>> TAG: #0day

WebKit – ‘WebCore::Style::TreeResolver::styleForElement’ Use-After-Free

WebKit – ‘WebCore::SimpleLineLayout::RunResolver::runForPoint’ Out-of-Bounds Read

WebKit – ‘WebCore::AXObjectCache::performDeferredCacheUpdate’ Use-After-Free

WebKit – ‘WebCore::RenderText::localCaretRect’ Out-of-Bounds Read

WebKit – ‘WebCore::InputType::element’ Use-After-Free

WebKit – ‘WebCore::PositionIterator::decrement’ Use-After-Free

Microsoft Windows 10 – ‘nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)’ Pool Memory Disclosure

Vonage VDV-23 – Denial of Service

iOS < 11.1 / tvOS < 11.1 / watchOS < 4.1 – Denial of Service

Microsoft Windows 10 – CiSetFileCache TOCTOU Security Feature Bypass