David Kohlbrenner

A privacy issue exists due to improper memory management, which could allow an application to access sensitive user data.

An inconsistent user interface issue involving state management could allow an application to access sensitive user data.

A potential issue in AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack, potentially enabling information disclosure. The vulnerability is related to the implementation of Dynamic Voltage and Frequency Scaling (DVFS) in AMD processor microcode, which is associated with inadequate protection of physical side channels. Exploitation of the issue may allow a remote attacker to gain unauthorized access to protected information using a side channel.

The issue is related to observable behavioral power management throttling and errors in the dynamic frequency adjustment process of Intel processor microcode, specifically concerning Dynamic Voltage and Frequency Scaling (DVFS) technology. This may allow an authenticated user or a remote attacker to potentially enable information disclosure via network access or side-channel attacks.

The issue involves the WebKit component and allows remote attackers to conduct a timing side-channel attack. This attack can bypass the Same Origin Policy, enabling attackers to obtain sensitive information via a crafted web site that uses SVG filters.

A malicious page can extract pixel values from a targeted user by using SVG filters that don't use the fixed point math implementation on a target iframe. This can be used to extract history information and read text values across domains, violating the same-origin policy and leading to information disclosure.