Fedora: Security Advisory for chromium (FEDORA-2022-17aa1c62da)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chromium (FEDORA-2022-0f14e2308e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: chromium-100.0.4896.127-1.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 35 Update: chromium-100.0.4896.127-1.fc35

Chromium is an open-source web browser, powered by WebKit Blink...

EUVD-2010-1431

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service application cra...

Debian: Security Advisory (DSA-5116-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Experts Uncover Spyware Attacks Against Catalan Politicians and Activists

A previously unknown zero-click exploit in Apple's iMessage was used to install mercenary spyware from NSO Group and Candiru against at least 65 individuals as part of a "multi-year clandestine operation." "Victims included Members of the European Parliament, Catalan Presidents, legislators,...

Buffer Overflow

webkit2gtk, edge is vulnerable to Buffer Overflow .The vulnerability exist in WebKitGTK and WPE WebKit because the flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22624

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22628

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22629

A buffer overflow vulnerability was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22637

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of protective measures for the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of information in erroneous data areas, allows attackers to gain access to confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

CVE-2022-22624

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

[SECURITY] Fedora 35 Update: chromium-99.0.4844.84-1.fc35

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 34 Update: chromium-99.0.4844.84-1.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Apple Rushes Out Patches for 0-Days in MacOS, iOS

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity. Apple released separate security updates for the bugs – a vulnerability affecting both macOS and iOS...