<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 17:58:55 +0000</lastBuildDate>
    <item>
      <title>CVE-2018-4200</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2018-4200</link>
      <description>&lt;p&gt;An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the &amp;#34;WebKit&amp;#34; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the &amp;#34;WebKit&amp;#34; component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2018-4200</guid>
    </item>
    <item>
      <title>USN-3640-1 — webkit2gtk vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-3640-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk&lt;/p&gt;
&lt;p&gt;Ivan Fratric discovered that WebKitGTK+ incorrectly handled certain web
content. If a user were tricked into viewing a malicious website, a remote
attacker could possibly exploit this to execute arbitrary code.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: webkit2gtk&lt;/p&gt;
&lt;p&gt;Ivan Fratric discovered that WebKitGTK+ incorrectly handled certain web
content. If a user were tricked into viewing a malicious website, a remote
attacker could possibly exploit this to execute arbitrary code.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-3640-1</guid>
    </item>
  </channel>
</rss>
