16344 matches found
Malicious code in time-webkit-tag (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da59763ac0349051b13656079486ab8c8c08971ff18c5efa84fbf8f5ce022a0 On require of the package, index.js loads init.js which unconditionally invokes start. start selects a platform-specific asset path, assembles CDN...
WebKit single-bug RCE: crafted web content yields AAR/AAW/PC-hijack in content process
Summary A memory-corruption vulnerability in Apple's WebKit engine is reachable from maliciously crafted web content. Apple's public advisory understates the impact as an "unexpected process crash" and notes it was addressed with improved memory handling. In practice the bug is a single-shot remo...
OPENSUSE-SU-2026:21508-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...
[SECURITY] Fedora 44 Update: chromium-150.0.7871.186-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
Update your iPhone, iPad and Mac to fix Apple security holes
Apple has shipped a hefty round of July security patches, headlined by iOS/iPadOS 26.6, macOS Tahoe 26.6, and Safari 26.6, with dozens of vulnerabilities squashed across kernel, WebKit, media frameworks, and core apps. These updates are primarily about improving security rather than adding new...
DEBIAN-CVE-2026-64757
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...
DEBIAN-CVE-2026-64728
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy...
DEBIAN-CVE-2026-64719
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected...
[SECURITY] Fedora 43 Update: webkitgtk-2.52.5-1.fc43
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...
[SECURITY] Fedora 43 Update: chromium-150.0.7871.181-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 44 Update: chromium-150.0.7871.181-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 44 Update: chromium-150.0.7871.128-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 43 Update: chromium-150.0.7871.128-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption...
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data
A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...
webkit2gtk3 security update
2.52.5-1 - Update to 2.52.5...
[SECURITY] Fedora 43 Update: chromium-150.0.7871.124-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 44 Update: chromium-150.0.7871.124-1.fc44
Chromium is an open-source web browser, powered by WebKit Blink...