WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads

WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads BACKGROUND As lokihardt@ has demonstrated in https://bugs.chromium.org/p/project-zero/issues/detail?id=1121, WebKit's support of the obsolete showModalDialog method gives an attacker the ability to perform synchronous...

WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads

BACKGROUND As lokihardt@ has demonstrated in https://bugs.chromium.org/p/project-zero/issues/detail?id=1121, WebKit's support of the obsolete showModalDialog method gives an attacker the ability to perform synchronous cross-origin page loads. In certain conditions, this might lead to...

KLA11527 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A stack overflow vulnerability in libxslt can be exploited...

About the security content of iCloud for Windows 10.6

About the security content of iCloud for Windows 10.6 This document describes the security content of iCloud for Windows 10.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of iTunes 12.9.6 for Windows

About the security content of iTunes 12.9.6 for Windows This document describes the security content of iTunes 12.9.6 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

About the security content of iCloud for Windows 7.13

About the security content of iCloud for Windows 7.13 This document describes the security content of iCloud for Windows 7.13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability in the UIProcess subsystem of the rendering module in WebKitGTK+ and WebKitGTK allows a attacker to cause a service failure or affect the confidentiality and integrity of the protected information.

The vulnerability of the UIProcess subsystem in display modules of WebKitGTK+ and WebKitGTK arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise the confidentiality and integrity of...

WebKit Use-After-Free

A vulnerability in the WebKit browser engine allows a malicious webpage to perform remote code execution...

Fedora Update for chromium FEDORA-2019-8fb8240d14

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

macOS : Apple Safari < 11.1.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1.1 It is, therefore, affected by multiple vulnerabilities. - A remote code execution vulnerability exists in WebKit due to improper memory handling. An unauthenticated, remote attacker can exploit this, via...

[SECURITY] Fedora 30 Update: chromium-75.0.3770.100-2.fc30

Chromium is an open-source web browser, powered by WebKit Blink...

CVE-2018-6128

Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2018-6128

Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

CVE-2018-6128

CVE-2018-6128 concerns the WebKit component in Google Chrome on iOS. The issue arises from incorrect URL parsing, which could allow a remote attacker to perform domain spoofing via a crafted HTML page. Affected software is Chrome on iOS with WebKit parsing behavior before version 67.0.3396.62. Th...

CVE-2018-6128

Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

CVE-2018-6128

Removed by vendor...

About the security content of iCloud for Windows 7.11 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page or file...