CVE-2016-1726

CVE-2016-1726 affects WebKit used in Apple iOS prior to 9.2.1 and Safari prior to 9.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by presenting a crafted website. This is a memory‑corruption issue in WebKit when handling ...

CVE-2016-1727

WebKit vulnerability CVE-2016-1727 affects Apple platforms: WebKit as used in iOS prior to 9.2.1, Safari prior to 9.0.3, and tvOS prior to 9.1.1. The issue allows remote attackers to cause memory corruption, enabling arbitrary code execution or a denial of service via a crafted website. Connected...

CVE-2016-1727

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1724...

CVE-2016-1724

CVE-2016-1724 is a WebKit memory-corruption vulnerability in Apple environments (iOS, Safari, tvOS) that could allow remote code execution or memory corruption via a crafted site. Connected sources corroborate related WebKit issues (e.g., CVE-2016-1723/1725–1728) and Gentoo GLSA-201706-15 recomme...

CVE-2016-1723

WebKit exploit in Apple ecosystems: CVE-2016-1723 affects WebKit as used in iOS prior to 9.2.1 and Safari prior to 9.0.3, enabling remote code execution or memory corruption via a crafted website. The issue is documented across multiple sources (Apple advisories HT206168/HT205730) and related ent...

Google Chrome Blink Information Disclosure Vulnerability (CNVD-2016-00723)

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. Google Chrome uses Blink's WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp file in the ' UnacceleratedImageBufferSurface' class in the...

Debian DSA-3456-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-6792 An issue was found in the handling of MIDI files. - CVE-2016-1612 cloudfuzzer discovered a logic error related to receiver compatibility in the v8 JavaScript library. - CVE-2016-1613 A use-after-free issue was...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Apple TV < 9.1.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV device is a version prior to 9.1.1. It is, therefore, affected by the following vulnerabilities : - A type confusion error exists in the bundled libxslt library due to improper handling of invalid values. An attacker can exploit this to crash the...

Debian: Security Advisory (DSA-3456-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...

Design/Logic Flaw

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

CVE-2016-1614

The CVE-2016-1614 entry affects Google's Blink/WebKit code path used by Chrome prior to 48.0.2564.82, specifically the UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp. The vulnerability arises from mishandling the initialization mode, e...

CVE-2016-1617

The CVE-2016-1617 entry concerns Blink's CSPSource::schemeMatches in WebKit/Blink CSP, where the CSP policy does not apply http policies to https URLs or ws policies to wss URLs. This enables remote attackers to infer whether an HSTS site has been visited by reading CSP reports. Affected componen...

CVE-2016-1617

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy CSP implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easie...

CVE-2016-1617

Removed by vendor...

CVE-2016-1614

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...

About the security content of tvOS 9.1.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of tvOS 9.1.1

About the security content of tvOS 9.1.1 This document describes the security content of tvOS 9.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-00540)

Apple iOS is Apple's operating system for several smart devices. A memory corruption vulnerability exists in Apple iOS Webkit, which allows an attacker to construct a malicious web page and trick a user into parsing it, which could crash the application or execute arbitrary code...