[SECURITY] Fedora 37 Update: chromium-117.0.5938.149-1.fc37

Chromium is an open-source web browser, powered by WebKit Blink...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, caused by buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit arises due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

CVE-2023-39928

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability...

Design/Logic Flaw

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability...

CVE-2023-39928

CVE-2023-39928 is a use-after-free in the MediaRecorder API of WebKitGTK (WebKit2GTK). A specially crafted page can cause memory corruption and potentially arbitrary code execution; exploitation requires visiting a malicious webpage. Debian confirms the issue and provides fixes in webkit2gtk: 2.4...

CVE-2023-39928

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability...

Webkit MediaRecorder API stopRecording use-after-free vulnerability

Talos Vulnerability Report TALOS-2023-1831 Webkit MediaRecorder API stopRecording use-after-free vulnerability October 6, 2023 CVE Number CVE-2023-39928 SUMMARY A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this...

The vulnerability of the Web page rendering module in Safari web browsers, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, macOS, allows attackers to execute XSS attacks.

The vulnerability of the Web page rendering module in Safari browsers running WebKit, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, and macOS, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious act...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of protected information, allows attackers to disclose such information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

[SECURITY] Fedora 38 Update: chromium-117.0.5938.132-2.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 37 Update: chromium-117.0.5938.132-1.fc37

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 39 Update: chromium-117.0.5938.132-2.fc39

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 39 Update: webkitgtk-2.42.1-1.fc39

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

CVE-2023-40451

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code...

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

CVE-2023-39434

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...

PT-2023-8419 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is related to a lack of protection for service data in the WebKit module for displaying web pages in macOS, iOS...

PT-2023-8192 · Apple +7 · Ipados +13

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 tvOS versions prior to 17 macOS versions prior to Sonoma 14 Safari versions prior to 17 Description: The issue is related to a use-after-free problem in the...

Apple Multiple Products WebKit Code Execution Vulnerability

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely ...