Showing 1 - 12 of 12

CVE-2021-30849

Status Candidate

Overview

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Related Files

Red Hat Security Advisory 2022-1777-01: Posted May 11, 2022; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2022-1777-01 - WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Issues addressed include buffer overflow, bypass, code execution, cross site scripting, information leakage, out of bounds read, and use-after-free vulnerabilities.; tags | advisory, web, overflow, vulnerability, code execution, xss; systems | linux, redhat; advisories | CVE-2021-30809, CVE-2021-30818, CVE-2021-30823, CVE-2021-30836, CVE-2021-30846, CVE-2021-30848, CVE-2021-30849, CVE-2021-30851, CVE-2021-30884, CVE-2021-30887, CVE-2021-30888, CVE-2021-30889, CVE-2021-30890, CVE-2021-30897, CVE-2021-30934, CVE-2021-30936, CVE-2021-30951, CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984, CVE-2021-45481, CVE-2021-45482, CVE-2021-45483, CVE-2022-22589, CVE-2022-22590; SHA-256 | 1b42edcf15bc395449a2f06f7c24ba1c5002c9b86ced5974af0fc8fe1f4ffeb1; Download | Favorite | View

Apple Security Advisory 2021-10-26-11: Posted Oct 28, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-10-26-11 - tvOS 15 addresses bypass, code execution, denial of service, out of bounds read, and use-after-free vulnerabilities.; tags | advisory, denial of service, vulnerability, code execution; systems | apple; advisories | CVE-2013-0340, CVE-2021-30808, CVE-2021-30809, CVE-2021-30810, CVE-2021-30814, CVE-2021-30818, CVE-2021-30823, CVE-2021-30831, CVE-2021-30834, CVE-2021-30835, CVE-2021-30836, CVE-2021-30837, CVE-2021-30840, CVE-2021-30841, CVE-2021-30842, CVE-2021-30843, CVE-2021-30846, CVE-2021-30847, CVE-2021-30849, CVE-2021-30850, CVE-2021-30851, CVE-2021-30852, CVE-2021-30854, CVE-2021-30857, CVE-2021-30866, CVE-2021-30884; SHA-256 | ebc2c5586dda25fcb5f1755935d9df8d22fe96d473608b04490304ef6ab1c4c2; Download | Favorite | View

Apple Security Advisory 2021-10-26-10: Posted Oct 28, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-10-26-10 - watchOS 8 addresses bypass, code execution, denial of service, out of bounds read, and use-after-free vulnerabilities.; tags | advisory, denial of service, vulnerability, code execution; systems | apple; advisories | CVE-2013-0340, CVE-2021-30808, CVE-2021-30809, CVE-2021-30810, CVE-2021-30811, CVE-2021-30814, CVE-2021-30818, CVE-2021-30823, CVE-2021-30831, CVE-2021-30834, CVE-2021-30835, CVE-2021-30836, CVE-2021-30837, CVE-2021-30840, CVE-2021-30841, CVE-2021-30842, CVE-2021-30843, CVE-2021-30846, CVE-2021-30847, CVE-2021-30849, CVE-2021-30851, CVE-2021-30852, CVE-2021-30854, CVE-2021-30855, CVE-2021-30857, CVE-2021-30866; SHA-256 | c5261977f132d063b33bfb8ae7574fbc455fc4460c7118b7e500205e5c5300a6; Download | Favorite | View

Apple Security Advisory 2021-10-26-9: Posted Oct 28, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-10-26-9 - iOS 15 and iPadOS 15 addresses code execution, denial of service, out of bounds read, spoofing, and use-after-free vulnerabilities.; tags | advisory, denial of service, spoof, vulnerability, code execution; systems | apple, ios; advisories | CVE-2013-0340, CVE-2021-30808, CVE-2021-30809, CVE-2021-30810, CVE-2021-30811, CVE-2021-30814, CVE-2021-30815, CVE-2021-30816, CVE-2021-30818, CVE-2021-30819, CVE-2021-30825, CVE-2021-30826, CVE-2021-30831, CVE-2021-30834, CVE-2021-30835, CVE-2021-30836, CVE-2021-30837, CVE-2021-30838, CVE-2021-30840, CVE-2021-30841, CVE-2021-30842, CVE-2021-30843, CVE-2021-30846, CVE-2021-30847, CVE-2021-30848, CVE-2021-30849; SHA-256 | 58d06760b57771902a8c3f6b64d1ccec806b30ce2ef20836de59cb0ce4327904; Download | Favorite | View

Apple Security Advisory 2021-10-26-8: Posted Oct 28, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-10-26-8 - Safari 15 addresses bypass, code execution, and use-after-free vulnerabilities.; tags | advisory, vulnerability, code execution; systems | apple; advisories | CVE-2021-30809, CVE-2021-30818, CVE-2021-30823, CVE-2021-30846, CVE-2021-30848, CVE-2021-30849, CVE-2021-30851; SHA-256 | c1e6de671257272645ffee09d3fc62a44e6f863f26b481fc5ada1161911eb119; Download | Favorite | View

WebKit DOMWindow::open Heap Use-After-Free: Posted Oct 14, 2021; Authored by Google Security Research, Glazvunov; WebKit suffers from a heap use-after-free vulnerability in DOMWindow::open.; tags | exploit; advisories | CVE-2021-30849; SHA-256 | 1ce53d65a9cc597e9e50a3e264ce0d880897dd9133738769858924fe26e913a5; Download | Favorite | View

Apple Security Advisory 2021-09-20-10: Posted Sep 22, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-09-20-10 - iTunes 12.12 for Windows addresses code execution vulnerabilities.; tags | advisory, vulnerability, code execution; systems | windows, apple; advisories | CVE-2021-30835, CVE-2021-30847, CVE-2021-30849; SHA-256 | 08f2003d8951f0c201309a7f8087e5aeef94b339affd03af4ae0b1d73e36ee76; Download | Favorite | View