Code Injection Vulnerability in WebKit Component of Multiple Apple Products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.WebKit is one of the Web browser engine components. A security vulnerability exists in the WebKit component of several Apple products. The...

UBUNTU-CVE-2019-8720

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues...

CVE-2019-8769

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history...

KLA11603 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in libxslt can be...

About the security content of iCloud for Windows 10.8

About the security content of iCloud for Windows 10.8 This document describes the security content of iCloud for Windows 10.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

KLA11602 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. Multiple memory corruption vulnerabilities in WebKit...

WebKit Cross Site Scripting and Multiple Memory Corruption Vulnerabilities

Description WebKit is prone to cross-site scripting and multiple memory-corruption vulnerabilities. Attackers can exploit these issues to execute arbitrary code on the affected system. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Watch Apple...

WebKit Multiple Memory Corruption Vulnerabilities

Description WebKit is prone to multiple memory-corruption vulnerabilities. A remote attacker can leverage these issues to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Technologies Affected Apple Ipa...

About the security content of Safari 13.0.3

About the security content of Safari 13.0.3 This document describes the security content of Safari 13.0.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed

WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed VULNERABILITY DETAILS HTMLFrameElementBase.cpp: bool HTMLFrameElementBase::isURLAllowed const if mURL.isEmpty // 4 return true; return isURLAlloweddocument.completeURLmURL; bool HTMLFrameElementBase::isURLAllowedconst URL& completeURL...

WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed

VULNERABILITY DETAILS HTMLFrameElementBase.cpp: bool HTMLFrameElementBase::isURLAllowed const if mURL.isEmpty // 4 return true; return isURLAlloweddocument.completeURLmURL; bool HTMLFrameElementBase::isURLAllowedconst URL& completeURL const if document.page && document.page-subframeCount =...

WebKit Cross Site Scripting and Multiple Memory Corruption Vulnerabilities

Description WebKit is prone to a cross-site scripting vulnerability and multiple memory-corruption vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site or execute arbitrary code in the...

WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed Exploit

VULNERABILITY DETAILS HTMLFrameElementBase.cpp: bool HTMLFrameElementBase::isURLAllowed const if mURL.isEmpty // 4 return true; return isURLAlloweddocument.completeURLmURL; bool HTMLFrameElementBase::isURLAllowedconst URL& completeURL const if document.page && document.page-subframeCount =...

[SECURITY] Fedora 31 Update: chromium-77.0.3865.120-1.fc31

Chromium is an open-source web browser, powered by WebKit Blink...

Fedora Update for chromium FEDORA-2019-78aa18e571

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: chromium-77.0.3865.120-1.fc29

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 30 Update: chromium-77.0.3865.120-1.fc30

Chromium is an open-source web browser, powered by WebKit Blink...

Apple iTunes for Windows and Apple iCloud for Windows WebKit Component Cross-Site Scripting Vulnerability

Apple iTunes for Windows and Apple iCloud for Windows are both products of Apple Inc.Apple iTunes for Windows is a media player application for the Windows platform.Apple iCloud for Windows is Apple iCloud for Windows is a Windows-based cloud service that supports the storage of music, photos,...

Apple macOS Catalina WebKit Component Logic Flaw Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple for Mac computers.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the drawing of Web page elements in the WebKit component of Apple macOS Catalina prior to version 10.15. The...

Apple iTunes Memory Corruption Vulnerability (CNVD-2019-36612)

Apple iTunes for Windows is a Windows-based media player application from Apple.WebKit is one of the components of the Web browser engine. A security vulnerability exists in the WebKit component of Apple iTunes for Windows prior to version 12.10.1. The vulnerability can be exploited by an attacke...