14128 matches found
UBUNTU-CVE-2011-3438
WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...
CVE-2011-3438
CVE-2011-3438 affects WebKit as used in Safari 5.0.6. The vulnerability allows remote attackers to cause a denial of service (process crash) or arbitrary code execution via the WebKit component. This is consistently described across multiple sources (e.g., NVD/NVDC and CNVD references). The provi...
CVE-2011-3438
WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service process crash or arbitrary code execution...
About the security content of iCloud for Windows 6.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Apple WebKit: Type confusion in RenderBox with accessibility enabled（CVE-2017-2373）
There is a type confusion vulnerability that affects WebKit with accessibility enabled WebCore::AXObjectCache::gAccessibilityEnabed. PoC: function boom m.append"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; m.setAttribute"aria-labeledby", "t"; d.open = false; foo Bad cast...
The vulnerability of Safari browser and iOS operating system allows attackers to bypass security policy mechanisms.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security policy mechanisms using uncertain vectors...
The vulnerability of the iOS operating system, which allows a hacker to execute arbitrary code
The vulnerability of the WebKit component of the iOS operating system arises from the distribution and initialization of resources using incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to obtain confidential information from the process’s memory.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of Safari browser and iOS operating system allows attackers to obtain confidential information or circumvent existing access control policies.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or obtain confidential information through a specially...
Apple WebKit Safari 10.0.2(12602.3.12.0.1) - operationSpreadGeneric Universal Cross-Site Scripting
Apple WebKit Safari 10.0.212602.3.12.0.1 - operationSpreadGeneric Universal Cross-Site Scripting 'use strict'; function spreada return ...a; let arr = Object.create1, 2, 3, 4; for let i = 0; i f.onload = null; try spreadf.contentWindow; catch e e.constructor.constructor'alertlocation'; ; f.src =...
The vulnerability of the Safari browser, which allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the Safari browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a specially created...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...
The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or perform page replacement attacks.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or replace the default browser tab by making incorrect references to...
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross-Site Scripting
jsCallee // newTarget may be an InternalFunction if we were called from Reflect.construct. JSFunction targetFunction = jsDynamicCastnewTarget; if LIKELYtargetFunction ... return targetFunction-rareDatavm-createInternalFunctionAllocationStructureFromBasevm, prototype, baseClass; ... else ... retur...
Apple WebKit Safari 10.0.2(12602.3.12.0.1) - PrototypeMap::createEmptyStructure Universal Cross-Site Scripting
Apple WebKit Safari 10.0.212602.3.12.0.1 - PrototypeMap::createEmptyStructure Universal Cross-Site Scripting jsCallee // newTarget may be an InternalFunction if we were called from Reflect.construct. JSFunction targetFunction = jsDynamicCastnewTarget; if LIKELYtargetFunction ... return...
The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of the WebKit Web Inspector component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory...
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripting
'use strict'; function spreada return ...a; let arr = Object.create1, 2, 3, 4; for let i = 0; i f.onload = null; try spreadf.contentWindow; catch e e.constructor.constructor'alertlocation'; ; f.src = 'https://abc.xyz/';...
WebKit operationSpreadGeneric Universal Cross Site Scripting
WebKit: UXSS via operationSpreadGeneric Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObject from the argument of a spread operation. It seems that that optimization is not implemented ...