The vulnerability of the web page rendering module in the WebKitGTK browser of Apple’s Safari, as well as in Apple’s Mac OS, iOS, iPadOS, watchOS, and tvOS operating systems, allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in the WebKitGTK browser of Apple’s Safari, as well as in Apple’s Mac OS, iOS, iPadOS, watchOS, and tvOS operating systems, is related to the use of memory after it is freed during the processing of web content. Exploiting this vulnerability can...

The vulnerability of the web page rendering module in WebKitGTK of Apple MacOS operating systems, related to incorrect handling of logical operations, allows an attacker to execute arbitrary code.

The vulnerability of the web page rendering module in WebKitGTK on Apple MacOS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...

[SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

UBUNTU-CVE-2021-3481

A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in qt/qtbase/src/gui/painting/qdrawhelperp.h in Qt/Qtbase. While rendering and displaying a crafted Scalable Vector Graphics SVG file this flaw may lead to an unauthorized memory access. The highest threat...

The vulnerability of Google Chrome’s browser, which arises from reading data beyond the specified buffer, allows attackers to compromise the rendering process and expose the protected information.

The vulnerability of Google Chrome exists because it reads data beyond the specified buffer. Exploiting this vulnerability allows a remote attacker to compromise the rendering process and expose the protected information through a specially crafted HTML page...

The vulnerability of the Blink rendering module in Google Chrome browsers, related to the improper assignment of permissions for critical resources, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

The vulnerability of Blink’s web page display mechanism in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

[SECURITY] Fedora 34 Update: webkit2gtk3-2.32.0-1.fc34

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

[SECURITY] Fedora 34 Update: qt5-qtsvg-5.15.2-4.fc34

Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices...

HackerOne: Attachment object in GraphQL continues to grant access to files, even if they are removed from rendering

Summary: Hi team, Our team noticed that youprogram can attach files to the policy page. These files can be anything, images, text, archive, etc.In other words, these files may or may not contain sensitive information. Our team believes that the data that can be attached in different vectors is hi...

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

[SECURITY] Fedora 34 Update: zathura-pdf-mupdf-0.3.6-6.fc34

This plugin adds PDF support to zathura using the mupdf rendering engine...

Gitlab -- Multiple vulnerabilities

Gigtlab reports: Remote code execution via unsafe user-controlled markdown rendering options...

The vulnerability of the Parser::getObj() function in the Poppler PDF rendering library allows a attacker to trigger a service failure.

The vulnerability of the Parser::getObj function in the Poppler PDF rendering library is related to the infinite loop that can occur during execution. Exploiting this vulnerability could allow an attacker to cause a service failure...

Fedora: Security Advisory for mupdf (FEDORA-2021-d8e6f014e5)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2021-3377

The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting XSS vulnerability. This issue is fixed in v5.0.0...

[SECURITY] Fedora 33 Update: zathura-pdf-mupdf-0.3.6-6.fc33

This plugin adds PDF support to zathura using the mupdf rendering engine...

[SECURITY] Fedora 33 Update: mupdf-1.18.0-5.fc33

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Oracle Linux 8 : grub2 (ELSA-2021-0696)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0696 advisory. - Add CVE-2020-15706, CVE-2020-15707 to the list Orabug: 31225072 Tenable has extracted the preceding description block directly from the Oracle Linux...

ALPINE-CVE-2021-20233

A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one...