Red Hat Security Advisory

RHSA-2023:4201

webkit2gtk3 security update

Released 2023-07-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.38.5-1.el9_2.3, webkit2gtk3-devel-2.38.5-1.el9_2.3, webkit2gtk3-jsc-2.38.5-1.el9_2.3 +1

Fixes 22 records

TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843

TI-2023-22374 CVE-2023-41993 · GHSA-2hcr-79rm-r8rp

Improper check for unusual conditions in Apple macOS

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23709 Published 2023-09-21 Partial fix · 14 CWE-754

TI-2023-19062 CVE-2023-37450 · GHSA-v874-wp44-mhr4

Apple Safari: Processing web content may lead to arbitrary code execution

CRITICAL 97KEV

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.1895 Published 2023-07-26 Partial fix · 16.5, 16.6 +2

TI-2023-15726 CVE-2023-32439 · GHSA-rh53-wvg6-9v8m

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23968 Published 2023-06-23 Partial fix · 15.7, 16.5 +1 CWE-843

TI-2023-15722 CVE-2023-32435 · GHSA-xqxr-jq6f-63f9

Out-of-bounds write in Apple macOS

CRITICAL 97KEV

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.22951 Published 2023-06-23 Partial fix · 13.3, 15.7 +1 CWE-787

TI-2023-22995 CVE-2023-42916 · GHSA-95hw-v8fq-666q

Out-of-bounds read in Apple Safari

CRITICAL 86KEV

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17823 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-125

TI-2024-18448 CVE-2024-27834 · GHSA-4rmp-jjj9-cfm4

Pointer Authentication bypass in Apple Safari, iOS and macOS

HIGH 82KEV

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01502 Published 2024-05-13 Partial fix · 17.5, 16.7.8 +2 CWE-287

TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400

TI-2023-21698 CVE-2023-41074 · GHSA-xq9m-9whg-jv3m

Code injection in Apple iOS and iPadOS

MEDIUM 47

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04122 Published 2023-09-26 Partial fix · 17, 14 +1 CWE-94

TI-2023-17546 CVE-2023-35074 · GHSA-6xcr-xqjv-c7jp

Apple iOS and iPadOS: Processing web content may lead to arbitrary code execution

MEDIUM 43

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01584 Published 2023-09-26 Partial fix · 17, 14 +1

TI-2024-18447 CVE-2024-27833 · GHSA-984g-34ww-rvq9

Integer overflow in Apple Safari

MEDIUM 42

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +1 CWE-190

TI-2024-18422 CVE-2024-27808 · GHSA-pwf2-5r2p-9c9w

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0118 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-786

TI-2025-22444 CVE-2025-31204 · GHSA-9wc3-7frf-f65v

Memory corruption in Apple Safari

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119

TI-2023-19967 CVE-2023-38595 · GHSA-xf6p-jxqp-mvh4

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01264 Published 2023-07-27 Partial fix · 16.6, 13.5 +1

TI-2023-19966 CVE-2023-38594 · GHSA-rv3f-cww5-rv8r

Apple Safari: Processing web content may lead to arbitrary code execution

MEDIUM 41

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01243 Published 2023-07-26 Partial fix · 16.6, 13.5 +2

TI-2022-14412 CVE-2022-32885

Out-of-bounds write in Apple macOS

MEDIUM 41

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00799 Published 2023-05-08 Partial fix · 12.5, 15.6 CWE-787

TI-2023-12762 CVE-2023-28198 · GHSA-p6rj-wprj-c52h

Use after free in Apple macOS

MEDIUM 40

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00926 Published 2023-08-14 Partial fix · 13.3, 16.4 CWE-416

TI-2025-17972 CVE-2025-24223 · GHSA-7mch-v7x5-pxc4

Cross-site request forgery in Apple Safari

LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00329 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352

TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79

TI-2025-22454 CVE-2025-31215 · GHSA-3jpv-h4fh-v8h9

Improper input validation in Apple Safari

LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00654 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-20

TI-2024-36632 CVE-2024-54658 · GHSA-rf6c-m595-cvc8

Uncontrolled resource consumption in Apple Safari

LOW 30

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00536 Published 2025-02-10 Partial fix · 17.4, 14.4 +2 CWE-400

TI-2025-22446 CVE-2025-31206 · GHSA-wv7w-fgmw-6vg2

Type confusion in Apple Safari

LOW 22

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01004 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-843