Published: 03/04/2019 Updated: 05/04/2019

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple memory corruption issues have been found in WebKitGTK+ prior to 2.22.5, where processing maliciously crafted web content may lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple watchos
apple tvos
apple safari
apple itunes
apple icloud

Several security issues were fixed in WebKitGTK+ ...

Multiple memory corruption issues have been found in WebKitGTK+ before 2225, where processing maliciously crafted web content may lead to arbitrary code execution ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2018-12-05-3 tvOS 1211 tvOS 1211 is now available and addresses the following: Airport Available for: Apple TV 4K and Apple TV (4th generation) Impact: A malicious application may be able to elevate privileges Description: A type confusion issue was addressed with improved memory handl ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2018-12-05-1 iOS 1211 iOS 1211 is now available and addresses the following: Airport Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to elevate privileges Description: A type confusion issue was addressed ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2018-12-05-4 Safari 1202 Safari 1202 is now available and addresses the following: Safari Available for: macOS Sierra 10126, macOS High Sierra 10136, and macOS Mojave 10141 Impact: Visiting a malicious website may lead to address bar spoofing Description: A logic issue was addres ...

CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines (NDSS '19)

CodeAlchemist CodeAlchemist is a JavaScript engine fuzzer that improves classic grammar-based JS engine fuzzers by a novel test case generation algorithm, called semantics-aware assembly The details of the algorithm is in our paper, "CodeAlchemist: Semantics-Aware Code Generation to Find Vulnerabilities in JavaScript Engines", which appeared in NDSS 2019 This is a s

CWE-119 https://support.apple.com/kb/HT209346 https://support.apple.com/kb/HT209345 https://support.apple.com/kb/HT209344 https://support.apple.com/kb/HT209343 https://support.apple.com/kb/HT209342 https://support.apple.com/kb/HT209340 https://usn.ubuntu.com/3854-1/https://nvd.nist.gov https://security.archlinux.org/CVE-2018-4437

CVE-2018-4437

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect