ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Nov 30, 2023 · ZeroDay Catalog

    Critical Memory Corruption Vulnerability in Apple WebKit

    A memory corruption vulnerability in Apple’s WebKit could allow for code execution through malicious web content, impacting multiple products.

    What changed

    Apple has identified a memory corruption vulnerability within WebKit that affects several of its products. This flaw can lead to arbitrary code execution when users interact with specially crafted web content.

    The vulnerability underscores the importance of addressing potential security risks associated with web browsing and HTML content processing.

    Who is affected

    The vulnerability affects a range of Apple products, as well as other applications that utilize WebKit for HTML processing.

    Organizations using affected products should be aware of the potential risks and take necessary precautions.

    • Apple iOS devices
    • Apple iPadOS devices
    • Apple macOS systems
    • Apple Safari browser

    What to do

    Users and administrators are advised to apply the latest updates from Apple to mitigate the risks associated with this vulnerability.

    Regular monitoring of security advisories and prompt patching of affected systems is essential to maintain security.

    • Update all Apple devices to the latest software version.
    • Review and apply security patches for any non-Apple products that utilize WebKit.
    • Educate users about the risks of interacting with untrusted web content.

    Original report

  2. Research · Nov 29, 2023 · ZeroDay Catalog

    Google Skia Integer Overflow Vulnerability Discovered

    A newly identified integer overflow vulnerability in Google Skia could allow remote attackers to escape the sandbox, impacting multiple Google products.

    What changed

    An integer overflow vulnerability has been identified in Google Skia, a graphics library used in various Google products. This flaw could allow remote attackers to exploit the renderer process, potentially leading to a sandbox escape through specially crafted files.

    Who is affected

    The vulnerability impacts several key products and platforms from Google, which may expose users and organizations to risks if not addressed promptly.

    • Google Chrome
    • ChromeOS
    • Android devices
    • Flutter applications

    What to do

    Organizations using affected Google products should prioritize updating to the latest versions to mitigate the risk associated with this vulnerability. Continuous monitoring for any related security advisories is also recommended.

    • Update Google Chrome and ChromeOS to the latest version.
    • Ensure Android devices are running the most recent updates.
    • Monitor Flutter applications for any patches or updates related to this vulnerability.

    Original report