| CVE-2019-17003 |
Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed
|
6.1
Moyenne
|
16 févr. 2023 |
| CVE-2022-31746 |
Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header
|
6.5
Moyenne
|
22 déc. 2022 |
| CVE-2022-1887 |
The search term could have been specified externally to trigger SQL injection
|
9.8
Critique
|
22 déc. 2022 |
| CVE-2021-29958 |
When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led…
|
Non notée
|
24 juin 2021 |
| CVE-2020-15651 |
A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI…
|
Non notée
|
10 août 2020 |
| CVE-2020-15662 |
A rogue webpage could override the injected WKUserScript used by the download feature, this exploit could result in…
|
Non notée
|
10 août 2020 |
| CVE-2020-15661 |
A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in…
|
Non notée
|
10 août 2020 |
| CVE-2020-12414 |
IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-12404 |
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging…
|
Non notée
|
9 juil. 2020 |
| CVE-2020-6830 |
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the…
|
Non notée
|
26 mai 2020 |