Apple iOS webkit type obfuscation vulnerability

Apple iOS is an operating system for Apple smart devices. A memory obfuscation vulnerability exists in Webkit used by Apple iOS, which allows an attacker to exploit the vulnerability to build a malicious web page that can be clicked on by a user, which can crash the application or execute arbitra...

Apple iOS webkit CSP bypass vulnerability

Apple iOS is an operating system for Apple smart devices. A CSP restriction bypass vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can bypass security restrictions and perform...

Apple iOS webkit sensitive memory leak vulnerability

Apple iOS is an operating system for Apple smart devices. A sensitive memory disclosure vulnerability exists in the Webkit Handling OpenGL shaders used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by the user, which can be...

Apple iOS webkit address bar forgery vulnerability

Apple iOS is an operating system for Apple smart devices. A spoofing vulnerability exists in the address bar of the Webkit user interface used by Apple iOS, which allows an attacker to construct malicious links and trick users into clicking on them, which can spoof the address bar...

Apple iOS webkit element handling validation vulnerability (CNVD-2017-06746)

Apple iOS is an operating system for Apple smart devices. A processing validation vulnerability exists in the Webkit processing element used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can be used to bypass...

Apple iOS webkit memory corruption vulnerability (CNVD-2017-06738)

Apple iOS is an operating system for Apple smart devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can crash the application or execute arbitrary co...

Apple iOS webkit bookmark forgery vulnerability

Apple iOS is an operating system for Apple smart devices. The creation of bookmarks in Webkit used by Apple iOS suffers from authentication forgery, which allows an attacker to construct malicious links and trick users into clicking on them, which could spoof bookmarks or execute arbitrary code...

Apple iOS WebKit Web Inspector Denial of Service Vulnerability

Apple iOS is an operating system for Apple smart devices. A denial of service vulnerability exists in Apple iOS WebKit Web Inspector, which allows attackers to exploit the vulnerability to build malicious WEB pages that can be clicked by users, which can crash the application...

Apple iOS WebKit Web Inspector Memory Corruption Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple smart devices. A memory corrupting arbitrary code execution vulnerability exists in Apple iOS WebKit Web Inspector, which allows attackers to exploit the vulnerability to build a malicious web page that can be clicked by a user, which can crash the...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

Code injection

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

UBUNTU-CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

CVE-2011-3438

CVE-2011-3438 affects WebKit as used in Safari 5.0.6. The vulnerability allows remote attackers to cause a denial of service (process crash) or arbitrary code execution via the WebKit component. This is consistently described across multiple sources (e.g., NVD/NVDC and CNVD references). The provi...

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...

About the security content of iCloud for Windows 6.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Apple WebKit: Type confusion in RenderBox with accessibility enabled（CVE-2017-2373）

There is a type confusion vulnerability that affects WebKit with accessibility enabled WebCore::AXObjectCache::gAccessibilityEnabed. PoC: function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo Bad cast...

The vulnerability of Safari browser and iOS operating system allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or obtain confidential information through a specially...

The vulnerability of Safari browser and iOS operating system allows attackers to bypass security policy mechanisms.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security policy mechanisms using uncertain vectors...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to obtain confidential information from the process’s memory.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a...