- multiple flaws with malformed text (buffer overflow, use after free) - stack overflow with malformed text [CVE-2018-6196] - null deref with malformed text [CVE-2018-6197] - /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198] Reminded by and ok tj@