Read the docs
Red Hat Security Advisory

RHSA-2024:9680

webkit2gtk3 security update

Released 2024-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 30 records

TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

Type confusion in Apple Safari

Priority CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843
TI-2023-23046 CVE-2023-43000 · GHSA-96ff-3rwm-724g

Use after free in Apple macOS

Priority CRITICAL 97KEV

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04042 Published 2025-11-05 Partial fix · 13.5, 16.6 +1 CWE-416
TI-2023-22996 CVE-2023-42917 · GHSA-phhr-cqm7-gjv6

Out-of-bounds write in Apple Safari

Priority CRITICAL 97KEV

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09295 Published 2023-11-30 Partial fix · 17.1, 14.1 CWE-787
TI-2022-24081 CVE-2022-48503 · GHSA-hqf2-wqhm-8v23

Improper array index validation in Apple macOS

Priority CRITICAL 97KEV

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03213 Published 2023-08-14 Partial fix · 12.5, 15.6 +1 CWE-129
TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400
TI-2024-27164 CVE-2024-40782 · GHSA-4rw8-cxgp-9r2g

Use after free in Apple Safari

Priority MEDIUM 51

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00977 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2024-18434 CVE-2024-27820 · GHSA-qvvc-v3mj-qch5

Memory corruption in Apple Safari

Priority MEDIUM 48

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01016 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +3 CWE-119
TI-2024-04244 CVE-2024-4558 · GHSA-r4j8-j63p-24j8

Use after free in Google Chrome

Priority MEDIUM 46

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01533 Published 2024-05-07 Partial fix · 124.0.6367.155 CWE-416
TI-2024-36608 CVE-2024-54534 · GHSA-83g6-wm8c-3hx9

Out-of-bounds write in Apple Safari

Priority MEDIUM 45

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-787
TI-2024-18464 CVE-2024-27851 · GHSA-7x84-wx2f-425f

Memory corruption in Apple Safari

Priority MEDIUM 42

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-119
TI-2024-18447 CVE-2024-27833 · GHSA-984g-34ww-rvq9

Integer overflow in Apple Safari

Priority MEDIUM 42

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +1 CWE-190
TI-2023-23047 CVE-2023-43010 · GHSA-4v27-f65g-fr6x

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2026-03-12 Partial fix · 17.2, 14.2 +2 CWE-787
TI-2025-22444 CVE-2025-31204 · GHSA-9wc3-7frf-f65v

Memory corruption in Apple Safari

Priority MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119
TI-2023-23039 CVE-2023-42970 · GHSA-9v5v-qfv2-66qp

Use after free in Apple iOS and iPadOS

Priority MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00571 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-416
TI-2022-14412 CVE-2022-32885

Out-of-bounds write in Apple macOS

Priority MEDIUM 41

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00799 Published 2023-05-08 Partial fix · 12.5, 15.6 CWE-787
TI-2025-17972 CVE-2025-24223 · GHSA-7mch-v7x5-pxc4

Cross-site request forgery in Apple Safari

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00329 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-352
TI-2024-18468 CVE-2024-27856 · GHSA-55ww-9933-hhf5

Code injection in Apple Safari

Priority LOW 37

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00622 Published 2025-01-15 Partial fix · 17.5, 16.7.8 +3 CWE-94
TI-2023-22959 CVE-2023-42875 · GHSA-5892-jw8m-4684

Code injection in Apple iOS and iPadOS

Priority LOW 35

Processing web content may lead to arbitrary code execution.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00555 Published 2025-04-11 Partial fix · 17, 14 +1 CWE-94
TI-2024-27171 CVE-2024-40789 · GHSA-6mp9-hrx8-6ffg

Out-of-bounds read in Apple Safari

Priority LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01148 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27158 CVE-2024-40776 · GHSA-4645-h4xp-pj82

Use after free in Apple Safari

Priority LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01006 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-416
TI-2025-22454 CVE-2025-31215 · GHSA-3jpv-h4fh-v8h9

Improper input validation in Apple Safari

Priority LOW 30

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00654 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-20
TI-2024-27162 CVE-2024-40780 · GHSA-j573-cwg3-wh35

Out-of-bounds read in Apple Safari

Priority LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.007 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2024-27161 CVE-2024-40779 · GHSA-7j6x-9hgr-mv7c

Out-of-bounds read in Apple Safari

Priority LOW 25

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00337 Published 2024-07-29 Partial fix · 17.6, 16.7.9 +3 CWE-125
TI-2025-22446 CVE-2025-31206 · GHSA-wv7w-fgmw-6vg2

Type confusion in Apple Safari

Priority LOW 22

A type confusion issue was addressed with improved state handling.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01004 Published 2025-05-12 Partial fix · 18.5, 17.7.7 +3 CWE-843
TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

Out-of-bounds write in Apple Safari

Priority LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787