Read the docs
Red Hat Security Advisory

RHSA-2024:9636

webkit2gtk3 security update

Released 2024-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 21 records

TI-2024-27164 CVE-2024-40782 · GHSA-4rw8-cxgp-9r2g

Use after free in Apple Safari

Priority MEDIUM 51

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-18434 CVE-2024-27820 · GHSA-qvvc-v3mj-qch5

Memory corruption in Apple Safari

Priority MEDIUM 48

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01016 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-119
TI-2024-04244 CVE-2024-4558 · GHSA-r4j8-j63p-24j8

Use after free in Google Chrome

Priority MEDIUM 46

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01533 Published 2024-05-07 Partial fix · 124.0.6367.155 CWE-416
TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

Priority MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787
TI-2024-18464 CVE-2024-27851 · GHSA-7x84-wx2f-425f

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-119
TI-2023-23047 CVE-2023-43010 · GHSA-4v27-f65g-fr6x

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2026-03-12 Partial fix · 17.2, 14.2 +2 CWE-787
TI-2023-23026 CVE-2023-42950 · GHSA-6cvp-282g-6jp8

Use after free in Apple Safari

Priority MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2024-03-28 Partial fix · 17.2, 14.2 +1 CWE-416
TI-2024-18468 CVE-2024-27856 · GHSA-55ww-9933-hhf5

Code injection in Apple Safari

Priority LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00622 Published 2025-01-15 Partial fix · 17.5, 16.7.8 +3 CWE-94
TI-2024-15376 CVE-2024-23271 · GHSA-c7hr-m654-77g5

Improper access control in Apple Safari

Priority LOW 33

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00801 Published 2024-04-24 Partial fix · 17.3, 14.3 +1 CWE-284
TI-2024-27171 CVE-2024-40789 · GHSA-6mp9-hrx8-6ffg

Out-of-bounds read in Apple Safari

Priority LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01148 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-29753 CVE-2024-44187 · GHSA-xmf6-p99q-898v

Origin validation error in Apple Safari

Priority LOW 30

A cross-origin issue existed with "iframe" elements.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00646 Published 2024-09-16 Partial fix · 18, 15 +2 CWE-346
TI-2024-27162 CVE-2024-40780 · GHSA-j573-cwg3-wh35

Out-of-bounds read in Apple Safari

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.007 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-18452 CVE-2024-27838 · GHSA-j24x-6m7r-h4gp

Cross-site scripting in Apple Safari

Priority LOW 30

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00732 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-79
TI-2024-27161 CVE-2024-40779 · GHSA-7j6x-9hgr-mv7c

Out-of-bounds read in Apple Safari

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00337 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

Out-of-bounds write in Apple Safari

Priority LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787