CVE-2016-10226

JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitfield out-of-bounds read and application crash) via crafted JavaScript code that is mishandled in the operatorString function, related to assembler/MacroAssemblerARM64.h, assembler/MacroAssemblerX86Common.h, and wasm/WasmB3IRGenerator.cpp.

• CWE-125

• https://bugs.webkit.org/show_bug.cgi?id=165091Issue Tracking, Third Party Advisory
• https://trac.webkit.org/changeset/209295Issue Tracking, Third Party Advisory
• https://bugs.webkit.org/show_bug.cgi?id=165091Issue Tracking, Third Party Advisory
• https://trac.webkit.org/changeset/209295Issue Tracking, Third Party Advisory

Published

Apr 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10220The gs_makewordimagedevice function in base/gsdevmem.c in Ar…
• CVE-2016-10221The count_entries function in pdf-layer.c in Artifex Softwar…4.3
• CVE-2016-10222runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distr…
• CVE-2016-10223An issue was discovered in BigTree CMS before 4.2.15. The vu…
• CVE-2016-10224An issue was discovered in Sauter NovaWeb web HMI. The appli…7.2
• CVE-2016-10225The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3…7.8
• CVE-2016-10227Zyxel USG50 Security Appliance and NWA3560-N Access Point al…
• CVE-2016-10228The iconv program in the GNU C Library (aka glibc or libc6) …
• CVE-2016-10229udp.c in the Linux kernel before 4.5 allows remote attackers…9.8
• CVE-2016-1023Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8
• CVE-2016-10230A remote code execution vulnerability in the Qualcomm crypto…
• CVE-2016-10231An elevation of privilege vulnerability in the Qualcomm soun…