Renata Hodovan

**Nome do software vulnerável e versões afetadas** Versões do Google Chrome anteriores à 88.0.4324.96 **Descrição** O problema está relacionado a uma vulnerabilidade do tipo “use after free” no mecanismo Blink do Google Chrome, o que pode levar à corrupção da pilha (heap). Isso pode ser explorado por um invasor remoto por meio de uma página HTML maliciosa, permitindo potencialmente a execução de código arbitrário. **Recomendações** Para versões anteriores à 88.0.4324.96, atualize para a versão 88.0.4324.96 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso a páginas HTML potencialmente maliciosas até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 8.3, update to version 8.3 or later. For Apple TV versions prior to 7.2, update to version 7.2 or later. For Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5, update to version 6.2.5, 7.1.5, or 8.0.5 or later, respectively.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is a different issue than other vulnerabilities listed in various Apple security updates. **Recommendations** For Apple iOS versions prior to 7.1.2, update to version 7.1.2 or later. For Apple Safari versions prior to 6.1.5, update to version 6.1.5 or later. For Apple Safari 7.x versions prior to 7.0.5, update to version 7.0.5 or later. For Apple TV versions prior to 6.1.2, update to version 6.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** WebKit versions prior to 6.1.3 WebKit versions 7.x prior to 7.0.3 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is a different issue than other WebKit vulnerabilities. **Recommendations** For WebKit versions prior to 6.1.3, update to version 6.1.3 or later. For WebKit versions 7.x prior to 7.0.3, update to version 7.0.3 or later.