HTTP Strict Transport Security (HSTS) Bypass

webkit2gtk is vulnerable to HTTP Strict Transport Security bypass. The vulnerability exists due to a lack of authentication of the security mechanism allowing an attacker to bypass the security HSTS...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. An attacker is able to exfiltrate data cross-origin via a malicious website...

Cross-site Scripting (XSS)

webkit2gtk is vulnerable to cross-site scripting. The vulnerability exists due to a logic issue...

Information Disclosure

webkit2gtk:edge is vulnerable to information disclosure. The issue was resolved with additional restrictions on CSS compositing.Visiting a maliciously crafted website may reveal a user's browsing history...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists via Content Security Policy redirect behavior...

Denial Of Service (DoS)

webkit2gtk:edge is vulnerable to denial of service.Lack of proper memory handling allows a buffer overflow, allowing an attacker to process maliciously crafted web content leading to arbitrary code execution...

Information Disclosure

webkit2gtk is vulnerable to information disclosure. The vulnerability exists due to a logic issue...

DSA-5030-1 webkit2gtk - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-5127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5127-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to arbitrary code execution. The vulnerability exists due to a memory corruption allowing an attacker to inject maliciously crafted script into the system...

Remote Code Execution (RCE)

webkit2gtk:edge is vulnerable to remote code execution. A memory corruption caused by lack of incorrect memory handling allows processing of maliciously crafted web content, leading to code execution...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a memory corruption allowing an attacker to inject maliciously crafted script into the system...

Remote Code Execution (RCE)

webkit2gtk:edge is vulnerable to denial of service. A use after free caused by lack of incorrect memory handling allows processing of maliciously crafted web content, leading to code execution...

Privilege Escalation

webkit2gtk is vulnerable to privilege escalation. The vulnerability exists due to a VFS syscalls that manipulate its filesystem namespace that allows an attacker to escalate its privilege...

Debian: Security Advisory (DSA-4995-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-4995-1 webkit2gtk - security update

Bulletin has no description...

[ASA-202110-9] webkit2gtk: multiple issues

Arch Linux Security Advisory ASA-202110-9 ========================================= Severity: Medium Date : 2021-10-29 CVE-ID : CVE-2021-30846 CVE-2021-30851 CVE-2021-42762 Package : webkit2gtk Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2483 Summary ======= The...

Debian DSA-4995-1 : webkit2gtk - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4995 advisory. - A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPad...

[SECURITY] [DSA 4995-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4995-1 [email protected] https://www.debian.org/security/ Alberto Garcia October 29, 2021 https://www.debian.org/security/faq -...