Apple Safari WebKit JavaScriptCore Argument Object Type Confusion

Strike ID:
E20-0xic1
CVSS:
8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
1
Year:
2019

Description

This strike exploits a vulnerability in Apple WebKit. Specifically, an attacker can craft JavaScript in such a way that when reconstructing arguments objects type confusion can occur leading to a denial of service in the browser.

CVE

Google