CVE-2022-26709

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22662

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code during the processing of malicious web content...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, caused by synchronization errors when using a common resource, allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon processing malicious web content...

Apple iOS Webkit Memory Corruption Vulnerability

Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service DoS via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which re...

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s Safari, which allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s Safari browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

About the security content of iTunes 12.12.4 for Windows

About the security content of iTunes 12.12.4 for Windows This document describes the security content of iTunes 12.12.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

GHSA-9568-HCJ9-RF7V Webkit PDFs for TYPO3 has SQL Injection vulnerability

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

GHSA-XQ29-JCJ7-XG86 Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Webkit PDFs for TYPO3 has SQL Injection vulnerability

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

PT-2022-3417 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS versions prior to 12.4 Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Description: A memory corruption...

PT-2022-7003 · Apple +9 · Webkit +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 Description: A use after free issue was addressed with improved memory management. This...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A buffer error vulnerability exists in tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a boundary error when processing HTML content in WebKit. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

PT-2022-3415 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Monterey versions prior to 12.4 Apple Safari versions prior to 15.5 Description: A memory...

Apple tvOS 资源管理错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a resource management error vulnerability that originates from a post-release reuse error in WebKit when processing HTML content. A remote attacker could trick a victim into visiting a specially crafted website,...

About the security content of Safari 15.5

About the security content of Safari 15.5 This document describes the security content of Safari 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...