2 matches found
WebKit CSSCrossfadeValue::crossfadeChanged Use-After-Free Vulnerability
WebKit: Use-after-free of RenderMathMLToken in CSSCrossfadeValue::crossfadeChanged There is a use-after-free of a RenderMathMLToken object in CSSCrossfadeValue::crossfadeChanged. CSSCrossfadeValue extends CSSImageGeneratorValue. CSSImageGeneratorValue keeps a HashCountedSet of clients mclients of...
8.8CVSS8.6AI score0.34574EPSS
SaveExploits2
WebKit CSSCrossfadeValue::crossfadeChanged Use-After-Free
WebKit: Use-after-free of RenderMathMLToken in CSSCrossfadeValue::crossfadeChanged There is a use-after-free of a RenderMathMLToken object in CSSCrossfadeValue::crossfadeChanged. CSSCrossfadeValue extends CSSImageGeneratorValue. CSSImageGeneratorValue keeps a HashCountedSet of clients mclients of...
8.8CVSS8.8AI score0.34574EPSS
SaveExploits2
20