Red Hat Security Advisory

RHSA-2022:7704

webkit2gtk3 security and bug fix update

Released 2022-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) glib2-doc-2.56.4-159.el8, glib2-static-2.56.4-159.el8
Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.36.7-1.el8, webkit2gtk3-devel-2.36.7-1.el8, webkit2gtk3-jsc-2.36.7-1.el8 +1
Red Hat Enterprise Linux BaseOS (v. 8) glib2-2.56.4-159.el8, glib2-devel-2.56.4-159.el8, glib2-fam-2.56.4-159.el8 +1

Fixes 14 records

TI-2022-09957 CVE-2022-26700 · GHSA-6mqr-f9rh-mggr

Out-of-bounds write in Apple macOS

MEDIUM 49

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01472 Published 2022-09-23 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-06888 CVE-2022-22624 · GHSA-w76j-g6q7-46hq

Use after free in Apple Safari

MEDIUM 49

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01321 Published 2022-09-23 Partial fix · 15.4, 12.3 CWE-416

TI-2022-06893 CVE-2022-22629 · GHSA-pp63-cgj5-h996

Out-of-bounds write in Apple Safari

MEDIUM 48

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05046 Published 2022-09-23 Partial fix · 15.4, 12.3 +2 CWE-787

TI-2022-14332 CVE-2022-32792 · GHSA-p8vh-mwc9-r3jw

Out-of-bounds write in Apple macOS

MEDIUM 44

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02302 Published 2022-09-23 Partial fix · 12.5, 15.6 +1 CWE-787

TI-2022-09972 CVE-2022-26717 · GHSA-53cf-5qp4-7jrr

Use after free in Apple macOS

MEDIUM 44

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02035 Published 2022-11-01 Partial fix · 12.4, 15.5 +2 CWE-416

TI-2022-09974 CVE-2022-26719 · GHSA-98pr-6p46-3665

Out-of-bounds write in Apple macOS

MEDIUM 43

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0124 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-06892 CVE-2022-22628 · GHSA-f8p7-rhpm-pg98

Use after free in Apple Safari

MEDIUM 43

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01321 Published 2022-09-23 Partial fix · 15.4, 12.3 +1 CWE-416

TI-2022-09971 CVE-2022-26716 · GHSA-q548-f4xm-m4gm

Out-of-bounds write in Apple macOS

MEDIUM 42

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01141 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-787

TI-2022-09966 CVE-2022-26710 · GHSA-qm8r-pwq4-p842

Use after free in Apple macOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01109 Published 2022-11-01 Partial fix · 12.4, 8.6 +1 CWE-416

TI-2022-09965 CVE-2022-26709 · GHSA-xcg6-3xh5-6m77

Use after free in Apple macOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01109 Published 2022-11-01 Partial fix · 12.4, 15.5 +1 CWE-416

TI-2022-14351 CVE-2022-32816 · GHSA-jjrw-xpw9-v3qh

Apple macOS: Visiting a website that frames malicious content may lead to UI spoofing

MEDIUM 40

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.08191 Published 2022-09-23 Partial fix · 12.5, 15.6 +1 CWE-451

TI-2022-12529 CVE-2022-30293 · GHSA-vmhh-gfrw-g264

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in…

LOW 37

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer in WebCore/platform/graphics/texmap/TextureMapperLayer.cpp.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02221 Published 2022-05-06 Fixed CWE-787

TI-2022-06924 CVE-2022-22662 · GHSA-83p3-v4fm-fxh5

Apple macOS: Processing maliciously crafted web content may disclose sensitive user…

LOW 32

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01417 Published 2022-05-26 Partial fix · 11.6, 2022

TI-2022-14418 CVE-2022-32891 · GHSA-3r34-xx92-673h

Clickjacking in Apple iOS

LOW 28

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00711 Published 2023-02-27 Partial fix · 16, 9 CWE-1021