1558 matches found
Apple iOS WebKit Memory Corruption Vulnerability
iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A memory corruption vulnerability exists in Apple iOS versions WebKit prior to 9.3.5, which can be exploited by an attacker to execute arbitrary code or cause a...
CVE-2016-4657
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing intruders to obtain confidential information
The vulnerability of XSS filters in browsers Internet Explorer and Microsoft Edge does not properly restrict JavaScript code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially crafted website...
The vulnerability of the Firefox browser, which allows a hacker to gain access to local files
The vulnerability of Firefox browsers is related to an improper limitation during the “drag-and-drop” operation for the file:URL object. Exploiting this vulnerability can allow a remote attacker to gain access to local files through a specially crafted website...
Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-06275)
Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a memory corruption vulnerability due to the program not handling memory objects correctly. Allowing a remote attacker to pass through a constructed website, exploitation of the vulnerability could...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-06257)
Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer 11 does not properly handle memory objects and suffers from a memory corruption vulnerability, which could allow a remote attacker to execute arbitrary code or cause a denial of service via a constructed Web site...
CVE-2016-3296
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...
Internet Explorer Memory Corruption Vulnerability
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...
Multiple Apple Products WebKit Information Disclosure Vulnerability
Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community, and is used by browsers such as Apple Safari and Google Chrome...
Multiple Apple Products WebKit Denial of Service Vulnerability
Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...
chromium-browser: use-after-free in extensions
The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified...
Design/Logic Flaw
WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...
CVE-2016-1711
Removed by vendor...
UBUNTU-CVE-2016-1711
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...
CVE-2016-4592
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service memory consumption via a crafted web site...
UBUNTU-CVE-2016-4592
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service memory consumption via a crafted web site...
UBUNTU-CVE-2016-4584
The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2016-4587
CVE-2016-4587 affects WebKit in Apple iOS versions before 9.3.3 and tvOS versions before 9.2.2. The described flaw enables remote attackers to obtain sensitive information from uninitialized process memory when visiting a crafted website. The issue is categorized as an information-disclosure vuln...
CVE-2016-5135
WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...