16344 matches found
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence...
webkitgtk: A malicious website may exfiltrate data cross-origin
A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information...
webkit: processing malicious web content may lead to denial-of-service
No description is available for this CVE...
webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution
A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity ...
webkitgtk: Access to restricted ports on arbitrary servers via port redirection
A port redirection issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A malicious website may be able to access restricted ports on arbitrary servers. The highest threat from this vulnerability is to data integrity...
webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced
A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic flaw by persuading a victim to access a specially crafted website, enabling attackers to circumvent the Content Security Policy enforcement...
webkit: pointer authentication bypass
A vulnerability was found in Webkit. This flaw allows an attacker with arbitrary read and write capability to bypass pointer authentication...
webkit: visiting a malicious website may lead to address bar spoofing
A flaw was found in WebKit that may allow a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. By tricking a victim into visiting a specially crafted website, the attacker could perform address bar spoofing...
webkitgtk: use after free issue may lead to arbitrary code execution
A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.0. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
webkitgtk: Use-after-free leading to arbitrary code execution
A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...
webkitgtk: User may be unable to fully delete browsing history
A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A user may be unable to fully delete the browsing history under some circumstances. The highest threat from this vulnerability is to data confidentiality...
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
[SECURITY] Fedora 42 Update: chromium-138.0.7204.49-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-138.0.7204.49-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-137.0.7151.119-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
📄 Glass Cage Zero-Click iMessage Exploit Details
Glass Cage, a vulnerability chain discovered on iOS 18.2, enables an attacker to compromise a device silently by sending a single malicious PNG image via iMessage. The exploit bypasses multiple layers of Apple's defenses, including BlastDoor, WebKit sandboxing, and CoreMedia memory protections...
[SECURITY] Fedora 41 Update: chromium-137.0.7151.103-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 42 Update: chromium-137.0.7151.103-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
