PT-2019-6620

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to Blink M11 Description An Integer Overflow issue exists in the WebCore::GraphicsContext::fillRect function of WebKit in Google Chrome. Recommendations For versions prior to Blink M11, update to a version that...

CVE-2011-2808: Improper Input Validation

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed...

CVE-2011-1298: Integer Overflow or Wraparound

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function...

Google Chrome WebKit has an unspecified vulnerability

Google Chrome is a web browser from Google, Inc. and WebKit is the web browser engine used in it. A security vulnerability exists in WebKit in Google Chrome. No details of the vulnerability are available at this time...

Unspecified Vulnerability in Apple iOS WebKit Component

Apple iOS is an operating system developed by Apple for mobile devices, of which WebKit is a component of the Web browser engine. A security vulnerability exists in the WebKit component in versions of Apple iOS prior to 13, which can be exploited by attackers to violate iframe sandboxing policies...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

Design/Logic Flaw

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

Code injection

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1459

The CVE-2011-1459 entry affects Google Chrome prior to Blink M11, via the WebKit::WebPluginContainerImpl::handleEvent routine. The vulnerability arises when handling events with the htmlpluginelement.cpp plugin, allowing an attacker to cause a denial of service (crash). The cited sources confirm ...

CVE-2011-1459

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service crash via the htmlpluginelement.cpp plugin...

CVE-2011-1460

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks...

CVE-2011-1460

CVE-2011-1460 affects WebKit in Google Chrome prior to Blink M11. The vulnerability is a faulty cast to RenderBlock when anonymous blocks are renderblocks, caused by a type-casting issue in WebKit's rendering path. The impact, as reflected in CVSS, includes partial confidentiality, integrity, and...

webkitgtk: processing maliciously crafted web content lead to URI spoofing

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

webkitgtk: HTTP proxy setting deanonymization information disclosure

WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video HLS, DASH, or Smooth Streaming, an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

Apple iTunes for Windows and Apple iCloud for Windows WebKit Component Memory Corruption Vulnerability

Apple iTunes for Windows and Apple iCloud for Windows are both products of Apple Inc.Apple iTunes for Windows is a media player application for the Windows platform.Apple iCloud for Windows is Apple iCloud for Windows is a Windows-based cloud service. The product supports storage of music, photos...

PT-2019-6622

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to Blink M11 Description The issue is related to the WebKit::WebPluginContainerImpl::handleEvent function, which can be exploited by an attacker to cause a denial of service crash via the htmlpluginelement.cpp...