Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple Multiple Products Buffer Overflow Vulnerability

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple Multiple Products WebKit Code Execution Vulnerability

Apple Multiple Products WebKit Code Execution Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

WebKitGTK Memory Corruption Vulnerability

Apple iOS and macOS Out-of-Bounds Write Vulnerability

WebRTC Heap Buffer Overflow Vulnerability

Apple Multiple Products Type Confusion Vulnerability

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl

The issue was addressed with improved memory handling

A correctness issue was addressed with improved checks

The issue was addressed with improved checks

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary…

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding…

WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and…

The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an…

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of…

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote…

Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

Webkitgtk: use-after-free of jscvalue function parameters

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5

A use-after-free issue was addressed with improved memory management

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely

A use after free issue was addressed with improved memory management

A use after free issue was addressed with improved memory management

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4

A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64

A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0

A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute arbitrary code or cause a…

WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS

A memory corruption issue was addressed with improved memory handling

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an…

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an…

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in…

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an…

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an…

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE…