Apple Safari Code Execution and Information Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in Apple Safari, which could be exploited by attackers to gain knowledge of sensitive information or compromise a vulnerable system.

These issues are caused by memory corruptions, use-after-free and information disclosure errors related to RSS feeds, AutoFill feature, and WebKit's handling of element focus, inline elements, dynamic modifications to text nodes, CSS counters, the :first-letter and :first-line pseudo-elements in SVG text elements, foreignObject elements in SVG documents, floating elements in SVG documents, "use" elements in SVG documents, JavaScript string objects, just-in-time compiled JavaScript stubs, JavaScript arrays, regular expressions, and "font-face" and "use" elements in SVG documents, which could be exploited to cause files from the user's system to be sent to a remote server, disclose information to websites without user interaction, or execute arbitrary code by tricking a user into visiting a specially crafted web page.