14078 matches found
[SECURITY] Fedora 37 Update: chromium-105.0.5195.125-2.fc37
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] [DSA 5241-1] wpewebkit security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5241-1 [email protected] https://www.debian.org/security/ Alberto Garcia September 28, 2022 https://www.debian.org/security/faq -...
PT-2023-8133 · Apple +4 · Ipados +8
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of th...
DSA-5241-1 wpewebkit - security update
Bulletin has no description...
The vulnerability of the WKUserScript script in Mozilla Firefox’s browser loading mechanism for iOS allows a malicious user to load any file they desire.
The vulnerability of the WKUserScript script in Mozilla Firefox’s browser download function for iOS is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to download any file they desire...
CVE-2022-32912
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...
Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers
Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "The attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices,"...
Apple macOS Safari Buffer Overflow Vulnerability
Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple macOS Safari WebKit, which can be exploited by a remote attacker to submit a special web request that can be tricked into being parsed by the...
PT-2022-7607 · Apple +7 · Macos Ventura +13
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 15.7.2 and prior to 16.2 iPadOS versions prior to 15.7.2 and prior to 16.2 watchOS versions prior to 9.2 Description: A memor...
The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to access confidential data.
The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
The vulnerability of the WPE WebKit web page rendering module, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.
The vulnerability of the WPE WebKit web page rendering module is related to the transmission of protected information in an unencrypted form. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...
USN-5611-1 webkit2gtk vulnerability
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...
The vulnerability of the WPE WebKit web page rendering module, related to the use of open redirection, allows attackers to access confidential data.
The vulnerability of the WPE WebKit web page rendering module is related to the use of open redirection. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to compromise the integrity of the data.
The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the data...
The vulnerability of the WPE WebKit web page rendering module, related to the use of an untrusted intermediate policy file, allows a attacker to compromise data integrity.
The vulnerability of the WPE WebKit web page rendering module is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw
Apple has released another round of security updates to address multiple vulnerabilities in iOS and macOS, including a new zero-day flaw that has been used in attacks in the wild. The issue, assigned the identifier CVE-2022-32917, is rooted in the Kernel component and could enable a malicious app...
About the security content of Safari 16
About the security content of Safari 16 This document describes the security content of Safari 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
PT-2022-7606 · Apple +7 · Safari +10
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 Description: A buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lea...
Apple macOS Safari 缓冲区错误漏洞
Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple macOS Safari WebKit, which can be exploited by a remote attacker to submit a special web request that can be tricked into being parsed by the...
