The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for remote attackers to bypass CSRF protection mechanisms via a crafted web site.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Jul 27, 2015 | Jul 2, 2015 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 6.2.7Upgrade to Apple Safari version 8.0.7Upgrade to Apple Safari version 7.1.7 | Aug 28, 2015 | Jul 2, 2015 |
| Suse | — | Upgrade typelib-1_0-JavaScriptCore-1_0Upgrade libjavascriptcoregtk-1_0-0Upgrade libwebkitgtk3-develUpgrade libwebkitgtk-1_0-0Upgrade typelib-1_0-JavaScriptCore-3_0Upgrade libwebkitgtk3-langUpgrade libjavascriptcoregtk-1_0-0-32bitUpgrade typelib-1_0-WebKit-3_0Upgrade libwebkitgtk2-langUpgrade libwebkitgtk-3_0-0Upgrade typelib-1_0-WebKit-1_0Upgrade libwebkitgtk-develUpgrade libjavascriptcoregtk-3_0-0Upgrade libwebkitgtk-1_0-0-32bit | Apr 7, 2016 | Jul 2, 2015 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-3.0-0Upgrade libwebkitgtk-3.0-0Upgrade libwebkitgtk-1.0-0Upgrade libjavascriptcoregtk-1.0-0 | Mar 22, 2016 | Jul 2, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub