CVE-2016-4640: Improper Restriction of Operations within the Bounds of a Memory Buffer

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service memory corruption via a crafted app...

CVE-2016-4641: Improper Input Validation

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...

CVE-2016-4638: Undefined Security Weakness

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

PT-2016-2715

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue is related to a denial of service caused by a NULL pointer dereference in the Audio component of Apple OS X. Additionally, there are reports of vulnerabilities in the login window and...

The performance benefits of rel=noopener

If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. Example site Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfull...

PT-2016-6076

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue is related to the Login Window in Apple OS X, where it does not properly initialize memory. This allows local users to cause a denial of service via unspecified vectors. The problem is...

PT-2016-6078

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a type confusion in the Login Window...

OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

Firefox RCE

The vulnerability of Firefox lies in the use of Window.webidl for controlling access to docshell types, rather than page principal information. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code with Chrome privileges through content navigation, thereby...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the x-window-system package of the Debian GNU/Linux operating system may be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The x-window-system-dev package in the Debian GNU/Linux operating system has multiple vulnerabilities. Exploiting these vulnerabilities can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the x-window-system-core package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Java Platform Data Compromise

The vulnerabilities of the Java SE and Java SE Embedded software platforms allow a malicious actor to compromise the confidentiality, integrity, and accessibility of data by using the AWT subcomponent...

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the AWT subcomponent...

Thunderbird Bypass Window Object Restrictions

Mozilla Thunderbird’s email client contains a vulnerability related to incompatibility between JavaScript components. Exploiting this vulnerability allows malicious actors to bypass window object restrictions by utilizing incompatibility in the original JavaScript method receivers...

Mozilla SeaMonkey Bypass Window Object Restrictions

Mozilla SeaMonkey software contains a vulnerability related to incompatibility between JavaScript components. Exploiting this vulnerability allows malicious actors to circumvent window object restrictions by utilizing incompatibility in the original method-extractors of various JavaScript engines...

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to AWT components. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data by using the AWT component...

Thunderbird Code Execution

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, using a fragment of IDL to trigger a...

Firefox ESR Bypass Window Object Restrictions

The Mozilla Firefox ESR browser contains a vulnerability related to incompatibility with JavaScript software components. Exploiting this vulnerability allows malicious actors to bypass window object restrictions by utilizing incompatibility in the original method-extractors of various JavaScript...

Firefox Code Execution

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger the...