PT-2019-6652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to Blink M13 Description The issue arises when a child of a keygen with autofocus is accessed in WebKit, causing a stale layout root to be set as an input element. Recommendations For versions prior to Blink M13,...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

Code injection

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

Design/Logic Flaw

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1459

The CVE-2011-1459 entry affects Google Chrome prior to Blink M11, via the WebKit::WebPluginContainerImpl::handleEvent routine. The vulnerability arises when handling events with the htmlpluginelement.cpp plugin, allowing an attacker to cause a denial of service (crash). The cited sources confirm ...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

CVE-2011-1460 affects WebKit in Google Chrome prior to Blink M11. The vulnerability is a faulty cast to RenderBlock when anonymous blocks are renderblocks, caused by a type-casting issue in WebKit's rendering path. The impact, as reflected in CVSS, includes partial confidentiality, integrity, and...

webkitgtk: processing maliciously crafted web content lead to URI spoofing

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

webkitgtk: HTTP proxy setting deanonymization information disclosure

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

Code Execution Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

Apple iTunes for Windows and Apple iCloud for Windows WebKit Component Memory Corruption Vulnerability

Apple iTunes for Windows and Apple iCloud for Windows are both products of Apple Inc.Apple iTunes for Windows is a media player application for the Windows platform.Apple iCloud for Windows is Apple iCloud for Windows is a Windows-based cloud service. The product supports storage of music, photos...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-46956)

Apple Safari and others are products of Apple Inc.Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Apple iOS is an operating system developed for mobile devices.Apple watchOS is a smartwatch operating system. WebKit is one of the web...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-46969)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

Unspecified Vulnerability in Multiple Apple Security WebKit Components

Apple iOS and others are products of Apple Inc.Apple iOS is a set of operating systems developed for mobile devices.Apple watchOS is a set of smartwatch operating systems.Apple iCloud for Windows is a cloud service based on the Windows platform. The product supports storage of music, photos, apps...

Unspecified Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2019-46132)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...