Summary
A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | webkit2gtk | 2.12.5-0ubuntu0.16.04.1 |
Vulnerabilities 16
-
Unscored —
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execu…
-
Unscored —
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execu…
-
Unscored —
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execu…
-
Unscored —
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attribut…
-
Unscored —
The WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1 allows remote at…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari be…
-
Unscored —
WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a …
-
Unscored —
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memor…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…
-
Unscored —
WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypas…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which al…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…
-
Unscored —
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before …
References
-
report
https://ubuntu.com/security/CVE-2016-1854
-
report
https://ubuntu.com/security/CVE-2016-1856
-
report
https://ubuntu.com/security/CVE-2016-1857
-
report
https://ubuntu.com/security/CVE-2016-1858
-
report
https://ubuntu.com/security/CVE-2016-1859
-
report
https://ubuntu.com/security/CVE-2016-4583
-
report
https://ubuntu.com/security/CVE-2016-4585
-
report
https://ubuntu.com/security/CVE-2016-4586
-
report
https://ubuntu.com/security/CVE-2016-4588
-
report
https://ubuntu.com/security/CVE-2016-4589
-
report
https://ubuntu.com/security/CVE-2016-4590
-
report
https://ubuntu.com/security/CVE-2016-4591
-
report
https://ubuntu.com/security/CVE-2016-4622
-
report
https://ubuntu.com/security/CVE-2016-4623
-
report
https://ubuntu.com/security/CVE-2016-4624
-
report
https://ubuntu.com/security/CVE-2016-4651