WebKit - TypedArray.fill Memory Corruption

length; unsigned begin = argumentClampedIndexFromStartOrEndexec, 1, length; unsigned end = argumentClampedIndexFromStartOrEndexec, 2, length, length; if end thisValue; if !thisObject-setRangeToValueexec, begin, end, valueToInsert return JSValue::encodejsUndefined; argumentClampedIndexFromStartOrE...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-05669)

Apple Safari and tvOS are both products of the American Apple Company Apple. The former is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; the latter is a smart TV operating system. webKit is an open source web browser engine jointly developed by KDE,...

Multiple Apple products WebKit homology policy bypass vulnerability (CNVD-2016-05666)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Multiple Apple Products WebKit Homologation Policy Bypass Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Multiple Apple Products WebKit Unauthorized Access Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Multiple Apple Products WebKit Information Disclosure Vulnerability

Apple iOS and tvOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community, and is used by browsers such as Apple Safari and Google Chrome...

Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2016-05667)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. tvOS is an operating system for smart TVs. webKit Page Loading is a WebKit...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-05755)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community. A security...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-05672)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2016-05753)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community. A security...

Multiple Apple Products WebKit Denial of Service Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-05754)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; tvOS is an operating system for smart TVs. webKit is an open source web browser engine developed by the KDE community. A security...

Cross-Site Scripting Vulnerability in Multiple Apple Products

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems. tvOS is an operating system for smart TVs. webKit Page Loading is a WebKit...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

chromium-browser: use-after-free in blink

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-05520)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. A same-origin policy bypass vulnerability exists in the 'ChromeClientImpl::createWindow' method in the WebKit/Source/web/ChromeClientImpl.cpp fi...

Fast Browser Vulnerability

KChrome, derived from Google's open source project Chromium and compatible with IE, is a browser with dual kernels of Webkit and IE. Thanks to the high performance of Webkit, you will be faster when browsing the web in normal times. A design vulnerability exists in Crypto Browser that allows...

CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs,...

CVE-2016-5135

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...

CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...