Published: 03/04/2019 Updated: 05/04/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple memory corruption issues have been found in WebKitGTK+ versions before 2.22.4, possibly leading to arbitrary code execution while parsing crafted web content.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple watchos
apple iphone os
apple safari
apple tvos
apple icloud
apple itunes

Several security issues were fixed in WebKitGTK+ ...

Multiple memory corruption issues have been found in WebKitGTK+ versions prior to 2224, possibly leading to arbitrary code execution while parsing crafted web content ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2018-10-30-4 watchOS 51   From: Apple Product Security ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2018-10-30-3 Safari 1201   From: Apple Product Securit ...

CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines (NDSS '19)

CodeAlchemist CodeAlchemist is a JavaScript engine fuzzer that improves classic grammar-based JS engine fuzzers by a novel test case generation algorithm, called semantics-aware assembly The details of the algorithm is in our paper, "CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines", which appeared in NDSS 2019 This is a s

CWE-119 https://support.apple.com/kb/HT209198 https://support.apple.com/kb/HT209197 https://support.apple.com/kb/HT209196 https://support.apple.com/kb/HT209195 https://support.apple.com/kb/HT209194 https://support.apple.com/kb/HT209192 https://nvd.nist.gov https://usn.ubuntu.com/3828-1/https://security.archlinux.org/CVE-2018-4372

CVE-2018-4372

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect