14223 matches found
Apple Safari WebKit suffers from unspecified memory corruption vulnerability (CNVD-2015-05415)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit suffers from unspecified memory corruption vulnerability (CNVD-2015-05410)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit Security Bypass Vulnerability
Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that allows remote attackers to exploit a vulnerability to build malicious web pages, trick users into parsing them, and bypass Content Security Policy restrictions...
Apple Safari WebKit suffers from unspecified memory corruption vulnerability (CNVD-2015-05422)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit suffers from an unspecified memory corruption vulnerability (CNVD-2015-05414)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit suffers from an unspecified memory corruption vulnerability (CNVD-2015-05423)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit suffers from an unspecified memory corruption vulnerability (CNVD-2015-05421)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple Safari WebKit suffers from an unspecified memory corruption vulnerability (CNVD-2015-05418)
Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...
Apple iOS Safari WebKit Security Bypass Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in WebKit in Apple Safari used in Apple iOS, which can be exploited by attackers to perform man-in-the-middle attacks and obtain sensitive information through sniffing the...
CVE-2015-5759
WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events...
Apple Safari / Webkit multiple security vulnerabilities
Interface spoofing, memory corruption, restrictions bypass...
Mac OS X : Apple Safari < 6.2.8 / 7.1.8 / 8.0.8 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.8 / 7.1.8 / 8.0.8. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows an attacker to spoof UI elements by using crafted web pages. CVE-2015-3729 - Multiple memory...
APPLE-SA-2015-08-13-1 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-08-13-1 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8 is now available and addresses the following: Safari Application Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and O...
Code injection
WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events...
CVE-2015-3755
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL...
CVE-2015-3754
The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site...
CVE-2015-3753
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a...
CVE-2015-3752
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive...
CVE-2015-3751
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element...
CVE-2015-3748
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...