14164 matches found
CVE-2018-6128
Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
CVE-2018-6128
CVE-2018-6128 concerns the WebKit component in Google Chrome on iOS. The issue arises from incorrect URL parsing, which could allow a remote attacker to perform domain spoofing via a crafted HTML page. Affected software is Chrome on iOS with WebKit parsing behavior before version 67.0.3396.62. Th...
CVE-2018-6128
Removed by vendor...
About the security content of iCloud for Windows 7.11 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to exploit the memory content of processes.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access the memory contents of processes using a specially crafted web page or...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...
Apple iCloud < 7.12 Multiple Vulnerabilities
According to its version, the iCloud application installed on the remote Windows host is prior to 7.12. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exists in SQLite & WebKit due to maliciously crafted content. An unauthenticated, remote...
About the security content of iCloud for Windows 10.4 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of iCloud for Windows 10.4
About the security content of iCloud for Windows 10.4 This document describes the security content of iCloud for Windows 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Safari Webkit Proxy Object Type Confusion Exploit
This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the...
Safari Webkit Proxy Object Type Confusion
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Safari Webkit Proxy Object Type Confusion', 'Description' = %q This module exploits a type confusion bug in the Javascript Proxy object in WebKit...
About the security content of Safari 12.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities. - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker can exploit this, via speciall...
KLA11490 Multiple vulnerabilities in iCloud
Multiple vulnerabilities were found in iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...
About the security content of iTunes for Windows 12.9.5
About the security content of iTunes for Windows 12.9.5 This document describes the security content of iTunes for Windows 12.9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...
About the security content of iCloud for Windows 7.12
About the security content of iCloud for Windows 7.12 This document describes the security content of iCloud for Windows 7.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
KLA11489 Multiple vulnerabilities in iTunes
Multiple vulnerabilities were found in iTunes. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in WebKit can be exploited remotely to...
Fedora Update for webkit2gtk3 FEDORA-2019-f18fb0f37d
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...