CVE Browser

Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

Webkitgtk: use-after-free of jscvalue function parameters

webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports

webkitgtk: input validation issue may lead to a cross site scripting

webkitgtk: use-after-free may lead to arbitrary code execution

webkitgtk: type confusion may lead to arbitrary code execution

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected inter…

WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCo…

The regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory consumption) as demonstrated in a large number of ($ (open parenth…

JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.

WebKit: off-by-one memory corruption flaw WebSocketHandshake::readServerHandshake()

WebKit before r50173, as used in Google Chrome before 3.0.195.32, allows remote attackers to cause a denial of service (CPU consumption) via a web page that ca…

WebKit: Sensitive information disclosure from cookies via XMLHttpRequest calls

JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attacke…