WebKit JSC JSObject::putInlineSlow and JSValue::putToPrimitive suffer from a universal cross site scripting vulnerability.
WebKit suffers from a WebCore::Node::nextSibling use-after-free vulnerability.
WebKit suffers from a WebCore::getCachedWrapper use-after-free vulnerability.
WebKit suffers from a WebCore::Node::getFlag use-after-free vulnerability.
WebKit suffers from a WebCore::InputType::element use-after-free vulnerability.
WebKit suffers from a WebCore::AccessibilityRenderObject::handleAriaExpandedChanged use-after-free vulnerability.
WebKit suffers from a use-after-free vulnerability in WebCore::RenderObject with accessibility enabled.
WebKit suffers from a WebCore::AccessibilityNodeObject::textUnderElement use-after-free vulnerability.
WebKit suffers from a WebCore::RenderSearchField::addSearchResult heap buffer overflow vulnerability.
WebKit JSC suffers from incorrect LoadVarargs handling in ArgumentsEliminationPhase::transform.