Apple WebKit: UXSS via PrototypeMap::createEmptyStructure

When creating an object in Javascript, its |Structure| is created with the constructor's prototype's |VM|. Here's some snippets of that routine. Structure InternalFunction::createSubclassStructureExecState exec, JSValue newTarget, Structure baseClass ... if newTarget && newTarget != exec-jsCallee...

WebKit: UXSS via operationSpreadGeneric

Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObject from the argument of a spread operation. It seems that that optimization is not implemented to the release version of Safari yet...

WebKit operationSpreadGeneric Universal Cross Site Scripting Vulnerability

WebKit suffers from a universal cross site scripting vulnerability in operationSpreadGeneric. WebKit: UXSS via operationSpreadGeneric Once a spread operation is optimized, the function |operationSpreadGeneric| will be called from then on. But operationSpreadGeneric's trying to get a JSGlobalObjec...

[SECURITY] Fedora 26 Update: chromium-57.0.2987.133-1.fc26

Chromium is an open-source web browser, powered by WebKit Blink...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system and the Safari browser allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system and the Safari browser allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system, the Safari browser, and the iTunes media player allows attackers to obtain confidential information or circumvent existing access restrictions policies.

The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes media player is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions or obtain confidential information...

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...

The vulnerability of the iOS operating system and the Safari browser allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to carry out a UXSS attack.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a UXSS attack by utilizing the website structure...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

RHEL 6 : chromium-browser (RHSA-2017:0860)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:0860 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 57.0.2987.133. Security Fixes:...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerability of the Safari browser and the iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

Vulnerability of the iOS operating system and the Safari browser, allowing a hacker to execute arbitrary code

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

The vulnerability of the iOS operating system and the Safari browser allows attackers to compromise the confidentiality of information.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of information through a specially crafted website...

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the WebKit JavaScript Bindings component in the iOS operating system and Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or obtain confidential information throug...