16344 matches found
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process bsc1239547. Patch Instructions: To install this SUSE update use the SUSE recommended installation...
CVE-2024-54551
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service...
[SECURITY] Fedora 41 Update: chromium-134.0.6998.88-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 42 Update: chromium-134.0.6998.35-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-24201link is external Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability CVE-2025-21590link is external Juniper Junos OS Improper Isolation or...
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...
Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”
Apple has patched a vulnerability in iPhone and iPad that was under active exploitation by cybercriminals. The update is available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later,...
Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks
Apple on Tuesday released a security update to address a zero-day flaw that it said has been exploited in "extremely sophisticated" attacks. The vulnerability has been assigned the CVE identifier CVE-2025-24201 and is rooted in the WebKit web browser engine component. It has been described as an...
The vulnerability in the isolated environment of the Web Content module of the Web pages displayed by the Safari browser and the visionOS, iOS, iPadOS, macOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the isolated Web Content module in the WebKit browser of Safari and the operating systems VisionOS, iOS, iPadOS, and macOS lies in the ability to write code outside of the allocated memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...
About the security content of Safari 18.3.1
About the security content of Safari 18.3.1 This document describes the security content of Safari 18.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of visionOS 2.3.2
About the security content of visionOS 2.3.2 This document describes the security content of visionOS 2.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS Sequoia 15.3.2
About the security content of macOS Sequoia 15.3.2 This document describes the security content of macOS Sequoia 15.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of iOS 18.3.2 and iPadOS 18.3.2
About the security content of iOS 18.3.2 and iPadOS 18.3.2 This document describes the security content of iOS 18.3.2 and iPadOS 18.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
PT-2025-10859
Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.3.1 iOS versions prior to 15.8.4 iOS versions prior to 16.7.11 iOS versions prior to 18.3.2 iPadOS versions prior to 15.8.4 iPadOS versions prior to 16.7.11 iPadOS versions prior to 18.3.2 iPadOS versions prior to...
The vulnerability of the Web page rendering module in the Safari browser of the WebKit operating systems for macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the Web page rendering module in Safari web browsers for macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS lies in insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...
The vulnerability of the Web page rendering module in the Safari browser of the WebKit framework in operating systems macOS, iOS, iPadOS, visionOS, tvOS, and watchOS allows a hacker to trigger a service failure.
The vulnerability of the Web page rendering module in Safari browsers of macOS, iOS, iPadOS, VisionOS, tvOS, and WatchOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
VulnCheck KEV: CVE-2025-24201
Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...
CVE-2024-44192
The issue was addressed with improved checks. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2024-54467
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin...
Linux Distros Unpatched Vulnerability : CVE-2023-39928
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause...