Red Hat Security Advisory

RHSA-2024:9553

webkit2gtk3 security update

Released 2024-11-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.46.3-1.el9_5, webkit2gtk3-devel-2.46.3-1.el9_5, webkit2gtk3-jsc-2.46.3-1.el9_5 +1

TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2025-28182 CVE-2025-43480 · GHSA-wg34-qg7p-mhvv

LOW 38

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00491 Published 2025-11-04 Partial fix · 26.1 CWE-942

TI-2024-18468 CVE-2024-27856 · GHSA-55ww-9933-hhf5

LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00622 Published 2025-01-15 Partial fix · 17.5, 16.7.8 +3 CWE-94

TI-2024-27245 CVE-2024-40866 · GHSA-h9cp-5vvc-8wqc

LOW 31

The issue was addressed with improved UI.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00933 Published 2024-09-16 Partial fix · 18, 15

TI-2024-29753 CVE-2024-44187 · GHSA-xmf6-p99q-898v

LOW 30

A cross-origin issue existed with "iframe" elements.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00646 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-346

TI-2024-29751 CVE-2024-44185 · GHSA-xjj4-3gwf-mwqh

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00289 Published 2024-10-24 Partial fix · 17.6, 14.6 +2

TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787