| CVE-2019-17003 |
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed
|
6.1
Medium
|
Feb 16, 2023 |
| CVE-2022-31746 |
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header
|
6.5
Medium
|
Dec 22, 2022 |
| CVE-2022-1887 |
The search term could have been specified externally to trigger SQL injection
|
9.8
Critical
|
Dec 22, 2022 |
| CVE-2021-29958 |
When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led…
|
Not rated
|
Jun 24, 2021 |
| CVE-2020-15651 |
A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15662 |
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-15661 |
A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in…
|
Not rated
|
Aug 10, 2020 |
| CVE-2020-12414 |
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-12404 |
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging…
|
Not rated
|
Jul 9, 2020 |
| CVE-2020-6830 |
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the…
|
Not rated
|
May 26, 2020 |