ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Nov 30, 2023

    Critical Memory Corruption Vulnerability in Apple WebKit

    A serious memory corruption vulnerability has been identified in Apple's WebKit, potentially allowing for code execution through malicious web content.

    What changed

    A memory corruption vulnerability has been discovered in WebKit, the underlying engine used by several Apple products. This flaw can lead to arbitrary code execution when users interact with specially crafted web content.

    The vulnerability poses significant risks, especially in environments where HTML parsers that utilize WebKit are deployed.

    Who is affected

    Various Apple products are impacted by this vulnerability, highlighting the widespread nature of the issue across different platforms.

    The following groups and products are specifically affected:

    • Apple iOS devices, including iPhones and iPads.
    • Apple macOS systems.
    • Apple's Safari browser.
    • Non-Apple products that utilize WebKit for HTML processing.

    What to do

    Users and organizations should remain vigilant and apply any available security updates from Apple promptly to mitigate potential risks.

    It's advisable to monitor for further announcements regarding this vulnerability and its implications.

  2. Research · Nov 29, 2023

    Critical Integer Overflow Vulnerability Discovered in Google Skia

    A newly identified integer overflow vulnerability in Google Skia could allow remote attackers to escape the sandbox, posing a significant risk to various Google products.

    What changed

    A serious integer overflow vulnerability has been discovered in Google Skia, which is integral to several Google products. This flaw could enable attackers to compromise the renderer process and potentially escape the sandbox, leading to unauthorized access.

    Who is affected

    The vulnerability impacts a range of Google products, making it critical for users and organizations to be aware of the risks involved.

    Affected products include:

    • Google Chrome
    • ChromeOS
    • Android
    • Flutter

    What to do

    Users and organizations should prioritize updating their affected Google products to mitigate the risks associated with this vulnerability. Regular security audits and monitoring for unusual activity are also recommended.