CVE-2016-10222

Name of the Vulnerable Software and Affected Versions Safari Technology Preview Release 18

Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation and application crash, via crafted JavaScript code. This is due to a "type confusion" in the JSON.stringify function.

Recommendations For Safari Technology Preview Release 18, consider avoiding the use of the JSON.stringify function with untrusted input until a patch is available. As a temporary workaround, restrict the execution of crafted JavaScript code to minimize the risk of exploitation.