UBUNTU-CVE-2014-4467

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...

UBUNTU-CVE-2014-4476

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4467

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site...

CVE-2014-4477

Technical details (affected components, exploit methods, impact, or fixes for CVE-2014-4477) are not provided in the Connected documents; monitor for updates from official advisories.

CVE-2014-4476

CVE-2014-4476 affects WebKit as used in Apple iOS pre-8.1.3, Apple Safari versions prior to 6.2.3, 7.x prior to 7.1.3, and 8.x prior to 8.0.3, and Apple TV prior to 7.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and appli...

CVE-2014-4479

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4477

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4479

Summary of CVE-2014-4479 (CWE-unclear in initial doc): WebKit used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3 is vulnerable. The issue allows an attacker to remotely execute arbitrary code or cause a denial of service (m...

CVE-2014-4476

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2014-4467

WebKit in Apple iOS prior to 8.1.3 is affected. The vulnerability: during FRAME rendering, scrollbar boundaries are not determined correctly, enabling UI spoofing via a crafted site. Affected component: WebKit as used in iOS; root cause is improper scrollbar boundary handling. Impact: UI spoofing...

Apple Patches Thunderstrike Bug in OSX, Fixes More Than 30 Flaws in iOS

Apple has released major security updates for both OS X and iOS that includes patches for a number of bugs that could lead to arbitrary code execution. The release of iOS 8.1.3 fixes a vulnerability that allowed an attacker to bypass the sandbox restrictions in Safari and the OS X update fixes a...

WebKit memory corruption vulnerability (CNVD-2015-00749)

WebKit is an open source browser engine and the name of Apple's version of the Mac OS X system engine framework. WebKit suffers from a memory corruption vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

RHEL 6 : chromium-browser (RHSA-2015:0093)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0093 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

Mac OS X : Apple Safari < 6.2.3 / 7.1.3 / 8.0.3 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.3 / 7.1.3 / 8.0.3. It is, therefore, affected by multiple memory corruption issues in WebKit. A remote attacker, using a specially crafted website, can exploit these to execute arbitrary code. C Tenable Network...

WebKit memory corruption vulnerability (CNVD-2015-00748)

WebKit is an open source browser engine and the name of Apple's version of the Mac OS X system engine framework. WebKit suffers from a memory corruption vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

WebKit memory corruption vulnerability (CNVD-2015-00750)

WebKit is an open source browser engine and the name of Apple's version of the Mac OS X system engine framework. WebKit suffers from a memory corruption vulnerability in its implementation, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

Important: Red Hat Security Advisory: chromium-browser security update

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Safari < 6.2.2 / 7.1.2 / 8.0.2 Multiple Vulnerabilities

Binary data 8590.prm...

Google Engineer Explains Company's Decision Not to Patch Bug in Older Android Versions

Google has taken quite a bit of heat in recent weeks for its decision not to patch a vulnerability in the WebView component of Android in older versions, leaving hundreds of millions of users exposed to potential attacks. Now, a Google engineer is explaining the company’s reasoning, saying that...

FreeBSD : WebKit-gtk -- Multiple vulnerabilities (e9ccdb28-9802-11e4-9d9c-bcaec565249c)

Webkit release team reports : This release fixes the following security issues : CVE-2014-1344, CVE-2014-1384, CVE-2014-1385, CVE-2014-1386, CVE-2014-1387, CVE-2014-1388, CVE-2014-1389, CVE-2014-1390. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...