UBUNTU-CVE-2020-13753

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONENEWUSER and the TIOCSTI ioctl. CLONENEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute comman...

CVE-2020-9802

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2020-9843

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to ...

CVE-2020-13753

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONENEWUSER and the TIOCSTI ioctl. CLONENEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute comman...

CVE-2020-9805

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to universal cross...

CVE-2020-9803

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to...

PT-2020-13656

Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to 2.28.3 WPE WebKit versions prior to 2.28.3 Description The issue is related to the bubblewrap sandbox in WebKitGTK and WPE WebKit, which failed to properly block access to certain features. This could potentially...

[SECURITY] Fedora 31 Update: chromium-83.0.4103.116-3.fc31

Chromium is an open-source web browser, powered by WebKit Blink...

Apple iCloud 10.x < 10.8 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.8. It is, therefore, affected by multiple vulnerabilities: - Multiple arbitrary code execution vulnerabilities exist with in the WebKit due to multiple memory corruption issues. An...

[SECURITY] Fedora 32 Update: chromium-83.0.4103.116-3.fc32

Chromium is an open-source web browser, powered by WebKit Blink...

Apple iCloud 7.x < 7.17 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.17. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Apple iCloud 10.x < 10.9.3 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.9.3. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved restrictions. A file URL may be incorrectly processed. CVE-2020-3885 - A logic issue w...

Apple iCloud 7.x < 7.18 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.18. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved restrictions. A file URL may be incorrectly processed. CVE-2020-3885 - A logic issue was...

Apple iCloud 10.x < 10.9.2 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.9.2. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to multiple memory corruption issues. An unauthenticated,...

Apple iCloud 10.x < 10.9 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.9. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to configuration issue issues. An attacker in privileged...

Apple iCloud 7.x < 7.16 Multiple Vulnerabilities

According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.16. It is, therefore, affected by multiple vulnerabilities: - An arbitrary code execution vulnerability exist with in the WebKit due to configuration issue issues. An attacker in privileged...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

About the security content of watchOS 6.1.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...