CVE-2022-30293: Out-of-bounds Write

In WebKitGTK through 2.36.0 and WPE WebKit, there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...

PT-2022-3506 · Apple +7 · Webkitgtk +8

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions through 2.36.0 WPE WebKit versions through 2.36.0 Description: The issue is related to a heap-based buffer overflow in the WebCore::TextureMapperLayer::setContentsLayer function, located in...

PT-2022-20052

Name of the Vulnerable Software and Affected Versions WebKitGTK versions through 2.36.0 WPE WebKit versions through 2.36.0 Description The issue is related to a use-after-free in WebCore::TextureMapperLayer::setContentsLayer, located in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp...

PT-2022-3419 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: WebKitGTK and WPE WebKit versions affected versions not specified tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 watchOS versions prior to 8.6 macOS Monterey versions prior to 12.4 Safari versions prior t...

Fedora: Security Advisory for chromium (FEDORA-2022-17aa1c62da)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chromium (FEDORA-2022-0f14e2308e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: chromium-100.0.4896.127-1.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 35 Update: chromium-100.0.4896.127-1.fc35

Chromium is an open-source web browser, powered by WebKit Blink...

EUVD-2010-1431

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during the handling of a use element in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service application cra...

com.nhncorp.ntaf:ntaf-webkit (>=20101021, <=20101108) potentially affected by CVE-2022-28108 via org.seleniumhq.selenium:selenium-server (2.0a5)

org.seleniumhq.selenium:selenium-server MAVEN version 2.0a5 is affected by a known vulnerability. The following packages have a transitive dependency on org.seleniumhq.selenium:selenium-server and may be impacted: - com.nhncorp.ntaf:ntaf-webkit =20101021, =20101108 Source cves: CVE-2022-28108...

Debian: Security Advisory (DSA-5116-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Experts Uncover Spyware Attacks Against Catalan Politicians and Activists

A previously unknown zero-click exploit in Apple's iMessage was used to install mercenary spyware from NSO Group and Candiru against at least 65 individuals as part of a "multi-year clandestine operation." "Victims included Members of the European Parliament, Catalan Presidents, legislators,...

Buffer Overflow

webkit2gtk, edge is vulnerable to Buffer Overflow .The vulnerability exist in WebKitGTK and WPE WebKit because the flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22624

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22628

A use-after-free issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

CVE-2022-22637

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

CVE-2022-22629

A buffer overflow vulnerability was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process maliciously crafted web content, leading to arbitrary code execution...

WebKitGTK WebKit Structure Data Compromise

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

WebKitGTK WebKit Information Disclosure

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

CVE-2022-22624

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4, tvOS 15.4, Safari 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...