About the security content of iOS 14.4.1 and iPadOS 14.4.1

About the security content of iOS 14.4.1 and iPadOS 14.4.1 This document describes the security content of iOS 14.4.1 and iPadOS 14.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of macOS Big Sur 11.2.3

About the security content of macOS Big Sur 11.2.3 This document describes the security content of macOS Big Sur 11.2.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of watchOS 7.3.2

About the security content of watchOS 7.3.2 This document describes the security content of watchOS 7.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2021-2535 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.4.1 iPadOS versions prior to 14.4.1 Safari versions prior to 14.0.3 watchOS versions prior to 7.3.2 macOS Big Sur versions prior to 11.2.3 Description: A memory corruption issue was addressed with improved validation...

CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

Remote code execution

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

Vulnerability Spotlight: Remote code execution vulnerability in WebKit WebAudio API

Marcin “Icewall” Noga of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The WebKit browser engine contains a remote code execution vulnerability in its WebAudio API interface. A malicious web page code could trigger a use-after-free error, which could lead to arbitrary code...

Mobile Adware Booms, Online Banks Become Prime Target for Attacks

Hackers painted a bullseye on the backs of online financial institutions in 2020 as the pandemic shuttered local branch offices and forced customers online. Over the past 12 months, incidents of adware nearly tripled. And, overall in 2020 researchers saw a slight drop in the number of mobile...

Fedora: Security Advisory for chromium (FEDORA-2021-aa764a8531)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: chromium-88.0.4324.182-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Details Tied to Safari Browser-based 'ScamClub' Campaign Revealed

Details of a flaw in Apple’s Safari browser, publicly disclosed Tuesday, outline how the cybergang known as ScamClub reached 50 million users with a three-month-long malicious ad campaign pushing malware to mobile iOS Chrome and macOS desktop browsers. The Safari bug, patched on Dec. 2 by Apple,...

Malvertisers Exploited WebKit 0-Day to Redirect Browser Users to Scam Sites

A malvertising group known as "ScamClub" exploited a zero-day vulnerability in WebKit-based browsers to inject malicious payloads that redirected users to fraudulent websites gift card scams. The attacks, first spotted by ad security firm Confiant in late June 2020, leveraged a bug CVE-2021–1801...

Malvertisers Exploited WebKit 0-Day to Redirect Browser Users to Scam Sites

A malvertising group known as "ScamClub" exploited a zero-day vulnerability in WebKit-based browsers to inject malicious payloads that redirected users to fraudulent websites gift card scams. The attacks, first spotted by ad security firm Confiant in late June 2020, leveraged a bug CVE-2021–1801...

[SECURITY] Fedora 32 Update: chromium-88.0.4324.150-1.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2020-13558

A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity ...

CVE-2020-13558

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...

[SECURITY] Fedora 33 Update: chromium-88.0.4324.150-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora: Security Advisory for chromium (FEDORA-2021-05afa65d39)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian DSA-4846-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2020-16044 Ned Williamson discovered a use-after-free issue in the WebRTC implementation. - CVE-2021-21117 Rory McNamara discovered a policy enforcement issue in Cryptohome. - CVE-2021-21118 Tyler Nighswander discover...