Apple WebKit suffers from a type confusion vulnerability in RenderBox with accessibility enabled. Continue reading...