CVE-2017-2350: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

CVE-2017-2365: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

PT-2017-15392

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 tvOS versions prior to 10.1.1 Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy, obtaining sensitive information via a...

PT-2017-15377

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 tvOS versions prior to 10.1.1 Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy. This enables attackers to obtain...

PT-2017-15391

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

PT-2017-15390

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 tvOS versions prior to 10.1.1 watchOS versions prior to 3.1.3 Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy,...

[ASA-201702-2] qt5-webengine: multiple issues

Arch Linux Security Advisory ASA-201702-2 ========================================= Severity: High Date : 2017-02-02 CVE-ID : CVE-2016-5182 CVE-2016-5183 CVE-2016-5189 CVE-2016-5199 CVE-2016-5201 CVE-2016-5203 CVE-2016-5204 CVE-2016-5205 CVE-2016-5206 CVE-2016-5207 CVE-2016-5208 CVE-2016-5210...

CVE-2016-5224

A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page...

CVE-2016-5206

The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page...

CVE-2016-5224: Undefined Security Weakness

A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page...

CVE-2016-5206: Improper Access Control

The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page...

CVE-2017-0002: Undefined Security Weakness

Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege Vulnerability."...

PT-2017-10424

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs. This is an elevation of privilege vulnerability that exists...

PT-2016-3083

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 Safari versions prior to 10.0.2 iCloud versions prior to 6.1 iTunes versions prior to 12.5.4 Description The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2016-7281: Undefined Security Weakness

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."...

Debian DLA-752-1 : icedove security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors, same-origin policy bypass issues, integer overflows, buffer overflows and use-after-frees may lead to the execution of arbitrary code or denial of service...

[ASA-201612-18] qt5-webengine: multiple issues

Arch Linux Security Advisory ASA-201612-18 ========================================== Severity: Critical Date : 2016-12-17 CVE-ID : CVE-2016-5133 CVE-2016-5147 CVE-2016-5153 CVE-2016-5155 CVE-2016-5161 CVE-2016-5166 CVE-2016-5170 CVE-2016-5171 CVE-2016-5172 CVE-2016-5181 CVE-2016-5185 CVE-2016-51...

[SECURITY] [DSA 3730-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3730-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 11, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3730-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3730.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3730-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...