing web content may lead to arbitrary code execution. Note that Nessus has not tested for these issues but has...

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only...

About the security content of Rapid Security Responses for macOS Ventura 13.4.1

About the security content of Rapid Security Responses for macOS Ventura 13.4.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only for the...

Apple & Microsoft Patch Tuesday, July 2023 Edition

Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple customers have their own zero-day woes again this month: On Monday, Apple...

Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari

Apple has released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address a zero-day flaw that it said has been actively exploited in the wild. The WebKit bug, cataloged as CVE-2023-37450, could allow threat actors to achieve arbitrary code execution when...

[Updated] Apple issues Rapid Security Response for zero-day vulnerability

Apple has issued an update for a vulnerability which it says may have been actively exploited. In the security content for Safari 16.5.2 we can learn that the vulnerability was found in the WebKit component which is Apples web rendering engine. In other words, WebKit is the browser engine that...

Vulnerability fixed in Apple macOS, iOS, iPadOS and Safari

Apple has released interim updates for macOS, iOS, iPadOS and Safari to fix a vulnerability in WebKit. A malicious party can exploit the vulnerability to execute arbitrary code execute arbitrary code with user privileges. The malicious party must to do so, trick the victim into opening a rogue fi...

VulnCheck KEV: CVE-2023-37450

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which...

About the security content of Safari 16.5.2

About the security content of Safari 16.5.2 This document describes the security content of Safari 16.5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only...

About the security content of Rapid Security Responses for macOS Ventura 13.4.1

About the security content of Rapid Security Responses for macOS Ventura 13.4.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only for the...