Nirankush Panchbhai

The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect.

The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site, due to improper restriction of read access to videos derived from CANVAS elements.

The issue allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content, due to improper verification of the origin of video content.

The issue allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site, due to improper restriction of read access to images derived from CANVAS elements.

The issue concerns multiple vulnerabilities in the freetype2 package, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely, potentially allowing attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a crafted font.