Read the docs
Red Hat Security Advisory

RHSA-2024:2126

webkit2gtk3 security update

Released 2024-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 13 records

TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2023-22971 CVE-2023-42890 · GHSA-mw7v-292c-8697

Code injection in Apple Safari

Priority MEDIUM 46

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03208 Published 2023-12-12 Partial fix · 17.2, 14.2 +1 CWE-94
TI-2023-21233 CVE-2023-40414 · GHSA-rvwq-r5pc-g3h9

Use after free in Apple iOS and iPadOS

Priority MEDIUM 45

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2024-01-10 Partial fix · 17, 14 +1 CWE-416
TI-2023-23039 CVE-2023-42970 · GHSA-9v5v-qfv2-66qp

Use after free in Apple iOS and iPadOS

Priority MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00571 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-416
TI-2023-20826 CVE-2023-39928 · GHSA-7245-jcxv-7q52

Use after free in Webkit

Priority MEDIUM 41

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01446 Published 2023-10-06 Partial fix CWE-416
TI-2023-22959 CVE-2023-42875 · GHSA-5892-jw8m-4684

Code injection in Apple iOS and iPadOS

Priority LOW 35

Processing web content may lead to arbitrary code execution.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00555 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-94
TI-2024-15376 CVE-2024-23271 · GHSA-c7hr-m654-77g5

Improper access control in Apple Safari

Priority LOW 33

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00801 Published 2024-04-24 Partial fix · 17.3, 14.3 +1 CWE-284
TI-2023-22365 CVE-2023-41983 · GHSA-ch8m-5863-fcr7

Memory corruption in Apple iOS and iPadOS

Priority LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2023-10-25 Partial fix · 16.7, 17.1 +1 CWE-119