WebKitGTK WPE Data Type Conversion DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

WebKitGTK WPE Buffer Overflow DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

WebKitGTK WPE Buffer Overflow DoS

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

webkitgtk: Use-after-free leading to arbitrary code execution

A flaw was found in webkitgtk. This flaw could allow an attacker to use maliciously crafted web content leading to arbitrary code execution...

[SECURITY] Fedora 34 Update: chromium-96.0.4664.110-3.fc34

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2021-30934

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30953

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

WebKitGTK WebKit Type Mixing Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

WebKitGTK Heap Buffer Overflow DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the escape of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious...

GNOME Web Cross-Site Scripting Vulnerability (CNVD-2022-02767)

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct vulnerability attacks via the pdfname fiel...

GNOME Web Cross-Site Scripting Vulnerability

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web has a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks via false pages...

GNOME Web Cross-Site Scripting Vulnerability (CNVD-2022-02768)

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product provides paginated browsing, cookie management, pop-up ad control, etc. GNOME Web contains a cross-site scripting vulnerability that can be exploited by attackers to conduct exploit attacks when viewing in sourc...

WPE WebKit Memory Use After Free

The vulnerability of the WPE WebKit browser’s web page rendering module in Safari for iOS, iPadOS, tvOS, watchOS, and macOS relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones

Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that were first demonstrated at the Tianfu Cup held in China...

About the security content of Safari 15.2

About the security content of Safari 15.2 This document describes the security content of Safari 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

WPE WebKit Code Execution

The vulnerability of the WPE WebKit browser’s web page rendering module for Safari operating systems—iOS, iPadOS, tvOS, watchOS, and macOS—is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

WebKitGTK Memory Use After Free

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS operating systems is related to the use of memory after it is freed during the processing of malicious web content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE SLED12: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2021:3768-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3768-1 advisory. - CVE-2021-42762: Updated seccomp rules with latest changes from flatpak bsc1191937. Tenable has extracted the preceding descriptio...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2021:3769-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3769-1 advisory. - CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web...

Oracle Linux 8 : GNOME (ELSA-2021-4381)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4381 advisory. - CVE-2020-36241, CVE-2021-28650: Do not allow symlink in parents rhbz1928701 gnome-calculator - Backport fix for CVE-2020-24870 from upstream Resolves...