16349 matches found
Apple WebKitGTK+ 跨站脚本漏洞
WebKitGTK+ is a full-featured port of the WebKit engine and contains all of WebKit's features. A cross-site scripting vulnerability exists in WebKitGTK+ that stems from insufficient harmless handling of user-supplied data in WebKit. The following products and versions are affected: WebKitGTK+:...
KLA12155 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to obtain sensitive information, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in CoreText can be exploited to obta...
About the security content of Safari 14.1
About the security content of Safari 14.1 This document describes the security content of Safari 14.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
VulnCheck KEV: CVE-2021-30661
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...
KLA12156 Multiple vulnerabilities in Apple iTunes
Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability in WebKit can be exploited to perfo...
About the security content of iTunes 12.11.3 for Windows
About the security content of iTunes 12.11.3 for Windows This document describes the security content of iTunes 12.11.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Apple Safari WebKit Memory Corruption (CVE-2016-4657)
A memory corruption vulnerability exists in the WebKit component of Apple Safari. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by enticing a victim to browse to a maliciously crafted web page...
PT-2021-7319 · Apple +9 · Ipados +13
Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 watchOS versions prior to 8.1 tvOS versions prior to 15.1 Description: A logic issue was addressed with improved state management. Processing...
PT-2021-7320 · Apple +7 · Macos Monterey +12
Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to the fixed version iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS...
PT-2021-7365 · Apple +7 · Ios +11
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15 Apple iPadOS versions prior to 15 Apple tvOS versions prior to 15 Apple watchOS versions prior to 8 Description: The issue allows a remote attacker to access confidential data by visiting a maliciously crafted...
WebKitGTK Safari Code Execution
The vulnerability of the Web page rendering module in the WebKitGTK browser of Apple’s Safari browser is related to insufficient validation of input data for web content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web pag...
WebKit XSS
The vulnerability of the Web page rendering module in WebKit-based operating systems such as Apple’s iOS, iPadOS, and watchOS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
WebKitGTK WebKit Code Execution
The vulnerability of the web page rendering module in WebKitGTK on Apple MacOS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious web page...
[SECURITY] Fedora 32 Update: chromium-89.0.4389.90-3.fc32
Chromium is an open-source web browser, powered by WebKit Blink...
Debian DSA-4886-1 : chromium - security update
Several vulnerabilites have been discovered in the chromium web browser. - CVE-2021-21159 Khalil Zhani discovered a buffer overflow issue in the tab implementation. - CVE-2021-21160 Marcin Noga discovered a buffer overflow issue in WebAudio. - CVE-2021-21161 Khalil Zhani discovered a buffer...
Apple iOS WebKit Cross-Site Scripting Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A cross-site scripting vulnerability exists in Apple iOS WebKit, which can be exploited by attackers to cause cross-site scripting attacks...
[SECURITY] Fedora 34 Update: chromium-89.0.4389.90-3.fc34
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2021-1788
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead...
CVE-2021-1879
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...