Multiple Apple Products WebKit Arbitrary Code Execution Vulnerability (CNVD-2018-01076)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Multiple Apple Products WebKit Arbitrary Code Execution Vulnerability

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

Arbitrary Code Execution Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2017-38462)

Apple iOS, iCloud for Windows, iTunes for Windows, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with the Mac OS X and iOS operating systems. WebKit is an open source web...

Arbitrary Code Execution Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2017-38463)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Multiple Apple Products WebKit Arbitrary Code Execution Vulnerability (CNVD-2018-01073)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

Apple WebKit Out-of-bounds Read (CVE-2017-13785)

An arbitrary code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the style blocks. A remote attacker could exploit this issue by enticing the target user to open a maliciously craft...

About the security content of iCloud for Windows 7.2

About the security content of iCloud for Windows 7.2 This document describes the security content of iCloud for Windows 7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Apple WebKit out-of-bounds read (CVE-2017-13783)

An arbitrary code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to an error in Apple Webkit while handling certain display properties within the style blocks. A remote attacker could exploit this issue by enticing the target user to open a maliciously craft...

About the security content of iTunes 12.6 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Critical: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

About the security content of Safari 11.0.2

About the security content of Safari 11.0.2 This document describes the security content of Safari 11.0.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

About the security content of iTunes 12.7.2 for Windows

About the security content of iTunes 12.7.2 for Windows This document describes the security content of iTunes 12.7.2 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...

KLA11279 Multiple vulnerabilities in Apple iTunes

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in APNs Server can be exploited remotely to...

Apple WebKit Use After Free Code Execution (CVE-2017-13792)

A remote code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to the way the vulnerable application handles objects in memory. A remote attacker could exploit this issue by enticing the target user to open a maliciously crafted web page...

Apple WebKit Use After Free Code Execution (CVE-2017-13791)

A remote code execution vulnerability has been discovered in Apple WebKit. The vulnerability is due to the way the vulnerable application handles objects in memory. A remote attacker could exploit this issue by enticing the target user to open a maliciously crafted web page...

WebKit WebCore::RenderObject::previousSibling Use-After-Free

WebKit: use-after-free in WebCore::RenderObject::previousSibling CVE-2017-13798 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. PoC: ================================================================= .class9 column-span:...

WebKit WebCore::FormSubmission::create Use-After-Free

WebKit: use-after-free in WebCore::FormSubmission::create CVE-2017-13791 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. PoC: ================================================================= function jsfuzzer...

WebKit: use-after-free in WebCore::FormSubmission::create(CVE-2017-13791)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. ASan log: ================================================================= ==934==ERROR: AddressSanitizer: heap-use-after-free on address 0x60c0000b9810 at pc 0x000114b6f4...

WebKit: use-after-free in WebCore::AXObjectCache::performDeferredCacheUpdate(CVE-2017-13795)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac this can be accomplished by opening the inspector simply opening the...

WebKit: use-after-free in WebCore::Style::TreeResolver::styleForElement(CVE-2017-13802)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. ASan log: ================================================================= ==30588==ERROR: AddressSanitizer: heap-use-after-free on address 0x608000077ec8 at pc...