Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Remote Code Execution Vulnerability in WebKitGTK

A memory corruption vulnerability in WebKitGTK allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial-of-service condition by processing maliciously crafted web content.

WebKitGTK vulnerability rce linux
1t 1c
high advisory

Malicious Packagist Composer Themes Deploying iOS Spyware

Threat actors are distributing 13 malicious Composer themes via Packagist to compromise streaming websites and deploy a WebKit-to-kernel exploit chain against iOS visitors for data exfiltration and cryptocurrency wallet theft.

iOS +1 supply-chain mobile-malware web-security cryptocurrency-theft spyware
4t 2c 1i