The vulnerability of the web page rendering module in WebKit operating systems of Apple’s iOS, iPadOS, and watchOS allows attackers to execute cross-site scripting attacks.

The vulnerability of the Web page rendering module in WebKit-based operating systems such as Apple’s iOS, iPadOS, and watchOS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the web page rendering module in WebKitGTK of Apple MacOS operating systems, related to incorrect handling of logical operations, allows an attacker to execute arbitrary code.

The vulnerability of the web page rendering module in WebKitGTK on Apple MacOS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...

The vulnerability of the web page rendering module in the WebKitGTK browser of Apple’s Safari, related to insufficient validation of input data for web content, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in the WebKitGTK browser of Apple’s Safari browser is related to insufficient validation of input data for web content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web pag...

[SECURITY] Fedora 32 Update: chromium-89.0.4389.90-3.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

Debian DSA-4886-1 : chromium - security update

Several vulnerabilites have been discovered in the chromium web browser. - CVE-2021-21159 Khalil Zhani discovered a buffer overflow issue in the tab implementation. - CVE-2021-21160 Marcin Noga discovered a buffer overflow issue in WebAudio. - CVE-2021-21161 Khalil Zhani discovered a buffer...

Apple iOS WebKit Cross-Site Scripting Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A cross-site scripting vulnerability exists in Apple iOS WebKit, which can be exploited by attackers to cause cross-site scripting attacks...

[SECURITY] Fedora 34 Update: chromium-89.0.4389.90-3.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2021-1788

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead...

CVE-2021-1879

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...

[SECURITY] Fedora 33 Update: chromium-89.0.4389.90-3.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

[Security Nation] Beau Woods and Fotios Chantzis Discuss Their New Book, "Practical IoT Hacking"

!\Security Nation\ Beau Woods and Fotios Chantzis Discuss Their New Book, https://blog.rapid7.com/content/images/2021/04/securitynationlogo-63.jpg In our latest episode of Security Nation, we speak with Beau Woods and Fotios Chantzis about their newly released book, "Practical IoT Hacking." Stick...

CVE-2021-1871

A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.32.0. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1844

A memory corruption issue was found in WebKitGTK and WPE WebKit in versions prior to 2.32.0. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1788

A use-after-free issue was found in WebKitGTK and WPE WebKit in versions prior to 2.32.0. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1801

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...

CVE-2021-1870

A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1799

A port redirection issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A malicious website may be able to access restricted ports on arbitrary servers. The highest threat from this vulnerability is to data integrity...

CVE-2021-1789

A type confusion vulnerability was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-29623

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A user may be unable to fully delete the browsing history under some circumstances. The highest threat from this vulnerability is to data confidentiality...

CVE-2021-1765

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...