vendor:
WebKit
by:
7.5
CVSS
HIGH
Use-After-Free
416
CWE
Product Name: WebKit
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Regression Test UXSS in WebKit
The PoC code creates an iframe and appends it to the body. It then attempts to adopt the iframe using `adoptNode` from another iframe's content document. This triggers a use-after-free vulnerability, leading to a heap-use-after-free error. The vulnerability can potentially be used to achieve UXSS (Universal Cross-Site Scripting) in WebKit.
Mitigation:
Apply the appropriate patches provided by the vendor.
