Dongzhuo Zhao

يؤدي اقتطاع حجم الأعداد الصحيحة في منصة Windows Advanced Rasterization Platform (WARP) إلى تمكين مهاجم غير مصرح له من رفع مستوى الامتيازات محليًّا.

تتعلق المشكلة بثغرة أمنية تتعلق بخلط الأنواع. قد يؤثر الاستغلال الناجح لهذه الثغرة على توفر الخدمة.

A Buffer Overflow issue allows an attacker to cause a denial of service via the function `jsvGarbageCollectMarkUsed` in file `src/jsvar.c`.

This issue involves a memory buffer overflow in iPadOS, tvOS, Safari, iOS, watchOS, and macOS Monterey. The problem was addressed through improved bounds checks. Processing maliciously crafted web content may lead to arbitrary code execution. The vulnerability has been added to CISA’s Known Exploited Vulnerabilities catalog. A similar issue was found in webkitgtk and wpewebkit where processing maliciously crafted web content may also lead to arbitrary code execution.

The issue is related to insufficient input validation in web page rendering modules, which may allow a remote attacker to execute arbitrary code or cause a denial of service. Processing maliciously crafted web content may lead to arbitrary code execution due to a memory corruption issue addressed with improved state management.

A memory corruption issue was addressed with improved validation. Processing maliciously crafted web content may lead to arbitrary code execution.

A memory corruption issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a WebKit display module vulnerability, which is associated with a buffer overflow in memory. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.

A memory corruption issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a WebKit display module vulnerability, which is associated with a buffer overflow in memory. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary code.

The issue arises from multiple memory corruption problems that have been addressed through improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

The issue arises from multiple memory corruption problems related to memory handling, which can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution.

The issue arises from multiple memory corruption problems related to memory handling, which can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution.