Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Privilege Escalation
Google
Chrome
NVD
Exploit-DB
CVSS 2.0
7.5
EPSS
3.6%
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable. No vendor patch available.
Buffer Overflow
Denial Of Service
Apple
RCE
Itunes
NVD
CVSS 2.0
8.3
EPSS
1.2%