Renata Hodovan

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 88.0.4324.96 **Description** The issue is related to a use after free in the Blink mechanism of Google Chrome, which can lead to heap corruption. This can be exploited by a remote attacker using a crafted HTML page, potentially allowing the execution of arbitrary code. **Recommendations** For versions prior to 88.0.4324.96, update to version 88.0.4324.96 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 8.3, update to version 8.3 or later. For Apple TV versions prior to 7.2, update to version 7.2 or later. For Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5, update to version 6.2.5, 7.1.5, or 8.0.5 or later, respectively.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 7.1.2 Apple Safari versions prior to 6.1.5 and 7.x prior to 7.0.5 Apple TV versions prior to 6.1.2 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is a different issue than other vulnerabilities listed in various Apple security updates. **Recommendations** For Apple iOS versions prior to 7.1.2, update to version 7.1.2 or later. For Apple Safari versions prior to 6.1.5, update to version 6.1.5 or later. For Apple Safari 7.x versions prior to 7.0.5, update to version 7.0.5 or later. For Apple TV versions prior to 6.1.2, update to version 6.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** WebKit versions prior to 6.1.3 WebKit versions 7.x prior to 7.0.3 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is a different issue than other WebKit vulnerabilities. **Recommendations** For WebKit versions prior to 6.1.3, update to version 6.1.3 or later. For WebKit versions 7.x prior to 7.0.3, update to version 7.0.3 or later.