Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj4h-m2xv-4349

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

EPSS

Процентиль: 77%
0.01792
Низкий

Дефекты

CWE-20

Связанные уязвимости

ubuntu
больше 12 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

redhat
больше 11 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

nvd
больше 12 лет назад

WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access.

EPSS

Процентиль: 77%
0.01792
Низкий

Дефекты

CWE-20