WebKit JSC JSObject::putInlineSlow / JSValue::putToPrimitive XSS
WebKit JSC JSObject::putInlineSlow and JSValue::putToPrimitive suffer...
WebKit WebCore::Node::nextSibling Use-After-Free
WebKit suffers from a WebCore::Node::nextSibling use-after-free...
WebKit WebCore::getCachedWrapper Use-After-Free
WebKit suffers from a WebCore::getCachedWrapper use-after-free...
WebKit WebCore::Node::getFlag Use-After-Free
WebKit suffers from a WebCore::Node::getFlag use-after-free...
WebKit WebCore::InputType::element Use-After-Free
WebKit suffers from a WebCore::InputType::element use-after-free...
WebKit WebCore::AccessibilityRenderObject::handleAriaExpandedChanged Use-After-Free
WebKit suffers from a WebCore::AccessibilityRenderObject::handleAriaExpandedChanged use-after-free...
WebKit WebCore::RenderObject Use-After-Free
WebKit suffers from a use-after-free vulnerability...
WebKit WebCore::AccessibilityNodeObject::textUnderElement Use-After-Free
WebKit suffers from a WebCore::AccessibilityNodeObject::textUnderElement use-after-free...
WebKit WebCore::RenderSearchField::addSearchResult Heap Buffer Overflow
WebKit suffers from a WebCore::RenderSearchField::addSearchResult heap...
WebKit JSC ArgumentsEliminationPhase::transform Incorrect LoadVarargs Handling
WebKit JSC suffers from incorrect LoadVarargs...