zero-day exploit chain AFFECTS WebKit
The first stage of the exploit chain targeted a bug in WebKit.
Explicit Confidence 98% · Jack Rhysider EP 100 Details
“That JavaScript program tries to exploit a bug in WebKit”
Software
software:webkit
Browser engine used by Safari and described as the component exploited during the first stage of Pegasus’s iPhone attack chain.
Browser engine used by Safari and described as the component exploited during the first stage of Pegasus’s iPhone attack chain.
“Safari uses a thing called WebKit which is like the browser’s engine.”
Apple browser engine used by Safari and formerly used as the basis of Chrome, according to the episode.
“This is the browser engine that Apple’s Safari browser uses”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | AFFECTS | zero-day exploit chain | Explicit | 100 |
| incoming | USES | Safari | Explicit | 127 |
| incoming | USES | Chrome | Explicit | 127 |
| incoming | AFFECTS | zombie bug | Explicit | 127 |
zero-day exploit chain AFFECTS WebKit
The first stage of the exploit chain targeted a bug in WebKit.
Explicit Confidence 98% · Jack Rhysider EP 100 Details
“That JavaScript program tries to exploit a bug in WebKit”
Safari uses WebKit as its browser engine.
Explicit Confidence 99% · Jack Rhysider EP 127 Details
“WebKit product. This is the browser engine that Apple’s Safari browser uses”
Chrome was built on top of WebKit at the time the original bug was reported, before splitting off in 2014.
Explicit Confidence 98% · Maddie Stone EP 127 Details
“Chrome was still built on top of WebKit as their browser engine”
zombie bug AFFECTS WebKit
The zombie bug was a vulnerability in WebKit that had been fixed, reintroduced, and later exploited in the wild before being patched again.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“this was a zombie bug and that it had actually been originally fixed back in 2013”
“here we were in 2022 with the bug exploited in the wild and patched again”