(Pwn2Own) Apple Safari Global RegExp JIT Type Confusion Remote Code Execution Vulnerability

🗓️ 25 Jan 2019 00:00:00Reported by flouroacetateType

zdi🔗 www.zerodayinitiative.com👁 31 Views

This document describes a vulnerability in Apple Safari related to global regular expressions, allowing remote code execution via type confusion. User interaction is required for exploitation

Reporter	Title	Published	Views	Family All 58
Tenable Nessus	Apple Safari < 12.0.3 Multiple Vulnerabilities	8 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.1.3 Multiple Vulnerabilities (APPLE-SA-2019-1-22-1)	17 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.1.3 Multiple Vulnerabilities	23 Jan 201900:00	–	nessus
Tenable Nessus	FreeBSD : webkit-gtk -- Multiple vulnerabilities (e3aacd6d-3d01-434c-9330-bc9efd40350f)	25 Feb 201900:00	–	nessus
Tenable Nessus	GLSA-201903-12 : WebkitGTK+: Multiple vulnerabilities	14 Mar 201900:00	–	nessus
Tenable Nessus	Apple iTunes < 12.9.3 Multiple Vulnerabilities (credentialed check)	30 Jan 201900:00	–	nessus
Tenable Nessus	macOS : Apple Safari < 12.0.3 Multiple Vulnerabilities	25 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-308)	11 Mar 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-309)	11 Mar 201900:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2019:0497-1)	27 Feb 201900:00	–	nessus

Source	Link
support	www.support.apple.com/kb/HT201222

14 Jun 2019 00:00Current

1.7Low risk

Vulners AI Score1.7

CVSS 37.3

EPSS0.01841