Threats Tagged 'cve-2024-27856'

CVE-2024-27856 is a high-severity vulnerability in Apple Safari where processing a specially crafted file may cause the application to terminate unexpectedly or allow arbitrary code execution. This issue is addressed by improved input validation and checks. The vulnerability affects multiple Apple platforms including Safari on iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Apple has released fixes in Safari 17.5 and corresponding OS updates such as iOS 16.7.8, iOS 17.5, macOS Sonoma 14.5, and others. The vulnerability has a CVSS score of 7.

Multiple security vulnerabilities have been identified in WebKitGTK, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9. These include address bar spoofing, cross-origin data exfiltration, unexpected process crashes, memory corruption, and potential arbitrary code execution triggered by processing malicious web content or files. Red Hat has issued an important security update (RHSA-2024:9553) addressing these issues. The update is available for various Red Hat Enterprise Linux 9 variants and architectures.