4246 matches found
CVE-2021-30809-OOM
CVE-2021-30809 — Apple WebKit Use-After-Free 脆弱性 クラッシュ PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 概要 このリポジトリは、CVE-2021-30809（WebKit の use-after-free UAF 脆弱性）に対する最小限のクラッシュ誘発用ハーネスを含んでいます。PoC は、細工された Web...
CVE-2014-1303
CVE-2014-1303 Linux PoC CVE-2014-1303 基于堆的WebKit缓冲区溢出 概念验证，针对Linux。 该仓库演示了Linux 上WebKit基于堆的缓冲区溢出漏洞CVE-2014-1303。 用于seccamp讲座。 注意： 原始漏洞利用是针对Mac OS X和PS4 PlayStation4编写的。 我已在Ubuntu 14.04上移植并测试了工作，WebKitGTK 2.1.2 用法 首先，你需要运行一个简单的web服务器， root@kitploit: $ python server.py 然后 root@kitploit: $ cd...
Astra Linux – Vulnerability in WebKit2GTK
A flaw was discovered in WebKitGTK and WPE WebKit. This vulnerability allows for an out-of-bounds read and integer underflow, resulting in a UIProcess crash DoS through a crafted payload sent to the GLib remote inspector server...
Astra Linux – Vulnerability in WebKit2GTK
A use-after-free vulnerability exists in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before version 2.36.8. This vulnerability allows attackers to execute code remotely...
Astra Linux – Vulnerability in WebKit2GTK
A logic issue has been addressed through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2, and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may allow bypass of the...
Astra Linux – Vulnerability in WebKit2GTK
A out-of-bounds write issue has been addressed through improved input validation. This issue is fixed in iOS 15.6, iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution...
Astra Linux – Vulnerability in WebKit2GTK
In BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit, prior to version 2.34.1, there was a limited bypass of the sandbox mechanism. This allowed a sandboxed process to trick host processes into believing that the sandboxed process was not confined by the sandbox. This was achieved by exploiting...
Astra Linux – Vulnerability in WebKit2GTK
In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889...
CVE-2022-22620
CVE-2022-22620 - "Zombie" Use-after-free en Safari Exploit de fuga de información: filtra una dirección de un JSObject Probado en webkitgtk-2.34.3 UBUNTU64 : https://webkitgtk.org/releases/webkitgtk-2.34.3.tar.xz PoC original por Google Project Zero:...
WebKitGTK-DND-Fix
WebKitGTK-DND-Fix Cuaderno de investigación y CI para restaurar el arrastrar y soltar confiable de archivos en WebKitGTK y WPE tras CVE-2025-13947. El problema CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg permitía que el contenido web leyera archivos locales mediante arrastrar y soltar en...
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 bsc1275791. Changes for webkit2gtk3: Update to...
TencentOS Server 4: webkitgtk (TSSA-2026:0965)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0965 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
DEBIAN-CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
UBUNTU-CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
CVE-2026-83596
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
CVE-2026-83596
CVE-2026-83596 is a memory corruption vulnerability in WebKitGTK caused by improper handling of the featurelist array in the OpenTypeVerticalData::findFeature function. Processing malicious web content can trigger the flaw, leading to memory corruption with high impact on confidentiality, integri...
CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
