WebKit WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free

WebKit: use-after-free in WebCore::AccessibilityRenderObject::handleAriaExpandedChanged CVE-2017-7043 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigge...

WebKit - WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free

WebKit - WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free div visibility: collapse function eventhandler document.execCommand"bold", false; img.style.removeProperty"-webkit-appearance"; img.setAttribute"aria-expanded", "false"; aaa !--...